Scan results

Recommendation: Trustworthy

A well-built personal finance app with no advertising, analytics, or tracking services included. Receipt scanning and AI categorization run entirely on the device, and strong application-layer encryption protects sensitive financial records. The only external data sharing is app usage metrics sent to MacPaw through the Setapp subscription SDK.

Key Findings

Data Security: 2 findings (1 medium, 1 low)

Network Security: 0 findings

Code Safety: 1 finding (1 low)

Privacy: 1 finding (1 low)

Privacy Concerns

What Leaves the Device

• Financial records: synced to iCloud under the developer's own account for cross-device access
• App usage metrics: transmitted to MacPaw through the Setapp subscription SDK

What Stays on the Device

• Receipt images: scanned using on-device Apple Vision and never transmitted to any server
• AI-powered expense categorization: processed entirely on the device using Apple Intelligence

Third-Party Data Sharing

Third parties that may receive data from the app:

• Setapp (MacPaw) - app health metrics for subscription management

Understanding the Scores

Security: 78/100
Privacy: 93/100

Security Breakdown

• Data Security: 73/100. The financial records database uses the device's default file protection level rather than the strongest available setting, which means forensic or backup tools could read expense records on a device that has been unlocked at least once. Expense sheet names may also be accessible via Siri on a locked screen.
• Network Security: 100/100. All network communication uses HTTPS with full App Transport Security enforcement. No plaintext connections or configuration exceptions were found.
• Code Safety: 97/100. No hardcoded secrets, advertising SDKs, or tracking libraries are present. The app uses clean, minimal external dependencies.

Privacy Breakdown

• Data Collection: 93/100. Financial records, receipt images, and AI-powered features are all processed on the device. Sensitive financial data is not sent to third-party analytics or data companies.
• Data Sharing: 96/100. Financial records are not shared with data brokers, advertisers, or analytics companies. iCloud sync stays within the developer's own account.
• User Control: 93/100. iCloud sync is the only off-device data store for financial records, and it can be managed or disabled through standard iOS settings.

Positive Security Features

• No advertising, analytics, or tracking SDKs are present in the app.
• Receipt scanning processes images on the device using Apple Vision; receipt images are never transmitted to any external service.
• AI-powered categorization features run entirely on the device.
• All network connections use HTTPS with full App Transport Security enforcement.
• Financial data syncs only to the developer's own iCloud account, not to third-party servers.
• No hardcoded secrets or credentials are present in the app bundle.
• Application-layer encryption uses modern authenticated encryption for sensitive data.
• Financial records are not accessible via the iOS Files app or file sharing.

Areas for Improvement

GDPR / CCPA Compliance

The app's privacy practices could be strengthened by:

1. App Privacy Manifest
   Adding an app privacy manifest could make the App Store privacy label more complete and provide users with a more detailed view of the app's data practices.

2. Setapp Data Sharing Documentation
   Providing clearer in-app disclosure of what usage data is sent to MacPaw through the Setapp SDK would give users better visibility into that data flow.

Security Enhancements

1. Financial Database Protection Level
   Enabling the strongest file protection level for the financial database would ensure expense records remain fully protected by the device passcode even after the device has been unlocked at least once.

2. Siri Access on Locked Screen
   Adding expense sheet names to the list of Siri commands restricted on the locked screen would prevent someone with brief physical access to a locked device from seeing the names of financial categories through Siri.

3. Widget Authentication Gate
   Adding an authentication requirement before displaying spending totals in the home screen widget would prevent financial balances from being visible to bystanders without unlocking the device.

4. URL Scheme Validation
   Verifying that the expenses:// URL scheme handler validates the source of incoming requests would help prevent other apps from triggering unintended navigation within the expense app.

Technical Context

App Type: Personal finance - sensitive financial data
Classes Analyzed: 0 (iOS binary analysis)
Third-Party Services: 1
Context Tags: financial, sensitive_data

---

About This Analysis

This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. The analysis is static code review of iOS applications, intended to help people make informed decisions about app security and privacy.

App Details

Developer: pixyzehn
Version: 4.0.26 (build 16420020)
Analysis Date: 2026-08-05
Package: com.pixyzehn.Expenses

Analysis Limitations

• Static analysis only (code review without running the app)
• Based on iOS app version 4.0.26 analyzed on 2026-08-05
• May not reflect server-side security controls
• Cannot detect all runtime behaviors

Right of Reply

Developer not yet contacted