# Did not meet TRUSTED criteria The app was assessed and did not meet all of the criteria for the TRUSTED mark. The specific items are listed below so the result can be weighed before installing. ## Trust Pillars - **Secure by Design**: Not met. Did not meet one criterion in this area. - **Data Respect**: Strong. Strong result in this area. - **Honest Experience**: Not met. Did not meet one criterion in this area. - **User Control**: Strong. Strong result in this area. - **Child-Safe**: Not applicable. Does not apply to this app. --- # Security & Privacy Scorecard ## Expenses Track personal expenses with on-device receipt scanning. Organize by categories, sync to iCloud, and view quick spending summaries with widgets. ## What This Means for You Receipt images and AI-powered categorization are processed entirely on the device, financial records sync to iCloud under the developer's own account, and the Setapp subscription service transmits app usage metrics to MacPaw. ## Recommendation: Trustworthy A well-built personal finance app with no advertising, analytics, or tracking services included. Receipt scanning and AI categorization run entirely on the device, and strong application-layer encryption protects sensitive financial records. The only external data sharing is app usage metrics sent to MacPaw through the Setapp subscription SDK. **Best For:** People who track personal finances using Setapp and want receipt images and AI categorization processed entirely on the device. ## Key Findings **Data Security:** 2 findings (1 medium, 1 low) **Network Security:** 0 findings **Code Safety:** 1 finding (1 low) **Privacy:** 1 finding (1 low) ## Privacy Concerns ### What Leaves the Device - Financial records: synced to iCloud under the developer's own account for cross-device access - App usage metrics: transmitted to MacPaw through the Setapp subscription SDK ### What Stays on the Device - Receipt images: scanned using on-device Apple Vision and never transmitted to any server - AI-powered expense categorization: processed entirely on the device using Apple Intelligence ### Third-Party Data Sharing **Third parties that may receive data from the app:** - Setapp (MacPaw) - app health metrics for subscription management ## Understanding the Scores **Security:** 78/100 **Privacy:** 93/100 ### Security Breakdown - **Data Security:** 73/100. The financial records database uses the device's default file protection level rather than the strongest available setting, which means forensic or backup tools could read expense records on a device that has been unlocked at least once. Expense sheet names may also be accessible via Siri on a locked screen. - **Network Security:** 100/100. All network communication uses HTTPS with full App Transport Security enforcement. No plaintext connections or configuration exceptions were found. - **Code Safety:** 97/100. No hardcoded secrets, advertising SDKs, or tracking libraries are present. The app uses clean, minimal external dependencies. ### Privacy Breakdown - **Data Collection:** 93/100. Financial records, receipt images, and AI-powered features are all processed on the device. Sensitive financial data is not sent to third-party analytics or data companies. - **Data Sharing:** 96/100. Financial records are not shared with data brokers, advertisers, or analytics companies. iCloud sync stays within the developer's own account. - **User Control:** 93/100. iCloud sync is the only off-device data store for financial records, and it can be managed or disabled through standard iOS settings. ## Positive Security Features - No advertising, analytics, or tracking SDKs are present in the app. - Receipt scanning processes images on the device using Apple Vision; receipt images are never transmitted to any external service. - AI-powered categorization features run entirely on the device. - All network connections use HTTPS with full App Transport Security enforcement. - Financial data syncs only to the developer's own iCloud account, not to third-party servers. - No hardcoded secrets or credentials are present in the app bundle. - Application-layer encryption uses modern authenticated encryption for sensitive data. - Financial records are not accessible via the iOS Files app or file sharing. ## Areas for Improvement ### GDPR / CCPA Compliance The app's privacy practices could be strengthened by: 1. **App Privacy Manifest** Adding an app privacy manifest could make the App Store privacy label more complete and provide users with a more detailed view of the app's data practices. 2. **Setapp Data Sharing Documentation** Providing clearer in-app disclosure of what usage data is sent to MacPaw through the Setapp SDK would give users better visibility into that data flow. ### Security Enhancements 1. **Financial Database Protection Level** Enabling the strongest file protection level for the financial database would ensure expense records remain fully protected by the device passcode even after the device has been unlocked at least once. 2. **Siri Access on Locked Screen** Adding expense sheet names to the list of Siri commands restricted on the locked screen would prevent someone with brief physical access to a locked device from seeing the names of financial categories through Siri. 3. **Widget Authentication Gate** Adding an authentication requirement before displaying spending totals in the home screen widget would prevent financial balances from being visible to bystanders without unlocking the device. 4. **URL Scheme Validation** Verifying that the expenses:// URL scheme handler validates the source of incoming requests would help prevent other apps from triggering unintended navigation within the expense app. ## Technical Context **App Type:** Personal finance - sensitive financial data **Classes Analyzed:** 0 (iOS binary analysis) **Third-Party Services:** 1 **Context Tags:** financial, sensitive_data --- ## About This Analysis This security analysis was conducted by CITT (Can I Trust That), an independent security analysis service. The analysis is static code review of iOS applications, intended to help people make informed decisions about app security and privacy. ### App Details **Developer:** pixyzehn **Version:** 4.0.26 (build 16420020) **Analysis Date:** 2026-08-05 **Package:** com.pixyzehn.Expenses ### Analysis Limitations - Static analysis only (code review without running the app) - Based on iOS app version 4.0.26 analyzed on 2026-08-05 - May not reflect server-side security controls - Cannot detect all runtime behaviors