Privacy Policy

Last updated: 3 July 2026 App: Amnty (iOS) · Data controller: Elias Ripari This text was prepared to be accurate for Amnty, but it is not legal advice. We recommend having it reviewed by a lawyer before launch.

1. Who processes your data (Data Controller)

The data controller is Elias Ripari, an individual, the developer of the Amnty app. For any request regarding this policy or your data, write to: eliasripari@gmail.com. No Data Protection Officer (DPO) has been appointed, as the conditions under Art. 37 GDPR do not apply.

2. What Amnty is (in short)

Amnty is a private reminder for tracking money you need to receive and money you need to pay between people. It works like a to-do list applied to open balances. Amnty does not move money. It does not process payments, connect to bank accounts or cards, issue invoices, or give financial advice. The data you see in the app is simply notes and reminders you enter yourself.

3. What data we process

We process only the data needed to let you use the app:

• Account data: your email address, used to sign up and log in via password or via an email sign-in link ("magic link"). Authentication is handled through Supabase Auth.
• Content you enter: people's names, amounts, notes and descriptions, dates and due dates, contacts you save, the "spaces" (workspaces) you create, and any payment breakdowns. This is your private personal data; some notes may include information about third parties (e.g. the name of someone who owes you money), which you enter under your own responsibility.
• Subscription and purchase data: the status of your access entitlement ("Amnty Pro") and technical purchase identifiers, handled via Apple and RevenueCat. We do not process your payment card details: payment happens entirely through your Apple ID.
• Diagnostic and crash data: technical reports about errors and app crashes, collected via Sentry to keep the app stable. Sentry is configured not to send personal data by default (automatic sending of personal identifiers is disabled).
• Essential technical identifiers: your account identifier, session tokens stored securely on the device, and minimal technical information needed for operation and security. Voice input (optional): if you choose to dictate an entry, the app uses your operating system's speech recognition (Apple). That feature is subject to Apple's privacy terms; we do not store the audio. You can use the app without enabling the microphone or speech recognition. Biometric lock (optional): if you enable Face ID / Touch ID lock, verification happens entirely on your device via iOS. We never receive or store any biometric data.

4. Why we process it and on what legal basis

5. Who processes data on our behalf (providers and sub-processors)

To provide the service we rely on trusted providers that process some data on our behalf, as processors or as independent controllers for their part:

6. Where data is processed (transfers outside the EU)

Some of the providers listed above may process data outside the European Union / European Economic Area, for example in the United States. In such cases the transfer takes place with the appropriate safeguards required by Articles 44 et seq. of the GDPR, such as the Standard Contractual Clauses approved by the European Commission or any applicable adequacy decision. You can ask us for more information by writing to the controller.

7. How long we keep data

We keep your account and the content you enter for as long as your account is active. When you delete your account, the data is deleted (see section 9). Diagnostic and crash reports are kept for a limited period for stability and security purposes. Some residual technical copies (e.g. backups or logs) may persist for a short time before final deletion, within the limits set by our providers.

8. Your rights

As a data subject you have the right to:

• access your data (Art. 15);
• rectification of inaccurate data (Art. 16) — you can correct most data directly in the app;
• erasure ("right to be forgotten", Art. 17);
• restriction of processing (Art. 18);
• portability of your data (Art. 20) — you can also export your entries from the app;
• object to processing based on legitimate interest (Art. 21);
• withdraw consent, where processing is based on it, without affecting the lawfulness of prior processing. To exercise these rights, write to eliasripari@gmail.com. You also have the right to lodge a complaint with a supervisory authority: in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. How to delete your account and data

You can delete your account directly in the app, under Account → Delete account. Deletion removes your user and, cascading, all linked data (entries, contacts, spaces, payment breakdowns, and subscription status on our system). This action is irreversible. Alternatively, you can request deletion by writing to eliasripari@gmail.com. Note: deleting your app data does not automatically cancel an active subscription — subscription management happens through your Apple ID (see the Terms).

10. No ad tracking, no advertising

Amnty does not use your data to track you across other companies' apps or websites, does not show advertising, and does not build advertising profiles. We do not use your data for purposes other than those described in this policy.

11. Children

Amnty is not directed at children under 16 and does not knowingly collect their data. If you believe a child has provided us with personal data, contact us and we will remove it.

12. Changes to this policy

We may update this policy over time. For significant changes we will update the date at the top of the page and, where appropriate, notify you in the app. Please review it periodically.

13. Contact

Data controller: Elias Ripari — eliasripari@gmail.com