Privacy

Privacy Policy

Last updated: 12 October 2026

Overview

Cupr is designed as a private expense memory. Cupr does not use advertising, crash-reporting, behavioral analytics, or cross-app tracking. Cupr uses RevenueCat only to measure app installs and active app use and to process purchase history for Cupr Pro. Cupr does not provide its own user accounts or operate a Cupr server for expense data. Automatic currency conversion is optional and enabled by default. When enabled, Cupr retrieves public exchange rates from Frankfurter as described below.

Website

Hosting and technical logs

This static website is hosted in Germany by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, as a processor. When you visit the website, the web server processes technical log data including your IP address, date and time, requested resource, access status, transferred data volume, referrer, browser, operating system, interface, language, and browser version.

This processing is necessary to deliver the website, maintain its functionality, and protect it against attacks (Art. 6(1)(f) GDPR). Server log files are deleted after no more than seven days. They may be retained longer in an individual case when needed to investigate an unlawful attack or misuse.

Cookies and tracking

This website does not set cookies and does not use analytics, advertising, or comparable tracking technologies. Therefore, no consent banner is used.

Email contact

When you contact us at cupr@bymnl.at, we process the information you provide, including your email address and message, to answer your request. Email is hosted in Germany by ALL-INKL.COM – Neue Medien Münnich as a processor. The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR for responding to legitimate enquiries. Correspondence is deleted when it is no longer needed for the request, unless statutory retention obligations require longer storage.

Cupr app

Data stored on your device

Cupr stores the payments, categories, preferences, and CSV data you import on your devices. Payment records can include the original amount and currency, saved historical conversion amounts and rates, optional description, category snapshot, payment date, creation time, and source. The app uses this information only to provide tracking, history, categorization, insights, export, and related app functions.

iCloud and CloudKit

When iCloud is available and enabled for the app, payment records are synchronized through your private iCloud database using CloudKit. Categories and selected preferences are synchronized through your iCloud key-value store. This processing is provided by Apple under your Apple Account and is necessary for the optional synchronization functionality (Art. 6(1)(b) GDPR). Apple may process data in accordance with its own terms and privacy information.

Currency conversion and Frankfurter

When automatic currency conversion is enabled, Cupr retrieves reference exchange rates directly from Frankfurter at api.frankfurter.dev over encrypted HTTPS connections to display payments and insights in your default currency. Requests contain currency codes and, for historical rates, date ranges. Historical requests are grouped into monthly batches; public rates are cached on your device. Cupr does not send payment amounts, descriptions, categories, payment IDs, user identifiers, contact details, or CSV files to Frankfurter. Amounts are converted on your device; the original values and saved historical conversions remain with your payment records and, when enabled, in your private iCloud storage.

You can disable automatic conversion in Settings → Currencies. Cupr then stops requesting exchange rates and displays original payment amounts, with insights evaluated separately for each currency. Original amounts, previously saved conversions, and the public rate cache are retained so they can be used again when you re-enable conversion. Disabling conversion does not delete payment data. While conversion is disabled, changing your default currency does not convert existing payments; the new default is the preset for new payments. This preference is synchronized through iCloud and sent to Apple Watch using the existing settings sync; a disconnected device uses its last synchronized setting.

The API and its delivery infrastructure process technical connection information, including your IP address and HTTP request information, to deliver exchange rates. This processing serves Cupr’s legitimate interest in providing reliable currency conversion (Art. 6(1)(f) GDPR). According to Frankfurter’s published API privacy information, the public API retains no logs of personal data, IP addresses, or request URLs. Frankfurter uses Cloudflare to cache responses and protect against attacks.

Apple Pay automation and Shortcuts

If you set up the optional Shortcut automation, the Wallet amount and merchant information that you map in Shortcuts can be passed to Cupr to save an Uncategorized payment. The automation is created and configured by you in Apple Shortcuts. Cupr does not receive payment-card data or operate a payment service.

CSV import and export

CSV files selected for import are processed by Cupr on your device to create payment records. Exports are created on your device and shared only through the sharing destination you choose. Cupr does not upload CSV files to a Cupr server.

Apple Watch, widgets and notifications

The companion Apple Watch app transfers pending entries to the iPhone through Apple WatchConnectivity. Widgets use an app-group snapshot on your Apple devices to display Cupr information. If you enable the optional categorization reminder, its schedule and the presence of Uncategorized payments are used locally to decide whether to show a local notification.

App Store and purchases

Cupr Pro is a one-time non-consumable in-app purchase processed by Apple through StoreKit. Cupr checks purchase entitlements locally through StoreKit; payment-card and billing details are handled by Apple, not by Cupr. Apple may process personal data in accordance with its own privacy information.

RevenueCat app and purchase metrics

Cupr uses RevenueCat, Inc. as a processor to measure installs, active app use, and Cupr Pro purchases and to validate App Store receipts.

RevenueCat receives a randomly generated anonymous app user ID, app and device technical information (such as app version, operating-system version, device type, locale, SDK version, request times, and IP-derived country), last-seen activity, and App Store receipt and purchase history. Cupr does not send RevenueCat names, email addresses, Apple Account identifiers, advertising identifiers, expense amounts, descriptions, categories, imported CSV data, or other expense records. Cupr does not set RevenueCat customer attributes or enable advertising-attribution integrations.

This processing is necessary for Cupr’s legitimate interests in understanding app adoption, operating and improving the purchase flow, preventing purchase fraud, and measuring sales (Art. 6(1)(f) GDPR), and for providing Cupr Pro after a purchase (Art. 6(1)(b) GDPR). RevenueCat processes this data on Cupr’s behalf in the United States and may use subprocessors under its data-processing terms and applicable transfer safeguards. More information is available in RevenueCat’s Privacy Policy.

Recipients and international transfers

Cupr does not disclose expense records to its own servers or to advertising, analytics, or crash-reporting providers. RevenueCat receives only the app-use, technical, receipt, and purchase information described above. Frankfurter and its delivery infrastructure receive the exchange-rate query parameters and technical connection information described above, without payment records or user identifiers supplied by Cupr. Where you use Apple services (including iCloud, CloudKit, Shortcuts, StoreKit, App Store, WatchConnectivity, and notifications), Apple acts as the relevant service provider under its own terms. Transfers outside the EEA, if any, are governed by the applicable provider safeguards and documentation.

Retention

Payment records, including saved historical conversions, remain on your device and, where used, in your private iCloud storage until you delete them or manage them through Apple’s services. Removing the app deletes its local data; it does not by itself delete data in your private iCloud storage. The public exchange-rate cache stays on your device and is cleared when you delete all Cupr data or remove the app. Deleted payments and categories are removed from the app’s local and iCloud data; general preferences may remain. RevenueCat retains the app-use and purchase records according to its service terms and legal obligations; you may request deletion through Cupr using the contact address below. Website logs are deleted after no more than seven days unless an incident requires longer retention. Email correspondence is deleted when it is no longer needed, subject to statutory retention obligations.

Your rights

Subject to the conditions of applicable law, you have the right to access, rectification, erasure, restriction, data portability, and objection. You can contact us at cupr@bymnl.at. Because RevenueCat uses an anonymous ID, we may need information from your device to locate a record. Where processing is based on consent, you may withdraw it at any time with effect for the future. For data processed independently by Apple services, Apple may also be the appropriate contact.

Complaint

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU/EEA Member State of your habitual residence, place of work, or the place of an alleged infringement. In Austria, the supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde).

Controller

Manuel Auer
Oidener Straße 75
4030 Linz
Austria
cupr@bymnl.at

Changes

We may update this Privacy Policy when Cupr, the website, or applicable legal requirements change. The current version is published on this page.