Stewardship stores, on your device only:

• Account balances and a running ledger of transactions you enter or import
• Bills, income sources, debts (including BNPL), budgets, sinking funds, and wishlist items
• Your display name and (optionally) a spouse's first name, used for greetings
• App preferences (theme, reminders, payoff strategy, approach)

The app does not ask for — and has no fields for — your bank credentials, account numbers, routing numbers, or card numbers. As a hygiene measure, long digit sequences (8+ digits) found in imported statement text are masked to *** before being saved.

• On your iPhone. All data is stored in a local database on your device, protected by iOS data-at-rest encryption tied to your device passcode.
• No servers. The current version of Stewardship makes no network calls. There is no account signup, no analytics SDK, no advertising SDK, no crash reporter, and no telemetry.
• iCloud sync is currently disabled. If a future version offers iCloud sync, it would use your private iCloud database (visible to you, not to WakeSwell) and would be described in an updated policy before release.

Importing a PDF or pasted statement is processed entirely on your device, including text extraction (PDF parsing and Vision OCR). Statement files are read for parsing and are not copied into the app's storage; only the resulting transaction rows you confirm are saved.

On devices that support Apple Intelligence (iOS 26+), Stewardship can use Apple's on-device language models to tidy merchant names and understand a typed check-in. This processing stays on the device and can be turned off in Settings → Apple Intelligence. On earlier devices, deterministic on-device rules are used instead.

You can export your data as a JSON file from Settings → Backup. That file contains your full financial history in plain, unencrypted text, and the app hands it to the iOS share sheet — you choose where it goes (Files, iCloud Drive, AirDrop). Once shared, the file's protection depends on where you put it. The app cleans up its temporary copy of the export after sharing.

All reminders are local notifications scheduled on your device. By default, notification text does not include dollar amounts; showing amounts is an explicit opt-in. The optional morning scripture and check-in nudge are also local and off by default.

If you enable App Lock, the app uses Face ID / Touch ID (with device-passcode fallback) through Apple's LocalAuthentication framework. Biometric data never leaves the Secure Enclave and is never available to the app or to WakeSwell.

Deleting the app deletes its local database. Within the app, Settings offers a full reset that erases all stored data on the device. Backup files you exported are yours to delete wherever you stored them.

Stewardship is a general-audience finance tool and is not directed at children under 13.

If a future feature changes any of the above — for example, an opt-in account-connection import path — this policy will be updated first, and the feature will be off unless you choose to turn it on. Material changes will be noted in the App Store release notes.

Questions about this policy: WakeSwell, LLC — privacy@wakeswell.com