A personal finance ledger designed to keep your financial life private.
Acounta is a personal finance ledger developed by Pixun.dev. It is designed to minimize centralized data collection and keep users in control of their own records.
Acounta is developed and maintained by Pixun.dev.
Acounta is suitable for users aged 9 years and older as a general content age rating. It is a personal finance utility and is not designed, marketed, or submitted as a children-only app.
Users under 13 should use the app only with a parent or guardian. Acounta does not include advertising, public social features, open chat, user-generated public content, or behavioral tracking.
Everything you enter into Acounta is stored locally on your device:
None of this ever reaches our servers unless you use an optional feature that explicitly moves data — like cloud backup or sync.
When you enable Google Drive backup, your data goes to your own Google account — not our servers. Specifically:
Your Google account data is governed by Google's Privacy Policy.
When you link two devices, our relay server acts as a secure mailbox: it holds your encrypted messages just long enough to deliver them to your other device, then deletes them. It cannot read the contents.
To make this work, the relay stores a small routing record per device:
| What is stored | Why |
|---|---|
| A random device ID assigned by the server | Identifies which device should receive each message |
| A public encryption key | Lets the other device seal messages so only you can open them |
| Your selected currency code | Used for routing only |
| Last activity timestamp | Lets us clean up records that have been inactive for 12 months |
Your name, email, phone number, financial records, and contacts are never part of this routing data. Messages in transit are end-to-end encrypted and deleted after delivery (or after 3 days if undelivered).
To help us fix bugs and understand which devices and features we need to support, the app automatically sends a small amount of non-personal technical information to our server. None of your financial data, contacts, or photos are ever part of this.
| What is sent | When | Contains financial data? | Linked to your identity? |
|---|---|---|---|
| Device model, OS version, app version, language, currency code | On first launch and every ~30 days | No | No — combined into an anonymous fingerprint |
| Feature usage counters (e.g. number of transactions created, whether backup is on) | Once per day | No — counts only, no amounts or descriptions | No — tied to a random local ID, not to you |
| Error type and stack trace if the app crashes or hits a bug | When an error occurs | No — code paths only, not your records | No — includes only the same anonymous device info above |
Think of this as the kind of information your TV or browser sends when checking for updates — it tells us what hardware and versions exist in the wild, nothing more.
If you use the in-app feedback form, only what you type is sent — the message text, the category (e.g. "suggestion"), and the platform (Android/iOS). There is no name, account, or contact attached. Please don't include personal or financial information in feedback messages. Submissions are rate-limited to 10 per week.
When you merge two product names in the product catalog (marking one as an alias of the other), the app sends the alias name and your selected currency code to our server to reduce that name's prominence in the shared suggestion list. No price, quantity, transaction record, or identity is included.
| Permission | Use | Optional? |
|---|---|---|
| Internet and network state | Sync relay communication and diagnostic reports. Network state is checked to defer sync when the device is offline. | The app can be used offline, but online features require it. |
| Contacts | Lets you select a contact when creating a transaction. | Yes. |
| Camera | Scans QR codes for device linking and captures receipt photos. | Yes. |
| Photos or media library | Lets you attach existing receipt or invoice images. | Yes. |
| Google account (Drive scope) | Uploads encrypted backups and attachment photos to your private Drive app folder. | Yes — only if you enable Google Drive backup. |
We do not request microphone, precise location, health, calendar, or similar unrelated sensitive permissions.
No system can be guaranteed perfectly secure. Please protect your device, PIN, and backup passwords.
We operate our own relay server at pixun.dev. This server receives sync routing records (section 3.3), anonymous app diagnostic data (section 3.4), and user-submitted feedback (section 3.5). It does not receive financial content or personal identity information.
We use hosting infrastructure to operate this server. The host cannot read end-to-end encrypted sync message contents.
We do not use Google Analytics, Firebase Analytics, Facebook SDK, AdMob, advertising networks, or behavioral marketing SDKs in Acounta.
| Data type | Retention period |
|---|---|
| Local financial data | Until you delete it, clear app data, or uninstall the app. |
| Delivered sync messages | Deleted after delivery. |
| Undelivered sync messages | Deleted after 3 days. |
| Inactive sync identifiers | Deleted after 12 months of inactivity. |
| Google Drive backup files | Until you delete them from your Drive or from within the app. |
| Device registration record | Deleted after 12 months of inactivity. |
| Anonymous analytics batches | Aggregated counters retained indefinitely; per-installation hash retained while active. |
| Error reports | Usually deleted after the underlying bug is fixed. Unresolved reports are deleted after 6 months, unless the error recurs frequently (10+ times), in which case they may be retained longer. |
This section explains how Acounta users can delete their app data and how optional sync routing records are removed.
If you enabled sync, the relay may retain your random sync identifier, public key, selected currency, last activity timestamp, and related routing data. Inactive sync records are automatically deleted after 12 months.
Because Acounta does not collect your name, email address, phone number, login account, or other identity information, we do not have a reliable way to know who owns a specific sync identifier.
Acounta is designed so that you control most of your data directly on your own device.
We may update this policy when the app, our infrastructure, or our privacy practices change. Updates will be posted on this page with a new effective date.
Acounta is provided as a free personal finance tool. We try to keep the app private, simple, and useful, but it is provided as-is and without paid support, uptime guarantees, data recovery guarantees, legal advisory services, or compensation for losses.
You are responsible for protecting your device, keeping your backup files and passwords safe, checking your own financial records, and deciding whether the app is suitable for your needs.
Manual support questions are handled when reasonably possible. Because the app is free, we cannot guarantee a fixed response time or provide services that create additional operational, legal, or financial cost.
For privacy questions or security concerns, contact us at:
We will try to respond when reasonably possible, but response times are not guaranteed.