Avocado privacy policy

This policy explains what personal data the Avocado app collects, why, where it’s kept, who else handles it, how long it’s kept, and your rights.

Who we are

Avocado is made by Ramped Development LTD, trading as Chute5, a company registered in England and Wales with company number 14120015, whose registered office is Office 1, 2A Curzon Road, Ealing, London, W5 1NF, United Kingdom. We are the controller of your personal data. We’re registered with the Information Commissioner’s Office under registration number ZC258319.

Contact us about privacy at support@get-avo.com.

The short version

• Avocado needs an account, so we hold your name, your email address and what you put into the app: your spends, trackers, budgets and events.
• We don’t sell your data, show ads, or track you across other apps and websites.
• Avocado doesn’t connect to your bank. It only knows the spends you log, by hand, with Siri, or through the Apple Pay shortcut if you set it up.
• Your data is stored in London, by our hosting provider, Supabase.
• You can delete your account, and everything in it, from inside the app at any time.

What we collect, and why

Your account

You can sign in with Apple, with Google, or with your email address.

• Your email address. If you sign in with your email, we email you a one-time code; there is no password. If you sign in with Apple, Apple gives us an email address, which may be a private relay address Apple creates for you (Hide My Email). If you sign in with Google, Google gives us your Google account’s email address.
• Your name, to show on your Account page. If your account doesn’t have one, we ask for it when you sign in, and you can change it on your Account page. The first time you sign in with Apple, Apple may give us the name you share with it, and Google gives us your Google account’s name each time. We use a name Apple or Google gives only while your account doesn’t have one.
• An account ID that our system assigns to you, which links your data to your account, and the ID Apple or Google uses for you, if you sign in with them, so we know it’s you next time.

We don’t receive your Apple or Google password. Once Google has confirmed who you are, the app keeps nothing from Google on your phone.

Technical logs

When the app talks to our servers, our hosting provider logs each request, including your IP address and details of the app’s software, and each sign-in, including your account ID, email address and IP address. We use these logs to keep Avocado secure and to fix problems.

What you put into Avocado

• Your spends: the amount, the currency, the date and time, the name of the place, any name you give it, and a note if you add one.

• Your trackers, budgets and events: their names, budgets and dates, and which spends belong to them.

• The name of the card that paid, when the Apple Pay shortcut logs a spend (see below). Cards named this way appear as your cards in the app.

• The time zone your phone was in when you logged each spend, so Avocado can tell what time of day and which day of the week you spent, wherever you were.

• For a spend in another currency: the original price and currency, and the amount converted into your own currency.

• Your plan. When you set up Avocado, you can tell it about your money, so your plan fits it and you can look back and see how it has helped. You can skip any of it. If you tell us, we keep with your account:

  • What comes in: each income’s amount a month after tax, and its name if you give it one.
  • What you spend now: the figure you give, a week or a month, and that it’s your own estimate.
  • What has to go out: what you pay a month for rent or mortgage, bills and council tax, loans and finance, your phone, broadband and TV, insurance, and anything else that has to go out.

  Each time you save them, we keep a new record, so you can look back. These are included when you export your data, and deleted when you delete your account. To change them, email us at support@get-avo.com.

We use all of this to provide the app: to show your spending, budgets, trackers and events, and to plan them.

The history of your changes

Avocado keeps a record of every change to your spends, trackers, events and the links between them: what changed, the old and new values, when, and whether it was made in the app, by the Apple Pay shortcut or with Siri. This is so Avocado can show you what changed and why, and help you undo a change. If you delete a spend, tracker or event, its history is kept with your account until you delete your account.

The Apple Pay shortcut (optional)

If you set up Avocado’s Apple Pay shortcut, then each time you pay with Apple Pay on that iPhone, Apple’s Shortcuts app passes Avocado the amount, the currency, the name of the place and the name of the card as they appear in Apple Wallet, and Avocado saves it as a spend. We never receive your card number or bank details. The shortcut only runs if you add it and switch on its automation, and you can turn it off in the Shortcuts app at any time.

Siri (optional)

If you say “Log a spend in Avocado”, Siri asks for the amount and the place. Apple turns what you say into text, and Avocado receives only that text, never a recording of your voice.

Your subscription

Avocado’s subscription is bought through Apple. Apple handles the payment; we never see your card or payment details. We use RevenueCat to manage subscriptions: the app tells RevenueCat your account ID, and RevenueCat tells us whether your subscription is active, when it renews or ended, and its subscription reference. We use this to let you into the app and to word the notifications we send.

Feedback (optional)

In the last three days of your free trial, Avocado may offer you another free week for answering a short feedback form. If you answer it, we keep your answers, with the app version you were using, against your account. We use them to understand how people use Avocado and what to improve, and to give you the free week. If you say we may email you about your answers, we may use your email address to do so. The form asks you to leave out personal details.

If you delete your account, we keep your answers to the in-app feedback form, and delete everything that links them to you: your account, your subscription reference, and the exact time you sent them (we keep the day). Anything you wrote in your answers stays as you wrote it.

Notifications (optional)

If you allow notifications, Avocado can tell you each time the Apple Pay shortcut logs a spend. You can turn this off in Notifications on your Account page (New spends), or in your iPhone’s Settings.

• What we store: your phone’s notification token, a random ID for this installation of the app, and whether it’s a test or a released build, so we can send notifications to your phone. We keep them for up to ten phones per account.
• What a notification says: a spend’s amount and the name of the place (for example, “£3.30 at Pret”). Each notification also carries an ID so that tapping it opens that spend.
• Keep in touch (optional): if you say yes, then once your subscription ends, Avocado tells you about the spends it logs after it (on the first one, then at most once a week, with how many spends it has kept and where most of them were), and may send you offers to come back. It’s off unless you say yes. Avocado asks when it sees your subscription is set to end, and you can say No thanks. You can turn it off any time in Notifications on your Account page. It only ever comes as a notification, never by email.
• How it’s delivered: through Apple’s push notification service.
• When you sign out, the app removes your phone’s token from your account and clears Avocado’s notifications from Notification Centre. If your phone is offline, it keeps trying until it can.

Emails we send

• Sign-in codes, if you sign in with your email.
• Replies about your feedback, only if you said we may email you about it.
• A thank-you, if you tested the beta: a code for free months of Avocado, to redeem in the App Store.
• Other offers, only if you’ve said yes. Apart from that thank-you, we only email you offers, or ask you back after your subscription ends, if you’ve agreed to it. You can stop them at any time.

Our emails are sent by Resend (see below).

The get-avo.com waitlist (optional)

If you join the waitlist on our website, we keep your email address, when you joined, which form you used and whether you asked to try the beta. To stop the form being misused, we also keep a scrambled code made from your IP address, never the address itself. We email you once to confirm your address, then about the beta if you asked for it, and when Avocado launches. Every email has a link to unsubscribe, which takes you off the list.

What stays on your phone

• Face ID or your passcode, which Avocado uses to unlock the app, is checked by your iPhone. We never receive any biometric data.
• Avocado keeps copies of your recent data on your phone so it works offline, and a record of when the Apple Pay shortcut last ran. These copies are removed from the phone when you sign out.
• Widgets: so its Home Screen and Lock Screen widgets can show your trackers, budgets, events and what you’ve spent today, Avocado keeps a copy of them in a storage area on your phone that only Avocado and its widgets can read. The widgets never contact our servers. The copy is removed when you sign out. To hide the widgets’ amounts until you unlock, turn off Lock Screen Widgets in Settings, under Face ID & Passcode (or Touch ID & Passcode), Allow Access When Locked.
• Live Activities for your events show on your Lock Screen. You can hide their amounts until you unlock: in Settings, turn off Live Activities under Allow Access When Locked.

What we don’t collect

We don’t collect your location from Location Services, your contacts, photos, health data, or your voice. We don’t use advertising or analytics tools. If you sign in with Google, Google’s sign-in software in the app is covered by Google’s own privacy policy (see below).

Our lawful bases (UK GDPR)

• Contract: to provide the app you’ve signed up to: your account, your data, sync, and your subscription.
• Legitimate interests: to keep Avocado secure and working (for example, preventing misuse of sign-in and of the free week), to fix problems, and to understand feedback so we can improve the app. We’ve balanced these against your rights, and you can object (see below).
• Consent: for notifications (you choose in iOS), for Keep in touch, the notifications about spends logged after your subscription ends and offers to come back, which are off until you say yes, for emailing you about your feedback if you said yes, and for the get-avo.com waitlist emails. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or share something.

Who else handles your data

We use these service providers. They process data on our behalf, under contracts that require them to protect it.

Apple provides the App Store and its payments, Siri, Shortcuts and Wallet, and handles what you give those services under its own privacy policy. Our notifications, including a spend’s amount and place, are delivered through Apple’s push notification service. If you sign in with Apple, Apple tells us who you are, and if you chose Hide My Email, emails we send you go through Apple’s relay.

Google, if you sign in with Google, confirms who you are and gives us your Google account’s name and email address. Google says its sign-in software records that you allowed Avocado to sign you in, and may use your IP address to estimate your general location to prevent fraud. The software also declares that Google may collect your name, email address, phone number, general location, an account ID, a device ID, usage data and other data linked to you, some of it for Google’s analytics, and none of it to track you. Google handles this under its own privacy policy.

We also fetch exchange rates from the European Central Bank and from ExchangeRate-API. We don’t send either of them any information about you. (Exchange rates: source, ECB statistics.)

We don’t sell your personal data or share it with advertisers or data brokers. We may disclose data if the law requires it, or to protect the rights and safety of our users or others.

International transfers

Your account’s data is stored in the UK. Some of our providers are based outside the UK, and Resend and RevenueCat store what they receive in the United States. Each transfer is covered by the provider’s data processing agreement:

• Supabase: the EU Standard Contractual Clauses with the UK Addendum.
• Resend: the EU Standard Contractual Clauses with the UK Addendum, and the UK Extension to the EU-US Data Privacy Framework.
• RevenueCat: the EU Standard Contractual Clauses with the UK Information Commissioner’s International Data Transfer Addendum.

You can ask us for a copy of these safeguards at support@get-avo.com.

How long we keep it

• Your account and everything in it, including the history of your changes: until you delete your account. We don’t delete accounts that aren’t being used, so your data stays until you delete it. If that changes, we’ll update this policy and tell you first.
• Technical logs of requests, and of sign-ins (your account ID, email address and IP address): 7 days in Supabase’s logs, then Supabase deletes them.
• Backups: Supabase keeps a daily backup of our database for 7 days, so something you delete stays in the backups for up to 7 days, then it’s gone.
• Your subscription record at RevenueCat: while you have an account. When you delete your account, we also delete your record at RevenueCat, which removes your purchase history there.
• Notification tokens: until you sign out on that phone, Apple tells us the token no longer works, or you delete your account. An account keeps its ten most recent phones. A record of each notification (which spend it was about, when it was sent, and which phones it reached) is kept with the spend until you delete the spend or your account.
• The sign-in emails Resend sends for us, and their delivery logs: 30 days, then Resend deletes them.
• The get-avo.com waitlist: until you unsubscribe, or 30 days if you never confirm your address. The waitlist emails Resend sends, and their delivery logs, are deleted by Resend after 30 days, like the sign-in emails.
• Your feedback answers: with your account while you have one. If you delete your account, we keep your answers to the in-app feedback form, and delete everything that links them to you: your account, your subscription reference, and the exact time you sent them (we keep the day). Anything you wrote in your answers stays as you wrote it.

Deleting your account

You can delete your account in the app: tap Account at the top right of Home, then Delete account. If you’re on the subscription screen (before you subscribe, or after your subscription ends), Delete account is at the bottom of it too. You need to be online.

Deleting your account permanently deletes it and everything in it: your name, spends, trackers, budgets, events, cards, settings, notification tokens and the history of your changes. It also deletes your record at RevenueCat. It can’t be undone.

If you delete your account, we keep your answers to the in-app feedback form, and delete everything that links them to you: your account, your subscription reference, and the exact time you sent them (we keep the day). Anything you wrote in your answers stays as you wrote it.

If you use Sign in with Apple, deleting your account also disconnects Avocado from your Apple Account, so Apple’s sign-in sheet appears first to confirm it. If that can’t be done from your phone (for example, the phone is signed in to a different Apple Account), you can still delete your account, then stop using Sign in with Apple for Avocado in your Apple Account settings.

Deleting your account does not cancel your subscription, because Apple bills it. Cancel it first: the app offers a Manage subscription button when you delete, or go to Settings, tap your name, then Subscriptions.

Deleting your account doesn’t remove:

• The get-avo.com waitlist, if you joined it. That was a separate sign-up for news by email; unsubscribe from any of those emails to leave it.
• Technical logs and backups, for up to 7 days, as above.
• The sign-in emails Resend sent you, for up to 30 days.
• Your feedback answers, kept with nothing linking them to you, as above.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• correct it (you can edit most of it in the app);
• erase it (you can delete your account in the app);
• restrict or object to how we use it;
• data portability: receive your data in a machine-readable format. In the app, tap Account, then Export your data, and choose Core information, a .json file of your spends, cards, trackers, events, settings and feedback, or Transactions, a .csv spreadsheet. Each is exported on its own and named with the day you export it. The export doesn’t include the history of your changes, your phones’ notification tokens, the records of notifications we’ve sent, or other records we keep to run the service. We provide those on request: email support@get-avo.com, or tap Anything else in Export your data.
• withdraw consent where we rely on it.

To use any of these rights, email support@get-avo.com. We aim to reply within two working days, but it can take up to two weeks. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to put it right first.

Children

Avocado is for people aged 18 and over. We don’t knowingly collect data from anyone younger.

Security

Your data is sent over encrypted connections, and each account can reach only its own data. The app keeps your sign-in in the iPhone’s Keychain and can lock itself behind Face ID or your passcode. Our hosting provider, Supabase, also encrypts your data where it’s stored. No system is perfectly secure, so please tell us at support@get-avo.com if you think something’s wrong.

Changes to this policy

We’ll update this page when things change, and change the date at the top. If a change is significant, we’ll tell you in the app or by email.

Contact

Ramped Development LTD, trading as Chute5, Office 1, 2A Curzon Road, Ealing, London, W5 1NF, United Kingdom. Company number 14120015. Email: support@get-avo.com.