Four things it does for you, without a server.
Everything below runs on the phone. Nothing leaves it on its own.
Link a loan to the property it pays for. You see the equity you really hold, and how its change splits into what the market did and what you repaid.
Set a repayment or a monthly transfer once, with its day of the month. Each due date is written for you when you open the app — months you missed included — and a notification says so.
The eye next to your net worth hides every amount in one tap; percentages and dates stay readable. Face ID can lock the app when you leave it.
A year's change, split into what you put aside, what the market did and what you repaid — adding up to the cent. In euros, months and dates; never a score.
You type your balances in yourself. Nobody holds the keys to your accounts.
That is the whole deal, stated plainly. Typing a few numbers once a month is the price of a balance sheet that no third party can read, sell, or lose.
Not adjectives. Statements you could verify with a network monitor.
The four things a privacy page usually leaves out.
A product that publishes its own limits is making a stronger argument than one that doesn't. So here are ours, at the same size as the claims above.
CloudKit private-database records aren't accessible to us. But they are end-to-end encrypted only if you turn on Apple's Advanced Data Protection, and some metadata never is — that's Apple's, not ours to promise away.
If you ask for an institution's logo, the app fetches it from that institution's own site, which sees a visit like any browser's. Nothing else is sent, and nothing is fetched unless you ask.
The at-rest encryption is the platform's. Face ID gates access to the app — it does not perform the decryption, and we won't dress it up as if it did.
It hasn't been, yet. Everything above is verifiable by watching the app's network traffic, which is the next best thing and available to you today.
One payment, and it's yours.
You pay once, on the App Store. There is no cut-down free version and nothing sold separately: everything the app does is yours from the first day.
An export you can't import back isn't an exit, and this product doesn't do traps.
Apple does not tell us who bought the app. We never receive your name or your email.
Short answers.
Do I need to create an account?
No. There is no sign-up, no email and no password: you open the app and start. Your data lives on your phone.
Can you see my numbers?
No. They never reach our servers — we have none for them. The app sends nothing on its own.
Does it connect to my bank?
No. You type balances yourself, a minute a month. Recurring entries enter loan repayments and transfers for you.
What if I lose my phone?
Turn on iCloud sync, or keep a backup from Settings › Import & Export. We hold no copy, so there is nothing we could restore.
Does it work offline?
Yes, all of it. Only iCloud sync waits for the network to come back.
Can I hide the figures when I show it to someone?
Yes: the eye next to your net worth hides every amount at once.
Everything else is in the help: How Jalonsan works.