Legal Changelog

This page documents changes to our Privacy Policy and Terms of Service. We update this page whenever we make changes so you can see exactly what changed and when. Each prior version is preserved in our git history and linked here, so you can review what you agreed to at any point in time.

Material changes trigger 30-day advance notice and in-app acceptance. Non-material changes are clarifications or disclosures that do not alter how we process your data; we update the document, bump the version, and log the change here.

Privacy Policy

Version 1.3 — 2026-06-23 (non-material)

Section 4.3 (Usage Telemetry) updated to reflect a privacy-positive redesign: telemetry is now identifier-free. The persistent on-device telemetry identifier has been removed — each daily ping uses a fresh one-time value that cannot be linked across days or to you. The legal basis changes from consent to legitimate interest (Art. 6(1)(f)), with an explicit Article 21 right to object (opt-out plus Do Not Track / Global Privacy Control).

  • Less data, not more. Removing the persistent identifier is strictly more protective. This is logged as legally meaningful (a legal-basis change) but non-material: no reduction of your rights and no new category of personal data.
  • One new bucketed attribute — “active days this month” (a coarse range, never an exact count) — lets us estimate monthly active installations in aggregate. These figures are estimates, not exact user counts.
  • IP wording made precise: we do not include your IP in the ping and disable geolocation, and PostHog is configured not to store or enrich it. Network-layer IP may be transiently visible to processors.
  • Small identifier-free counters kept on your device (a daily send marker and the monthly active-day tally) are disclosed, and removed on opt-out or when a Do Not Track / Global Privacy Control signal is present.
  • The pre-update version is archived at the privacy-policy-v1.2 git tag.

View Privacy Policy v1.2 (previous version)

Version 1.2 — 2026-05-02 (non-material)

Section 8.2 (Cookies and Tracking — On Our Website) updated to reflect that the cookie consent banner is now powered by a small first-party consent script instead of the third-party Klaro library. The generic Klaro localStorage key consent is replaced by the first-party key accloiq-consent.

  • Same gating mechanism (analytics scripts ship as <script type="text/plain"> and only execute after explicit consent), same processors (Google Analytics, PostHog, Cloudflare Web Analytics), same retention.
  • No new subprocessor, no new processing purpose, no new data collected. The change is implementation-only — the third-party Klaro library was removed, eliminating ~83 KB of external JavaScript and one third-party network request per page.
  • Existing Klaro consent records are not reused by the new first-party runtime. Visitors without the new accloiq-consent preference are prompted once, and analytics scripts remain blocked until they click Accept All or enable analytics in Privacy Settings.
  • Do Not Track (DNT) and Global Privacy Control (GPC) handling is unchanged — both signals continue to be honored as automatic decline.

Version 1.1 — 2026-05-01 (non-material)

Section 4.5 (Customer Support) clarified to disclose the new in-app Send Feedback form (Settings → About). The form transmits user-typed content and opt-in metadata through Cloudflare Workers and Resend.com to our support inbox.

  • Same data category (Customer Support) and same processors (Cloudflare, Resend) that were already disclosed for license-key email delivery.
  • No new subprocessor, no new processing purpose, no expansion of retention — only a clarification that an additional entry point exists for an already-disclosed flow.
  • Form is opt-in: the user explicitly clicks Send Feedback, types content, and chooses whether to include app version, platform, or their email. Nothing is collected automatically.

View Privacy Policy v1.0 (previous version)

Version 1.0 — 2026-04-22 (baseline)

Initial beta/public baseline. This version consolidates prior draft clarifications, removes unused speculative subprocessors, and reflects the data flows currently implemented in Acclo IQ.

  • Establishes the current local-first privacy model, telemetry disclosures, service-provider list, Cloud Sync behavior, and user rights language.
  • Clarifies that local sync/device-bookkeeping identifiers are separate from telemetry identifiers and license fingerprints.
  • Removes speculative subprocessors that are not deployed or planned for the MVP launch.

Terms of Service

Version 1.3 — 2026-06-23 (non-material)

Section 11.3 (Usage Telemetry) updated in lockstep with Privacy Policy v1.3: telemetry is now identifier-free (no persistent identifier), the legal basis is legitimate interest (Art. 6(1)(f)) with an Article 21 right to object, and the collected data now includes a bucketed “active days this month” range.

  • Strictly more protective — the persistent identifier is removed. No reduction of rights, no new data category, no retention increase.
  • IP wording aligned with the Privacy Policy: IP is not included in the ping, geolocation is disabled, and the analytics provider is configured not to store or enrich it.
  • The pre-update version is archived at the terms-of-service-v1.2 git tag.

View Terms of Service v1.2 (previous version)

Version 1.2 — 2026-06-17 (non-material)

Section 3 (License Grant) and the Pro tier feature list were updated to raise the Pro device-activation limit from two (2) to three (3) devices. Same price, same features — Pro subscribers may now use Acclo IQ on one additional device.

  • No user loses access to data or features; this only increases what Pro includes. No new data category, processing purpose, subprocessor, or retention change.
  • The pre-update version is archived at the terms-of-service-v1.1 git tag.
  • This non-material update does not require re-acceptance. Versioned in-app legal acknowledgments are not yet implemented and will be added before any future material policy change requires acceptance.

View Terms of Service v1.1 (previous version)

Version 1.1 — 2026-05-25 (non-material)

Sections 3.1, 3.2, 3.3, and the third-party services list were updated to reflect the SimpleFIN tier restructure: Bank Sync is available on Free within the two-account limit, while Pro supports unlimited synced accounts.

  • No new data category, processing purpose, subprocessor, or retention change. SimpleFIN was already disclosed as an optional user-initiated third-party service.
  • No user loses access to data or features. Free users gain access to SimpleFIN within existing account limits; Pro users retain unlimited account scale.
  • The pre-update version is archived at the terms-of-service-v1.0 git tag.
  • This non-material update does not require re-acceptance. Versioned in-app legal acknowledgments are not yet implemented and will be added before any future material policy change requires acceptance.

View Terms of Service v1.0 (previous version)

Version 1.0 — 2026-04-22 (baseline)

Initial beta/public baseline. This version establishes the current service description, license grant, subscription terms, refund policy, user responsibilities, privacy references, limitation of liability, governing law, and material-change notice framework.

  • Clarifies that local sync/device-bookkeeping identifiers are separate from telemetry identifiers and license fingerprints.
  • Explains when local device identity may appear in encrypted sync metadata written to the user's own cloud storage.