A Private Expense Tracker With No Cloud and No Account
Expense records are among the most revealing data you own. Where you go, when, what you buy, what you are treating, who you pay. Most apps ask you to keep that in an account on their servers and promise to look after it. HeyJerni takes the other route: there is no account, no cloud copy and no server that receives your records, so the promise is not something you have to take on trust.
No sign-up. Records stored in an encrypted database on the device.
Policy privacy and architecture privacy
A privacy policy is a description of what a company intends to do with data it holds. It can be honest, well meant, and still change when the company is acquired, funded differently, or breached.
Architecture privacy is different. If the data never leaves your device, there is no copy to be leaked, sold, subpoenaed or accidentally exposed, because nobody else ever had one.
HeyJerni is built the second way. That is a stronger claim than a policy, and it also constrains what the app can offer: no sync, no web access, no recovery if you lose the phone without a backup.
What that means concretely
No account to create
No email, no password, no profile. There is nothing to sign in to, which means there is nothing to be locked out of and nothing to delete later.
Encrypted on the device
Records live in an AES-256 encrypted database on the iPhone, alongside the receipt images they belong to.
The AI runs locally
Receipt reading and spending questions use a model downloaded to the phone. Your receipts are not processed by a service and your questions are not prompts sent to one.
No bank connection
No credential is asked for and no data provider sits between you and an account, because there is no import feature at all.
Exports go where you send them
A Tax Pack or a backup archive is a file. It goes to Files, your own iCloud Drive, or an email you write. HeyJerni keeps no copy.
It works with the radio off
Aeroplane mode is the simplest test of any privacy claim. Everything except the one-time model download keeps working.
The parts that do touch the internet
Two things, neither of which involves your records. Saying so plainly is more useful than claiming nothing ever connects.
| What | What it sends | How to avoid it |
|---|---|---|
| The one-time AI model download | A file request for the model. No user data. | Nothing to avoid; it happens once. |
| Banner ads in the free version | Standard technical data such as IP address and device model, to Google, to serve non-personalised ads. | The one-time Remove Ads purchase disables the ad SDK entirely. |
| The Remove Ads purchase | Handled by Apple. HeyJerni never sees your name, payment details or Apple ID. | Not applicable. |
HeyJerni never requests iOS tracking permission, and ads in the free version are non-personalised.
The cost of no cloud
Nobody else holding your data also means nobody else can give it back. Lose the phone without a backup and the records are gone, and there is no support ticket that changes that.
HeyJerni exports a full backup archive containing the records and the receipt images. Where it goes is your decision, and making that decision occasionally is the price of the rest of this page.
This is for you if you
- Would rather no company held your spending history
- Do not want to hand over a banking login
- Are comfortable managing your own backups
- Use one iPhone and do not need sync
This is not for you if you
- Want records available on several devices
- Want a service that can restore your data for you
- Want to share tracking with a partner or an accountant inside the app
- Prefer automatic imports over keeping receipts
Frequently asked questions
Where are my expense records stored?
In an AES-256 encrypted database on your iPhone, together with the receipt images. There is no cloud copy.
Does HeyJerni have my data at all?
No. There is no account system and no server that receives expense data, so there is nothing on our side to hand over, lose or sell.
Are my questions to the AI sent anywhere?
No. The model runs on the phone and answers are computed from your local records. Nothing about the question or the answer leaves the device.
What about the ads in the free version?
They are non-personalised and served by Google AdMob, which receives standard technical data such as your IP address and device model. HeyJerni never requests iOS tracking permission, and the one-time Remove Ads purchase disables the ad SDK.
Can you recover my data if I lose my phone?
No, and that is the honest consequence of the design. Export a backup archive regularly and keep it somewhere you control.
How is this different from an app that promises not to sell my data?
A promise depends on a company keeping it. Here the data is not in a position to be sold, because it never leaves your device.
Related pages
Nothing to sign up for
Download HeyJerni and start recording. No email, no password, and no copy of your spending anywhere but your phone.