Privacy Policy

Last updated: 12 August 2026

Multi is a personal app for tasks, habits and expenses. It is built so that your information stays on your iPhone. There is no Multi account, no Multi server, and no analytics. This page explains exactly what that means.

The short version. Everything you put into Multi is stored locally on your device. iCloud sync is off unless you deliberately turn it on, and even then your data goes to your own private iCloud, not to us. Voice capture and receipt scanning are processed entirely on your device. We collect no analytics, use no tracking, run no advertising, and include no third-party SDKs. We do not sell or share your data, because we never receive it.

1. Who we are

Multi (“the app”, “we”, “us”) is an iPhone application. For any question about this policy or about privacy in the app, email hello@getmulti.app.

2. Where your data lives

All of the content you create in Multi is stored locally on your device, in the app’s own database. That includes your items and their titles and notes, repeat rules, completion history, amounts and currencies, budgets, reminder settings, scanned receipt images, and your app preferences such as the accent theme.

There is no Multi server and no Multi user account. We do not operate a backend that stores your content, so there is no copy of your list held by us, and nothing for us to look at, hand over or lose.

3. iCloud sync (off by default)

Multi can sync your data between your own Apple devices. This is off by default. It only becomes active if you do both of the following:

Sign in with Apple inside the app, and
Explicitly enable iCloud sync in the app’s settings.

When sync is enabled, your data is stored in your own private iCloud — specifically, Apple’s CloudKit private database, which belongs to your Apple Account. It is not sent to us, and we cannot read it. Apple’s handling of that data is governed by Apple’s own privacy policy.

If you turn sync off, the app returns to storing your data only on the device.

4. Sign in with Apple

Sign in with Apple exists in Multi for one reason: it is the gate for enabling iCloud sync. It is not required to use the app.

When you sign in, the app stores the Apple user identifier — and your display name, if Apple provides it (Apple supplies this only once, at first sign-in) — on your device, in the iOS Keychain. This identifier is what lets the app associate your data with your private iCloud database. If you use Apple’s “Hide My Email” option, we never see a real email address; in fact we do not receive your email address at all.

5. Voice capture

Multi lets you speak several items at once and turns them into entries. This is processed entirely on your device. The speech recognition and the language model that interprets what you said both run locally on the iPhone. Audio is not uploaded anywhere — not to us, and not to a third-party speech service. Recordings are not retained after the text has been produced. Voice capture currently understands English.

Using it requires your permission for the microphone and for speech recognition. iOS will ask you, and you can withdraw either permission at any time in the iOS Settings app.

6. Receipt scanning and OCR

When you scan a receipt or document for an expense, the image is captured with the camera and the text is read using on-device OCR. The recognition happens locally; nothing is sent to a server for processing. Receipt photos are stored in the app’s local database on your device and are never uploaded to us. If you have enabled iCloud sync, they sync to your own private iCloud along with the rest of your data.

Scanning requires camera access, and choosing an existing image requires photo library access. Both are requested by iOS and can be revoked in the iOS Settings app.

7. Notifications

Reminders, and the alert when you pass a monthly budget, are delivered as local notifications scheduled on your device. They are not push notifications sent from a server, and scheduling them does not transmit anything. Notification permission is requested by iOS and can be turned off at any time.

8. Analytics, tracking and advertising

Multi contains no analytics, no tracking, no advertising and no third-party SDKs. We do not use cookies, device fingerprinting, an advertising identifier, attribution frameworks or crash-reporting services that profile you. We do not build a profile of you, and there is no cross-app or cross-site tracking.

We do not sell your data and we do not share it. There is nothing to sell or share, because your data never reaches us.

9. Purchases

Subscriptions and the lifetime purchase are handled entirely by Apple’s App Store. Payment is processed by Apple. We never see your payment details — no card number, no billing address. The app receives only the entitlement information it needs to know whether your purchase is active. Apple’s privacy policy governs the transaction itself.

10. Children

Multi is not directed at children under 13, and we do not knowingly collect information from them. Since the app collects no personal information at all, there is nothing for us to hold about any user regardless of age.

11. Your control over your data

Export. You can export your data from within the app at any time.
Delete individual data. Deleting an item in the app deletes it from the device’s database (and from your private iCloud, if sync is enabled).
Delete everything. Deleting the app from your iPhone deletes the local data it stored. If you had enabled iCloud sync, you can additionally remove the app’s data from your iCloud storage in the iOS Settings app, under your Apple Account → iCloud.
Turn sync off. Disabling iCloud sync in the app stops further syncing.
Revoke permissions. Microphone, speech recognition, camera, photos and notifications can each be withdrawn in the iOS Settings app.

Because we hold no personal data about you, requests to access, correct or erase data held by us have nothing to act on. Rights of this kind under laws such as the GDPR and the CCPA are satisfied by the fact that the data is in your hands, on your device, and is exportable and deletable by you.

12. Security

Your data is protected by iOS itself: the app’s storage sits inside the app’s sandbox and benefits from your device’s encryption and passcode. The Apple user identifier is held in the Keychain. If iCloud sync is enabled, data in transit and at rest in iCloud is protected by Apple’s infrastructure. Keeping your device passcode-locked and up to date is the most effective thing you can do to protect it.

13. Changes to this policy

If this policy changes, we will update this page and the “Last updated” date at the top. Substantive changes will also be noted in the app’s release notes.

14. Contact

Privacy questions are welcome at hello@getmulti.app.