Sort All Money · Privacy
Privacy Policy
Last updated / effective from: 18 August 2026
This explains what personal data Sort All Money (SAM) processes, why, and what rights you have — written to accurately reflect how the app works today, in plain English, structured around what UK data protection law expects a privacy notice to cover.
1. Who is responsible for your data
Sort All Money (SAM) is developed and operated by Sam Brady, an independent UK-based developer, trading as Sam8. Sam Brady is the data controller for the personal data described in this policy — the person who decides why and how it's processed — and can be contacted at hello@sam8.co.uk.
2. Scope of this policy
This policy covers the Sort All Money iOS application and the sortallmoney.com product website. The website doesn't use cookies, analytics or tracking technologies, and processes nothing beyond the ordinary web server logs generated by any website's hosting infrastructure. If that changes — for example, if analytics are added — this policy will be updated to reflect it.
3. Data SAM processes
SAM processes two broad categories of personal data. The first is financial data you enter yourself — planning cycles, bills, income, one-off outgoing amounts, and the settings you configure. This is the core of what the app does, and it's entirely within your control.
The second is service and status data processed through Apple — for example, your SAM Plus subscription status, and any account-level information Apple's own systems generate around iCloud or App Store use. SAM does not independently store or control Apple's account or billing information; it only receives the limited service-status information needed to provide features such as SAM Plus (see Section 12).
Beyond this, there's no separate SAM account system or user profile.
4. Why SAM processes it, and the lawful basis
UK GDPR requires us to identify a lawful basis for each way we use your data, rather than one basis for everything. Most of SAM's features are optional, but the test for “performance of a contract” isn't simply whether you've chosen to switch a feature on — it's whether processing that data is objectively necessary to deliver the specific part of the service you've asked for. Where a feature is optional, SAM only processes the information needed to provide that feature after you choose to use it. The lawful basis shown below reflects the processing required to deliver the feature itself. Here's how that maps for SAM:
| Activity | Purpose | Lawful basis |
|---|---|---|
| Bills, income, outgoing & planning cycles | To calculate Available to Spend and provide SAM's core functionality | Performance of a contract — this is the service you're using SAM for |
| App lock (Face ID / Touch ID) | To protect access to the app, for users who choose to turn this on | Performance of a contract — a feature you've specifically requested. SAM doesn't process the biometric data itself (see Section 7) |
| Optional iCloud backup | To let you restore your data on a new device, for users who choose to turn this on | Performance of a contract — a feature you've specifically requested |
| Local reminders | To notify you about bills and confirmations you've asked to be reminded about | Performance of a contract — a feature you've specifically requested |
| In-app financial analytics | To show you trends calculated from your own completed planning cycles | Performance of a contract — part of the service you've signed up to use |
| SAM Plus subscription status | To unlock the features you've paid for | Performance of a contract |
SAM's core data — bills, income and planning cycles — isn't inherently “special category” data under UK GDPR. But if you use a free-text field to enter something that reveals a characteristic like health, religious belief or similar, that specific entry could itself count as special category data depending on context. SAM doesn't require or encourage this, but it's worth being aware of.
5. Where your data is stored
SAM's core data is stored locally on your device, protected using iOS's own data-protection mechanisms rather than a custom or third-party storage layer. There is no separate SAM account or SAM-operated server holding a copy of your financial data.
6. iCloud backup
If you enable it, SAM can back up its local data to your own private iCloud account, using Apple's standard iCloud infrastructure. This doesn't require or create a separate SAM account — the backup is stored in the private CloudKit database associated with your iCloud account.
7. Face ID / Touch ID
If you choose to lock SAM behind Face ID or Touch ID, that authentication is handled entirely by Apple's device authentication system. SAM asks iOS whether you passed the check — it never receives, processes or stores any biometric data itself.
8. Notifications
Reminders — for overdue bills, items due today, or amounts that need confirming — are scheduled locally on your device using iOS's local notification system. Sending a SAM reminder does not involve contacting a push-notification server.
9. SAM Plus & App Store purchases
If you subscribe to SAM Plus, your payment is handled entirely by Apple through the App Store's standard In-App Purchase system — SAM never sees or stores your payment card details. Apple acts as an independent controller for your purchase and billing information, governed by Apple's own privacy policy rather than this one. SAM receives confirmation of your subscription status from Apple's systems, used only to unlock SAM Plus features.
10. Analytics inside SAM
“Analytics” means one specific thing in SAM, and it's worth being precise about it: user-facing financial analytics — trends calculated from your own completed planning cycles (income, bills, outgoing, Available to Spend), shown to you inside the app. This is calculated from your data, for your own use, and isn't shared with anyone.
SAM does not include any third-party analytics, advertising or tracking SDKs.
11. FinanceKit & Apple Wallet
Matching transactions from Apple Wallet via FinanceKit is a planned feature and is not currently active. Apple requires apps requesting FinanceKit access to be transparent about exactly what financial information is requested and how it's used — when this feature is enabled, this section will be expanded to explain that in full before the feature ships, not after, and you will always be asked for explicit permission before FinanceKit access is requested.
12. Apple services and other recipients
SAM does not operate its own server for storing your financial data, and does not send your financial data to advertising networks, data brokers or third-party analytics providers.
Some optional features rely on Apple's own platform services, rather than anything SAM operates:
iCloud — if you enable iCloud backup, SAM stores backup data in the private CloudKit database associated with your iCloud account. Apple states that the user's private CloudKit database is accessible only to that user by default, that the user owns its contents, and that its records are not visible through the developer portal.
Face ID / Touch ID — authentication is performed by iOS itself, using Apple's LocalAuthentication framework. The underlying biometric authentication data is not made available to SAM.
Local notifications — reminders are scheduled locally on your device. There's no SAM-operated push-notification server involved.
App Store purchases — Apple processes your payment and billing information under its own terms and privacy policy. SAM receives only the entitlement information it needs from StoreKit to know whether you have SAM Plus.
13. International transfers
SAM itself doesn't operate servers outside the UK, and doesn't directly transfer your financial data to any SAM-operated overseas service.
Where you use Apple services, Apple may process personal data internationally under its own role and privacy terms. Apple states that personal data relating to people in the UK may be processed by Apple Inc. and other Apple group companies, and that its international transfers of UK personal data are governed by Standard Contractual Clauses. Further information about Apple's international transfers, including how to request a copy of the relevant safeguards, is available in Apple's privacy documentation.
14. How long data is kept
Your planning data stays on your device for as long as you keep SAM installed. If you delete an item, it's removed from your device immediately. If you delete the app, its local data is removed following standard iOS app-deletion behaviour.
If you've enabled iCloud backup, a copy also exists in your iCloud account. Disabling backup or deleting the app doesn't necessarily delete existing iCloud backups immediately, since those are managed through iCloud rather than by SAM directly. You can manage iCloud storage associated with SAM through your Apple Account/iCloud storage settings. The exact controls available may vary by iOS version.
15. Your data protection rights
Under UK GDPR, you have rights over the personal data SAM holds about you, including the right to access it, correct it if it's inaccurate, ask for it to be deleted, and receive it in a portable format. Some data protection rights depend on the lawful basis being used. For example, the UK GDPR right to object does not generally apply where processing is necessary to perform a contract. Other rights, including access, rectification, erasure and data portability, may still apply subject to the circumstances and any legal exceptions.
Because your data lives on your device, you can exercise most of these rights yourself, directly in the app — viewing, editing, deleting or exporting any bill, income item or cycle at any time (see Section 16). For anything you can't do yourself in-app, contact hello@sam8.co.uk.
16. Deleting or exporting your information
You can view, edit and delete your information directly within SAM at any time. SAM also includes built-in export and import tools: a full export creates a SAM backup file that can later be re-imported into SAM, and you can separately export your current planning cycle as a CSV file for your own records. CSV exports are plain text and aren't encrypted by SAM once created, so you're responsible for storing or sharing those files securely.
You can reset SAM's local data from within the app. Where iCloud backup has been enabled, deleting local data doesn't automatically remove an existing iCloud copy — that may need to be removed separately, either from within SAM or through your iCloud storage settings, depending on the controls available.
17. Children
SAM isn't designed or marketed for children. Its financial nature means it's primarily intended for people old enough to manage their own money independently, and we don't knowingly collect personal data from children. If you believe a child has provided personal data to SAM, contact us and we'll delete it.
18. Complaints
If you have concerns about how SAM handles your data, we'd genuinely like the chance to sort it out directly first — email hello@sam8.co.uk. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, or by calling 0303 123 1113.
19. Changes to this policy
If SAM's data practices change — for example, when FinanceKit support is enabled — this policy will be updated to reflect that before the change ships.
20. Contact
Privacy enquiries can be sent to hello@sam8.co.uk.