Privacy Policy

Effective Date: June 16, 2026

ZeroDrain ("we", "our", or "us") is built on a strict Data Sovereignty model. We reject the standard practice of harvesting and monetizing your financial data. Our architecture is fundamentally designed to act as an automated warden on your device, prioritizing absolute privacy over cloud convenience.

1. Local-First Processing & Data Sovereignty

ZeroDrain operates on a local-first, on-device engine. We bypass mandatory cloud-based infrastructure (such as Plaid) entirely to ensure zero cloud transit of your sensitive financial data.

• Apple FinanceKit Integration: We securely request and fetch transaction histories (e.g., Apple Card, Apple Cash, and savings accounts) directly from the on-device Wallet app into SwiftData. Your transaction data never leaves your device.
• Scoped Email Parsing: If you choose to enable email sync, ZeroDrain parses your receipts natively using scoped IMAP/OAuth tokens. The processing is done entirely on-device, isolating subscription patterns without external APIs reading your emails.
• Manual Drop-Box: For users who reject linking external credentials, we provide an un-linked, manual entry interface using native PDFKit. All processing of CSVs or PDFs is strictly local and encrypted.

2. On-Device CoreML AI Engine

Our financial categorization and reasoning are powered by a local CoreML LLM engine. This means our AI assistant ("Draino") computes real-time "Leak Value" matrices and identifies toxic subscriptions directly on your hardware. No subscription or transaction data ever hits an external API or server for processing.

3. Action Layer & Secure Enclave

When you trigger the "Kill Switch" to cancel a subscription, ZeroDrain deploys deep links to merchant cancellation portals and may generate automated cancellation communications. Any cryptographic authorization keys utilized during these terminal operations are strictly guarded by the native Apple Secure Enclave.

4. Data Collection

We do not collect, store, or sell your financial transaction history, banking credentials, or personal emails. The only data we may collect is:

• Email addresses voluntarily provided for our waitlist and launch notifications.
• Basic, anonymized crash reports (if opted-in via iOS settings) to improve application stability.

5. Changes to This Policy

We may update our Privacy Policy periodically. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

6. Contact Us

If you have any questions or require support regarding your data sovereignty, please reach out via our official channels or on X at @jaydoshi.iosdev.