Last updated: October 12, 2026
The short version: your custody record never leaves your phone. The only data that exists outside it is the anonymous receipt of your one-time purchase.
Your record: nothing. CustodyBook has no accounts, no analytics, no ads and no tracking of any kind. If you buy the one-time unlock, the purchase itself is processed by Apple (App Store) or Google (Google Play) and validated by RevenueCat (see below). If you buy CustodyBook on our website instead, that payment is processed by Stripe through RevenueCat, and the app unlocks when you open the redemption link from your purchase email.
Everything you enter is stored locally on your device. It never leaves your phone unless YOU export it (CSV, PDF or backup file) and share it yourself.
Your entries are never sent to anyone. The app includes one third-party SDK, RevenueCat, used only to validate the one-time purchase: it receives the purchase receipt (or, for a website purchase, the one-time redemption code in your link), an anonymous user ID and a device identifier. This is not linked to your identity, is never used for tracking or advertising, and is never sold. If redeeming a link fails, the app may check whether RevenueCat's server is reachable; that check sends no data about you.
"Data Not Linked to You": purchase history and identifiers (anonymous), used only for app functionality. Everything else: not collected.
Your data is yours. Delete the app (or use "Delete ALL my data" inside it) and everything is gone. Export it any time from Settings.