I know that I am genuinely trying to help people like me with simple tools but how can I build that trust?
It's hard to save data in local storage because I ask users to import bank statements.
Why can't the statements stay local?
- If it's in the Apple App Store, don't collect data, so that privacy report is clear. Seeing that report empty automatically raises my trust in the developer, because they aren't collecting a bunch of stuff just to collect it and do who knows what with it.
- Allow the app to function through manual entries, without importing actual statements, where I can be truly anonymous, if this can make sense for the app. This lets me try it out and get comfortable with the app and the developer before I decided to load in private data.
- Have a clear, easy to read, privacy policy that makes it very clear and obvious that nothing is being collected, analyzed, sold, etc, etc, etc.
>It's hard to save data in local storage because I ask users to import bank statements.
Why can't this be done on-device? Why do statements need to be saved on your server? If these giant corporations with millions of dollars being spent on security are getting hacked, why should a user trust a small indie dev?
Looking at what I'm guessing is your privacy policy (https://lit.money/privacy.html).... I'm going to get really picky:
>Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your User experience and app performance, and gather demographic information. You can manage your cookie preferences through your browser settings.
Why are you collecting my demographic information? Why do I have to manage my preferences to maintain my privacy? If I am to trust you, shouldn't you default to not collecting this stuff?
>Finance Data: We do not sell or share any finance data without your explicit consent.
Why would you sell/share it at all? This makes me think something ticky is going to happen and I need to read the fine print very carefully to avoid having my data sold.
>Analytics and User Experience: We utilize Google Analytics, Microsoft Clarity, and other third-party tools to analyze User behavior, track usage patterns, and enhance the User experience on our website.
Does this mean Google, Microsoft, and "other" could get access to my financial data? Don't these analysis platforms have access to what is happening on the screen? The more tracking a site has, the less I trust it. If my browser warns me that a site has a lot of trackers on it, I will often leave.
>We may share your information with trusted Data and Server hosting providers platforms who assist us in operating our website and delivering our services.
What does this mean? What information is being shared? What does "trusted" mean? I don't trust the man behind the curtain.
>However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security, but we are committed to doing everything in our power to protect your data.
While honest, this is like the get out of jail free card.
>Opt-Out: You may opt out of receiving promotional emails from me by following the unsubscribe instructions provided in the email.
Why do I have to opt out after you send me an email. Emails should only be opt-in. I lose trust in sites that sign me up for a mailing list without my explicit request. I've stopped doing business with companies over this. This is a huge pet peeve of mine. If I can't trust a company to not abuse my email address, why would I trust them with my bank statements?
All of the above would be little red flags going off in my head that would make me question if I should trust this.
2. Will add this feature and allow users to add manual entry. So like you said, they can try.
3. I don't save statements on the server, I just process them and do categorization.
4. Will find privacy-friendly website analytics.
5. I have updated this to: "We do not sell or share any finance data." Because like you said, I do not.
6. I just removed Microsoft Clarity and keeping Google Analytics for now.
7. I have updated this and just shared in a clear and better way how I save data on the server.
8. I have removed Opt-Out open as I don't send marketing emails.
This was really helpful :) Feel free to share more feedback on site if you want.