Legal

GDPR Compliance

Last updated: February 2026. How Thrust protects your rights under the General Data Protection Regulation.

Data Minimization

We collect nothing

Data Portability

Export anytime

Right to Access

All data on your device

Right to Erasure

Delete in Settings

Consent

You control everything

EU Compliant

Based in EU

The simplest GDPR compliance

We can't misuse data we don't have. Your financial information stays on your device, making Thrust inherently GDPR-compliant.

Our Approach to GDPR

Thrust is designed with privacy by design and by default. We don't just comply with GDPR — we go beyond it by not collecting your personal data in the first place.

Your Rights Under GDPR

Right to Access (Article 15)

All your data is stored on your device. You have complete access to everything through the App. We have no additional data to provide because we don't collect any.

Right to Rectification (Article 16)

You can edit any information in the App at any time. Since data is on your device, you have full control over corrections.

Right to Erasure (Article 17)

You can delete your data in several ways:

—Delete individual transactions: Swipe to delete in the App
—Delete accounts: Settings → Accounts → Delete
—Delete all data: Settings → Data → Erase All Data
—Delete the App: Removes all data from your device

Right to Data Portability (Article 20)

You can export your data at any time:

—CSV Export: Settings → Export → CSV
—JSON Export: Settings → Export → JSON
—PDF Reports: Settings → Export → PDF Report

Right to Restrict Processing (Article 18)

Since all processing happens on your device, you control when and how your data is processed. You can:

—Use Ghost Mode for complete offline operation
—Stop using specific features

Right to Object (Article 21)

There is no automated processing of your data on our servers. All AI processing is done locally on your device with GPU-accelerated, on-device inference.

Data Processing

Ghost Mode (No Processing)

When using Ghost Mode, no data leaves your device. There is no data processing on our side because we have no access to your data.

Connected Mode

In Connected Mode:

—iCloud Sync: Uses Apple's CloudKit. Data is encrypted with your Apple ID and stored in your personal iCloud. We cannot access it.

Data Sub-processors

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:

Supervisory Authority

If you believe your GDPR rights have been violated, you have the right to lodge a complaint with your local data protection authority.