Last update 16 October 2026

Privacy Policy — Abachista

Abachista is an administration and accounting app for Italian micro businesses, on iPhone, iPad and Mac. It requires no account, and Aumatex srls runs no server that receives your companies’ data: it stays on your devices and, if sync is on, in your private iCloud. This policy describes which data the app handles, where it is stored and which network connections it actually opens.

Abachista

1. Data Controller

  • Aumatex srls — Via Umberto Biancamano 25, 00185 Rome (RM), Italy. VAT IT15617831001.
  • Requests about personal data: privacy@aumatex.it.

2. Data collected by Aumatex

  • Abachista collects no personal data: there is no sign-up or login, no Aumatex account and no Aumatex server the data could be sent to.
  • Aumatex does not receive the company data, documents, contacts, attachments or preferences you enter in the app, nor any usage or diagnostic data.
  • This is why Abachista’s App Store privacy label reads “Data Not Collected”.

3. Data handled on the device

  • In the app you record the data of your company and its business: company details, accounts, commercial documents and invoices (FatturaPA files included), payments in and out, tax data, partners, payroll, items and stock, plus attachments (scans, images and files) and your logo.
  • This data may include personal data of third parties, such as customers, suppliers, partners, employees and contact people (names, tax codes, VAT numbers, addresses, contact details, bank details). It is stored in the app’s database on the device; on iPhone and iPad the files are protected by the operating system’s encryption.
  • For the widgets, the app writes a summary of the deadlines into the container it shares with its own extension (App Group); the widget reads only that summary, on the device.
  • Local preferences, including the app lock and the language, also stay on the device.

4. iCloud sync and backups

  • Sync across iPhone, iPad and Mac uses the private database of your iCloud account (CloudKit), with one zone per company, attachments included. The content of your entries and attachments is saved in CloudKit’s encrypted fields, with keys tied to your iCloud account; only the technical data sync needs, such as the record type and the order of changes, stays in the clear. It is turned on and off in Settings › iCloud.
  • The owner of a company can share it with other people who use iCloud, such as their accountant or a partner, each to read or to edit it (Settings › My company › Sharing). Sharing uses CloudKit: the company stays in the owner’s private database, and the people invited receive it in the shared database of their own iCloud and on their devices. Participants see each other’s iCloud name or contact and, for every entry, who recorded it. Only the owner invites, removes a person, stops sharing or deletes the company, at any time; a person invited can leave the company. Aumatex receives nothing.
  • To tell your other devices about a change, iCloud sends silent push notifications through Apple’s notification service: they show no content and do not pass through Aumatex.
  • Once a day the app saves a backup of every company you changed, as a Abachista export, in the Abachista folder of iCloud Drive (or on the device, if iCloud Drive is off). The app keeps the backups of the last ten days, then one a week for four weeks and one a month up to six months, and deletes older ones. Backups are turned off in Settings › Data & Backups; those already saved remain in iCloud Drive until you delete them, even after the app is uninstalled.
  • Theme, deadline reminder and backup settings are copied to iCloud’s key-value store, so they follow you to all your devices.
  • Data in iCloud is handled by Apple under its own terms and privacy policy. Aumatex has no access to your iCloud account.

5. The European Commission’s VIES registry

  • When you enter a valid VAT number while creating your company, or the VAT number of a business among your contacts, the app queries the European Commission’s VIES service (ec.europa.eu) to suggest the registered name and office.
  • The request carries only the country code and the VAT number. The European Commission also receives the IP address and the usual technical data of the request, handled under its own policy. The answer is shown as a suggestion and is not sent anywhere else.

6. Other network connections

  • The app makes no requests to Aumatex srls servers.
  • When you open Settings › About, the app asks Apple’s App Store (itunes.apple.com, its public app lookup) whether the Aumatex apps not yet out are on sale, to show them in “More from Aumatex”. The request carries only their App Store identifiers and the store’s country, taken from the device’s region; it is sent at most twice a day, without caching, and no longer at all once every app is out. Apple receives the IP address and the usual technical data of the request.
  • Only when you act, the app opens external services: Apple Maps or Google Maps with the address of a contact you chose, a contact’s website, a phone call, the Mail app, App Store pages and Apple’s terms of use. These services handle the data they receive under their own policies.

7. Device permissions

  • Face ID / Touch ID: only for the optional app lock (Settings › Lock). Recognition happens in the operating system; biometric data is not accessible to the app.
  • Camera: only to scan invoices and receipts with the system’s document camera (iPhone and iPad). The pages become a PDF attached to the document you record. To suggest supplier, number, date and amounts, the app reads their text on the device with Apple’s text recognition (Vision), as it does with a photo or PDF you choose: neither the images nor the text leave the device or reach Aumatex.
  • Calendars: the app creates a calendar for each company in the device’s default calendar account and keeps its deadlines up to date there. It reads and changes only the events of its own calendars. If that account syncs (iCloud, for example), the events follow the calendar’s sync.
  • Contacts and Photos: the app uses the system pickers, which need no permission; it receives only the card or the images you choose.
  • Every permission can be revoked at any time in the system settings.

8. Notifications

  • Deadline reminders are local notifications, scheduled on the device: they pass through no server. The app schedules no notifications about the subscription.
  • They are turned on at your request and adjusted in Settings › Deadline reminders or in the system settings.

9. Email, exports and files

  • Documents are sent by email through your Mail app, from your own account: Aumatex receives neither the messages nor the recipients.
  • Exports (.abachista files, PDFs, FatturaPA XML and spreadsheets) and imports happen only when you ask, and you choose where files are saved or opened from.
  • Abachista sends nothing to the Italian exchange system (SdI) or the Agenzia delle Entrate: it writes the invoice XML files and prepares the F24 forms, which you hand to your own provider. SdI receipts are imported as files, when you choose to.

10. Subscriptions and payments

  • The Abachista Pro subscription, monthly or annual, is handled by Apple through StoreKit: payment data never reaches Aumatex.
  • The free first month is the App Store’s introductory offer on the monthly and annual subscriptions: Apple grants and manages it, and checks eligibility on your Apple Account; the app counts no trial period on the device. The app reads the subscription status through StoreKit, on the device.
  • In a shared company the owner’s app records only whether their subscription is active, so that the people invited to edit can keep editing. The people invited use the company without a subscription; no payment data is shared.

11. No tracking, analytics or advertising

  • No telemetry, no analytics tools, no third-party crash reporting.
  • No advertising SDKs, no profiling, no advertising identifier (IDFA). The app does not track you.
  • The app includes no third-party dependencies: only Aumatex code and Apple frameworks.

12. Third-party data you enter

  • The personal data of customers, suppliers, partners, employees and other people is entered and managed by you for your business: for that data you, or the company you work for, act as data controller.
  • Aumatex does not process that data on your behalf, because it never receives it: it stays on your devices and in your iCloud account and, if you share a company, in those of the people you invited.

13. Legal basis and retention

  • Aumatex srls processes no personal data of users through Abachista: it does not receive, store or have access to it.
  • Data stays on the device and, if sync is on, in your iCloud account, for as long as you decide. A company is deleted from Settings › Companies › Remove…; data in iCloud can also be deleted from the iCloud settings; backups in iCloud Drive are deleted from the app or from Files.
  • Requests to the VIES service and to the App Store go straight from the device to those services, which handle them as independent controllers.

14. Recipients and transfers outside the EU

  • We do not share personal data with third parties, because we receive none.
  • Apple handles the data of iCloud, push notifications, App Store lookups and purchases on its own infrastructure, which may be located outside the European Union.
  • If you share a company, its data reaches, through iCloud, only the people you invited: you choose them, not Aumatex.
  • The European Commission handles requests to the VIES service. Google handles data only if you open an address in Google Maps.

15. Your rights

  • You can exercise the rights of access, rectification, erasure, restriction, objection and portability by writing to privacy@aumatex.it.
  • For the data kept on your own devices and in your own iCloud, you exercise these rights directly: you can view, change, export and delete it from the app.
  • You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

16. Children

  • Abachista is meant for businesses and professionals and is not directed to children under 13; it does not knowingly collect data about them.

17. Changes to this Privacy Policy

  • Aumatex srls may update this policy: the date at the top of the page shows the latest revision.

18. Contacts

  • Privacy: privacy@aumatex.it.
  • Support: supporto@aumatex.it.
  • Aumatex srls — Via Umberto Biancamano 25, 00185 Rome (RM), Italy. VAT IT15617831001.