PrivaSpend Privacy Policy

Last updated: March 29, 2026

1. Overview

Your privacy is important to us. This Privacy Policy explains how PrivaSpend handles your information.

Core principle: All your expense data is stored only on your device. We do not operate a database of your transactions. We do not sell or share your personal information. The only information that leaves your device is the text you voluntarily submit (either by typing, or from local voice transcription, or from local OCR) for the purpose of AI‑powered natural language parsing. Raw voice audio and original receipt images never leave your device.

2. Data Collection – What We Do NOT Collect

No Account: You do not need to register. We never ask for your name, email, or password.
No Transaction Storage on Servers: We do not store your transaction history on any server. Everything stays in local storage on your device.
No Analytics: We do not use analytics SDKs (Firebase, Google Analytics, etc.) that track your behaviour.
No Advertising: The App contains no ads or ad tracking.
No Crash Reporting: We do not automatically collect crash logs.

3. Information That Leaves Your Device (AI Parsing)

When you use the AI‑powered natural language feature (e.g., typing "coffee 4.5", using voice input, or scanning a receipt):

Input method	What happens locally	What is sent to our server
Typing	None – you type text.	The text you typed.
Voice	Your speech is transcribed to text using your device’s system speech recognition (Apple Speech framework). Raw audio never leaves your device.	The resulting text (e.g., "coffee 4.5").
OCR (receipt scan)	The image is processed locally using on‑device ML (Apple Vision or ML Kit). Text is extracted. The original image never leaves your device.	The extracted text from the receipt.

The text is sent to our secure server (hosted on infrastructure provided by a trusted third‑party, under a data processing agreement that complies with GDPR/CCPA). Our server analyses the text to extract structured information: amount, category, merchant, and optional note. The server does not store the submitted text or the result. All processing is transient – after the response is sent back to your app (typically within a few seconds), the text is discarded.

No raw voice or image data is ever uploaded to our server or any third party.

4. Local Storage & Permissions

Permission	Purpose	Data flow
Microphone	Voice input – used only when you tap the voice button. Speech is transcribed locally.	No audio leaves device.
Camera	OCR – used only when you scan a receipt. Image processed locally.	No image leaves device.
Local Storage / Files	To store your transaction database and export CSV files.	Stays on device.

All transaction data (amounts, categories, dates, etc.) is stored locally using SQLite or similar. You can export or delete it at any time.

5. Optional iCloud Backup

If you enable iCloud backup, your transaction data will be stored in your personal iCloud account using Apple’s end‑to‑end encryption. We do not have access to that data.