Privacy Policy

Obolos is a personal finance app. This policy describes what data the app collects, why, and what happens to it. The short version: your financial records exist so the app can show them back to you. We do not sell data, we do not show ads, and we do not share your data with third parties for marketing.

What we collect

• Account data. When you sign in with Apple or Google we receive your name (if you share it), email address, and a provider identifier. We use them to create and identify your account.
• Financial records you enter. Accounts, transactions, transfers, categories, savings goals, planned payments, and images you attach to categories. These are stored on our servers so they sync to your devices.
• Device and session data. A device identifier and name for managing your signed-in sessions, and standard server logs (IP address, request timestamps) kept briefly for security and abuse prevention.

• Crash reports. If the app crashes, a technical report (device model, OS version, stack trace — no financial records) is sent to our error-monitoring provider (Sentry, EU-hosted) so we can fix the bug.

We do not collect your bank credentials, contact lists, location, or advertising identifiers, and the app contains no third-party analytics SDKs that profile you.

How data is used

Solely to provide the service: storing and syncing your records, converting currencies using published exchange rates, computing statistics and forecasts shown in the app, and keeping your account secure. We do not use your financial data for advertising or sell it to anyone.

Smart recognition (optional)

Receipt scanning works on your device by default — the photo never leaves the phone. Voice entry uses Apple's speech recognition: on-device when the dictation model is installed, otherwise the audio may be processed by Apple's speech service under Apple's privacy policy. If you explicitly enable Smart recognition (asked on first use, switchable in Settings), a downscaled photo of a receipt, the text of a dictated expense, or the contents of a bank statement you upload to reconcile (PDF, CSV or XLSX) may be sent to our server and passed to an AI service provider (Anthropic) for one-time parsing. The data is processed in real time to extract the amount, currency and category, is not used to train models, and the original file is not stored by us; the provider retains API inputs briefly (up to 30 days) solely for abuse prevention. The line items extracted from a statement are cached on our server for up to 2 days, so re-uploading the same file does not require parsing it again. Disable the toggle at any time to keep recognition fully on-device — statement reconciliation is then unavailable.

Where data lives

Data is stored in a managed PostgreSQL database and file storage hosted by our infrastructure providers (Vercel and Neon), with encryption in transit and at rest. Exchange rates come from a public rates provider; only currency codes — never your amounts or identity — are sent to it.

Data retention and deletion

Your data is kept while your account exists. You can delete your account at any time in the app (Settings → Delete account) or by emailing us. Deletion is immediate and irreversible: all accounts, transactions, goals, settings, sessions, and uploaded images are permanently removed. Residual copies in encrypted backups expire within 30 days.

Your rights

You can export your data from the app (Settings → Export), correct it by editing records, and delete it as described above. If you are in a jurisdiction with additional data-protection rights (such as the GDPR), you may exercise them by contacting us.

Children

Obolos is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes materially we will update this page and note it in the app. Continued use after a change means you accept the updated policy.

Contact

Questions or requests: evless56@gmail.com