Privacy Policy

The short version

• Your expense data — amounts, categories, descriptions, payment sources, dates — lives on your device by default. Signing in is available once you've upgraded to Premium; if you do, it's automatically backed up to our servers too, and Premium is also what lets you pull that backup down onto a second device.
• You can export your full expense history as a CSV file at any time from Settings → Export data — free for everyone. This happens entirely on your device and is never sent to our servers.
• We never ask for, and never have access to, your bank account or card details. There is no bank/Account Aggregator integration in the App. All financial data is what you choose to type or say into it.
• Voice logging sends your recording to our transcription and extraction providers to turn it into a draft expense, then discards it — we don't keep a copy on our servers.
• We don't sell your data to anyone and don't ever intend to either. Our goal is to build a world-class money intelligence companion for folks who like staying on top of their finances and understand the value of their data. We only share data with the service providers that make the App work, each processing only what their role requires.

What we collect

Expense data you create

Amount, currency, category, description, payment source, and date for each expense you log. This is always stored locally on your device (in an on-device database). If you sign in, the same data is also backed up to our servers automatically.

Voice recordings

On iOS, your recording is transcribed on your device first, using Apple's built-in speech recognition — nothing leaves your phone for this step. If that isn't available, comes back empty, or doesn't look like an expense — or on Android, which doesn't use an on-device step — your recording is sent to our servers, which pass the audio to OpenAI (Whisper) to transcribe it; the resulting text, not the audio, is then passed to Anthropic (Claude) to extract structured expense fields. Either way, you review the draft before anything saves. We do not store the audio or the transcript after this happens — only a count of how many voice logs you've made in a period, used to enforce free-tier limits.

Account information

Signing in is optional and available once you've upgraded to Premium — voice and manual logging, and the purchase itself, all work without it. If you do sign in (what triggers the automatic Cloud Sync backup described below), we collect your email address via a one-time passwordless code, handled by our backend provider, Supabase.

Device identifier

If you use the App without signing in, we use a device identifier provided by your phone's operating system — Apple's identifierForVendor on iOS, Android's ANDROID_ID on Android — not one we generate ourselves. It's used solely to enforce free-tier voice-logging limits, and is not a persistent cross-app tracking identifier: it's scoped to apps from us only (we currently have just this one). On iOS, it resets if you delete all of our apps from your device and reinstall. On Android, it's tied to your device and does not reset when you reinstall the App alone — only a factory reset (or similar) changes it.

Cloud Sync

If you sign in (available once you've upgraded to Premium), your expenses, categories, and payment sources are automatically backed up to our servers (hosted by Supabase, in Singapore), with no separate toggle to turn on. Retrieving that backup onto a second device also requires being signed in as that same Premium account. You can delete this backed-up data — or your account entirely — at any time, directly in the App (Account → Delete account or data) or by emailing support@astorik.com; see our Account & Data Deletion page for details.

Data export (CSV)

You can export your full expense history as a CSV file at any time from Settings → Export data — free for everyone, no sign-in required. The file is generated entirely on your device from your local data and handed to your phone's native share sheet; it is never uploaded to our servers or seen by us. We do log that an export happened and how many expenses it included (see Analytics & support chat below) — never the file itself or its contents.

Subscription and payment information

Purchases are made through the Apple App Store or Google Play, and processed by Apple/Google and our subscription-management provider, RevenueCat. We never receive or store your payment card details. We store only your subscription status (active, expired, etc.) so the App knows what you're entitled to.

Analytics & support chat

We use PostHog to understand basic app usage — app opens, crash/error reports, and product events like completing onboarding, adding a category, or exporting your data. This never includes amounts, descriptions, payment source names, or other financial content you enter. Two exceptions: if you create a custom expense category, the name you typed is included in that event (app-level text, not a financial figure or free-text expense description); and if you export your data, we log only that an export happened and how many expenses it included — never the file itself or its contents. If you open in-app support chat while signed in, PostHog (which also hosts that chat) receives your email and user ID, so your conversation stays attached to your account.

What we don't collect

• Bank account credentials, bank transaction history, or anything via Account Aggregator/Open Banking frameworks — the App has no such integration, in any country.
• Your payment card number, expiry, or CVV — these never reach us.
• Precise location, contacts, photos, or anything the App doesn't need to log an expense.

Who we share data with

We share data only with the service providers that make the App work, each processing only what their role requires:

We do not sell your data to any third party, and we do not share it for advertising purposes.

Where your data is processed

Server-side data (for signed-in users) is hosted in Singapore. Our sub-processors above may process data in other countries, including the United States, under their own data protection commitments. By using the App, you consent to this transfer.

Data retention

• Local, on-device data persists until you delete it or uninstall the App.
• Server-side data (once you've signed in) persists while your account is active; contact us to request deletion at any time.
• Anonymous usage counters are automatically deleted after 3 months.

Your rights

You can delete your data or your account at any time, directly in the App (Account → Delete account or data) or by emailing support@astorik.com — see our Account & Data Deletion page for exactly what each option removes and how long it takes. You can also export a complete copy of your expense data yourself at any time as a CSV file (Settings → Export data) — no need to email us for that. For anything else, you can request access to or correction of any personal data we hold about you by emailing support@astorik.com. If you never sign in, we hold effectively nothing about you beyond a device identifier and transient processing logs, which age out automatically.

Children's privacy

The App is not directed at, and we do not knowingly collect data from, children under 13 (or the minimum age of digital consent in your jurisdiction, if higher).

Changes to this policy

We may update this policy as the App changes. Material changes will be reflected by updating the "Last updated" date above.

Contact

Astorik — support@astorik.com. Governing law: Singapore.