Privacy Policy
Effective date: 16 October 2026
This policy applies to the Qalta mobile app (“the app”) provided by Daniel Tokkozhin (“we”). It explains what stays on your device, what leaves the device, and which companies process that data.
Private spaces stay on your device
Your records are kept in spaces. A private space, with its accounts, transactions, categories, budgets, goals, debts, recurring items, and similar data, is stored only on your device (SQLite). We do not upload private spaces to our servers.
If you use the optional backup feature, copies can be stored in your iCloud account. That storage is provided by Apple and is covered by Apple’s privacy policy.
Shared spaces
Sharing is optional. If you share a space, that space and everything in it (its name, accounts, transactions, transfers, categories, budgets, goals, debts, recurring items, and the notes you add) is uploaded to our backend provider, Supabase, and kept in sync with your other devices and with the people you invite. Only members of the space can access it. Each record shows which member created it and who edited it last.
Members of a shared space can see each other’s name, email address, and profile picture from the sign-in account, and when each member joined. Invitations are one-time links that expire after 7 days. We store only a hashed form of the invitation code, and expired invitations are deleted automatically.
When the owner stops sharing or deletes a shared space, its data is deleted from our servers and every member loses access; a copy stays on each member’s device until they remove it. When a member leaves or is removed, they lose access to the data on our servers. If your subscription ends, syncing pauses, and the data already uploaded stays on our servers until the space is deleted.
Account
You sign in with Sign in with Apple or Sign in with Google. We receive an identity token from Apple or Google and create an account with our backend provider, Supabase. That account can include a user ID, an email address (including Apple’s Hide My Email relay), your name, and, with Google, your profile picture. You can change the name shown to other members in the app.
You can delete your account in the app. That removes the account and subscription records we store. If you own shared spaces with other members, you need to delete those spaces or remove their members first. Data in private spaces on the device is separate; you can also clear local financial data in Settings.
Subscriptions and purchases
Purchases are processed by Apple. We use RevenueCat to read subscription status. We store a premium flag and AI usage counters (how many voice, image, and document requests you have used) in Supabase, linked to your user ID. We do not receive or store payment card numbers.
Voice, scan, documents, and other AI features
When you use voice input, receipt or document scan, or other AI extraction, the app sends the content you submitted to our backend (Supabase Edge Functions). The backend forwards that content to OpenAI so the app can propose transactions.
Depending on the feature, that content may include:
- voice audio;
- photos of receipts, bills, statements, or similar documents;
- text extracted from documents;
- text you typed;
- names of accounts and categories on the device, plus related amounts and currency, so the model can match them.
This is sent only to provide the feature you asked for. We do not store the submitted content in our database. The backend uses the request to return structured entries and to count usage against your limits.
OpenAI processes the request under its API terms. OpenAI states that, by default, API inputs are not used to train its models. OpenAI may retain data for a limited period to operate the API and for abuse monitoring. See OpenAI’s policies linked below.
AI features are optional. You can add transactions manually without sending this content.
Analytics, crashes, and other network data
- Exchange rates. The app downloads public currency-rate snapshots from our servers. This is not your journal.
- Product analytics (PostHog). We record events such as which features you use, approximate usage counts (for example, number of transactions, not amounts), and app language. Events are associated with your user ID. We do not send transaction amounts, notes, photos, or audio to PostHog.
- Crash reports (Sentry). We send crash diagnostics to help fix bugs. We do not attach screenshots or extra personal information to those reports.
- Technical data. When the app talks to a server or SDK, that party typically receives technical information such as IP address, device type, and operating system version.
What we do not do
- We do not sell your data.
- We do not use your data for advertising networks or to track you across other companies’ apps and websites.
- We do not collect precise GPS location. The app uses language and region settings from the device, not GPS.
Third-party processors
These companies process data as described above. Each has its own privacy policy:
- Apple — Sign in with Apple, App Store, in-app purchases, optional iCloud backup
- Google — Sign in with Google
- Supabase — account, subscription and usage records, shared spaces, backend functions
- OpenAI — AI processing of content you submit (API / enterprise privacy)
- RevenueCat — subscription status
- PostHog — product analytics
- Sentry — crash reports
- Expo — app runtime
We may also disclose information if required by law, or if we believe in good faith that disclosure is needed to protect rights, safety, or to investigate fraud.
Retention and deletion
- Data in private spaces remains on your device until you delete it or uninstall the app (unless you also keep an iCloud backup).
- Data in shared spaces is kept on our servers while the space is shared and is deleted when the owner stops sharing or deletes it.
- Account and usage records are kept while you have an account, then deleted when you delete the account, plus a short period needed to complete deletion.
- AI request payloads are processed to fulfill the request. We do not store them as your records. Processors may retain them according to their own policies.
- Analytics and crash data are kept as needed to operate and improve the app.
To delete account data, use Delete account in the app or email help.qalta.app@outlook.com.
Changes
We may update this policy. The effective date above will change. Continued use after an update means you accept the revised policy.
Contact
Daniel Tokkozhin
help.qalta.app@outlook.com