Privacy Policy

SpendPouch Privacy Policy

Last updated: July 16, 2026

Operator: Ferhat Dövme — see Impressum / Legal Notice

Contact: info@liva.dev

SpendPouch is a local-first expense and income tracker with a receipt and PDF vault, for freelancers and small businesses. This policy explains what data the app handles, what stays on your device, what may be sent to service providers, and how to contact us.

Data stored on your device

SpendPouch stores app data locally on your device by default. This may include:

1. Expense amounts.
2. Merchant names.
3. Dates.
4. Categories.
5. Notes.
6. Receipt images.
7. PDF documents.
8. OCR preview text and reviewed extraction fields.
9. Reminder information.
10. CSV exports and local backup-related files you create.
11. Local purchase entitlement records.
12. Income and invoice records you create.

This data is used to provide SpendPouch's core features. SpendPouch does not send your expense amounts, merchant names, notes, voice transcripts, receipt or PDF contents, OCR text, or exports to product analytics, advertising networks, session replay tools, or bank-sync services. The only time on-device text leaves your device is when you choose to use the optional AI Assist feature described below.

Voice capture and speech recognition

When you hold the add button to speak an expense, SpendPouch uses Apple's iOS speech recognition through the Apple Speech framework to create an editable transcript. This is speech-to-text capture, not SpendPouch backend AI, and it does not spend AI Assist credits.

Depending on device, language, system settings, and Apple speech recognition availability, speech recognition may require network connectivity or Apple speech services. If speech recognition is unavailable or you do not grant microphone and speech recognition permissions, you can use manual text entry instead.

SpendPouch never sends your voice audio to an AI provider. A voice transcript is only sent to the AI provider if you choose to run optional AI Assist on it; otherwise it stays on your device. Any transcript-based draft must be reviewed and confirmed before it is saved as an expense.

Receipt, PDF, and OCR review

SpendPouch can help you import receipt images and PDFs into your local vault. OCR previews and reviewed extraction fields are used to help you check a draft before saving. OCR results may be incomplete or incorrect, so you remain responsible for reviewing and correcting the fields before saving an expense.

Local OCR review runs on your device, does not spend AI credits, and does not send anything off your device. Your receipt images and PDF files are never sent to an AI provider. If you choose optional AI Assist, only the extracted on-device text — never the image or PDF file — is sent, as described under "AI features".

Apple Pay

SpendPouch cannot directly read your full Apple Wallet, Apple Pay, bank, or card transaction history.

Purchases

SpendPouch uses Apple's in-app purchase system for the Freelancer subscription and optional AI Assist credits. Apple processes payment information under Apple's own terms and privacy policy. SpendPouch may store local purchase state on your device so the app can unlock paid features. The current release does not use purchase history for advertising or tracking.

Crash and error diagnostics

SpendPouch uses Sentry for crash and error diagnostics so we can understand whether the app is stable. Diagnostics are used for app functionality and release health, not for advertising or product analytics.

Diagnostics are configured to avoid attaching your expense amounts, merchant names, notes, receipt or PDF contents, OCR text, exports, account identifiers, purchase transaction identifiers, or user-entered content.

Diagnostics may include technical information such as app version, build number, operating system version, device model, crash/error class, and redacted stack or event metadata. Sentry privacy controls are configured to filter IP-derived geolocation values. SpendPouch's App Store privacy answers are kept aligned with the submitted build and observed diagnostic behavior.

Analytics and tracking

The current release does not include PostHog, advertising tracking, attribution SDKs, product analytics SDKs, autocapture, or session replay.

We may use Apple App Store Connect Analytics, TestFlight feedback, App Store review feedback, Sentry crash/error stability data, and aggregate manual notes to understand product performance. These sources do not add in-app product analytics tracking to SpendPouch.

AI features

AI Assist is an optional, pay-as-you-go feature. You opt in through an in-app consent prompt before anything is sent, and the app works fully without it. When you use AI Assist, the on-device text extracted from your receipts, PDFs, or typed and spoken entries is sent to our AI provider, OpenAI (USA), to extract the amount, VAT, merchant, and date. Your receipt images, PDF files, and voice audio are never sent. No AI provider key is included in the app; requests are made through the SpendPouch backend.

OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring and then deletes them, and does not use API data submitted by SpendPouch to train its models. The SpendPouch backend does not store your text or the AI response — only a one-way hash used to settle AI credits. You review every AI-filled field before it is saved.

You can decline AI Assist at any time, and turn it off in Settings → Privacy & data. Declining or turning it off loses no core functionality; manual tracking, voice capture, and local OCR review continue to work.

Backend services

SpendPouch uses a backend service to mediate optional AI Assist (forwarding the on-device text you submit to the AI provider) and to verify App Store transactions for AI credit settlement. The backend does not persist your expense content or AI responses. Other backend uses such as sync or backup would be reviewed and disclosed before being enabled in a public release.

Data sharing

SpendPouch does not sell your personal data. Data may be processed by:

1. Apple, for App Store distribution, TestFlight, in-app purchases, App Store Connect services, and iOS speech recognition when you choose voice capture.
2. Sentry, for crash and error diagnostics.
3. OpenAI (USA), to process the on-device text you submit when you choose to use optional AI Assist.
4. Our backend service, to mediate AI Assist requests and verify App Store transactions for AI credit settlement.

Any additional providers, such as analytics, sync, or backup, would be reviewed and disclosed before they are enabled in a public release.

Data retention and deletion

Local app data remains on your device until you delete it, delete individual records, remove files, export it, erase local app data where available, or uninstall the app.

Crash/error diagnostic retention is controlled by the diagnostics provider and project settings. Contact support if you have a privacy question or need help reviewing a support record, TestFlight feedback record, or diagnostic event.

Your choices

You can manage local data and privacy options through the app and device:

1. Delete individual expenses and vault files where available.
2. Export records through the app's export feature.
3. Erase local app data where the app provides that action, or uninstall the app to remove local app data from the device.
4. Contact support about support records, TestFlight feedback, or diagnostic events.

See Privacy Choices for more details.

Children

SpendPouch is not directed to children. If you believe a child provided personal information through support or diagnostics, contact us so we can review and delete it where applicable.

Terms of use

SpendPouch uses Apple's Standard End User License Agreement unless a custom EULA is later published and selected in App Store Connect:

Apple Standard EULA

Contact

Support contact: info@liva.dev

Support page: SpendPouch Support

Privacy choices: SpendPouch Privacy Choices

Changes

We may update this policy when the app changes. The date at the top of the policy will be updated whenever this policy changes.