Privacy Policy

Effective August 10, 2026

SaveSpeak is built around a local-first principle: your financial history stays on your iPhone unless you choose an action that sends specific input for processing, export, or backup.

1. Scope and controller

This Privacy Policy explains how the SaveSpeak application, website, server-assisted processing, widgets, and related services handle information. The developer identified as the application provider on SaveSpeak’s App Store page is the data controller for server-side processing. Questions and privacy requests may be sent to support@savespeak.com.

2. Information stored locally

The following information is normally stored only on your device:

• transaction amounts, currencies, dates, types, categories, status, and optional comments;
• financial history, balances, charts, and analytics derived from your records;
• language, currency, input-mode, notification, comment, and onboarding preferences;
• pending recordings or processing requests saved for retry when connectivity fails;
• backup and CSV files you choose to create, import, restore, or share.

SaveSpeak does not connect to your bank, access bank credentials, or automatically retrieve bank-account transactions.

3. Voice processing

When you press and hold the microphone and submit a recording, SaveSpeak may send the recording to our server and to OpenRouter for speech recognition using an underlying model provider such as OpenAI. The resulting transcript may then be processed through OpenRouter and an available language-model provider to identify one or more transactions, amounts, dates, categories, and transaction types.

Voice processing begins only after you grant microphone permission and consent to the disclosed external processing. You can withdraw or grant this consent again at any time in SaveSpeak under Settings - AI Processing. The interface language does not limit the language you may speak.

4. Photo and receipt processing

When you take or select a photo, optical text recognition is performed on your device. SaveSpeak does not intentionally upload the receipt image for AI categorization. Recognized text may be sent to our server and through OpenRouter to an underlying model provider, including Moonshot AI where configured, to identify and categorize transactions. A date recognized on a receipt may be used as the transaction date.

5. Manual entry

Manual amounts, categories, dates, and comments are stored locally. They are not sent for AI processing unless you deliberately use a feature that requires server-assisted categorization or retry a previously failed processing request.

6. Technical and service information

When the application contacts our server, we and our hosting providers may process limited technical information such as IP address, request time, response status, app version, operating-system version, request identifier, diagnostic details, and security events. We use this information to deliver requests, prevent abuse, investigate failures, and maintain security. We do not use it for advertising or cross-app tracking.

7. Purchases

Apple processes App Store purchases and payment information. SaveSpeak may receive a transaction identifier, product, entitlement status, renewal status, and expiration information needed to unlock Premium features and restore purchases. We do not receive your complete payment-card number or Apple Account password.

8. Notifications and widgets

If enabled, reminder notifications are scheduled using your device settings and local time. SaveSpeak widgets read shared app data on your device to display selected financial summaries. You can disable notifications in SaveSpeak or iOS Settings and remove a widget from the Home Screen at any time.

9. Why we process information

We process information only as needed to:

• provide speech recognition, text structuring, categorization, retry, and support functions you request;
• verify purchases and unlock paid features;
• protect the Service, prevent abuse, diagnose failures, and maintain availability;
• comply with legal obligations and establish or defend legal claims;
• improve reliability using aggregated or de-identified operational information.

10. Legal bases

Where the GDPR, UK GDPR, or similar laws apply, our legal bases are: performance of the service you request; your consent for microphone, photo-library, notification, and disclosed third-party AI processing; our legitimate interests in security and reliability; and compliance with legal obligations. You may withdraw consent for future processing without affecting processing already completed.

11. Who receives information

Depending on the feature you choose, information may be processed by:

• our hosting and network providers, to receive and route requests securely;
• OpenRouter, to route speech-recognition and language-model requests;
• underlying model providers, including OpenAI for configured speech-recognition services and Moonshot AI for configured text-processing services;
• Apple, for App Store purchases, entitlements, notifications, and platform services;
• professional advisers or authorities, only when reasonably necessary to comply with law, protect rights, or respond to valid legal process.

Providers receive only the information needed for the selected operation. Our OpenRouter requests are configured to use eligible zero-data-retention routes and to deny provider data collection. Submitted content is not authorized for advertising, tracking, or training AI models. We require service providers acting for us to protect information consistently with this Policy and applicable law. We do not sell personal information and do not share it for behavioral advertising.

12. Retention

• Local records remain until you edit or delete them, delete app data, or remove the application without retaining a backup.
• Pending audio may remain locally until processing succeeds or you delete the failed record.
• Our server is designed to process submitted audio and recognized text transiently rather than maintain your financial history.
• Limited security and diagnostic records may be retained only as long as reasonably necessary for reliability, fraud prevention, legal compliance, and dispute resolution, ordinarily no longer than 30 days unless a longer period is required for a specific incident or by law.
• AI requests are configured for eligible zero-data-retention processing. External providers may still process limited operational metadata under their applicable terms and privacy policies.

13. Your controls and rights

You can manage most information directly in SaveSpeak. You may:

• review, edit, retry, or delete individual records;
• export records to CSV or create a backup;
• delete local app data from Settings;
• disable voice, keyboard, photo, comments, or notifications where offered;
• revoke microphone, camera, photo-library, or notification permission in iOS Settings;
• stop external AI processing from Settings - AI Processing by withdrawing consent and using manual entry;
• request access to, correction of, deletion of, or restriction of server-side personal information by emailing us.

Depending on where you live, you may also have rights to object, data portability, appeal a decision, or complain to a data-protection authority. Because no account is required, we may need limited information to verify and locate a server-side request.

14. International processing

Our server and providers may process information in countries other than your own. Where required, we use legally recognized safeguards for international transfers. Local records remain on your device unless you initiate a processing, export, backup, or sharing action.

15. Security

We use technical and organizational safeguards appropriate to the nature of the information, including encrypted network transport, access restrictions, data minimization, and limited server retention. No system is completely secure. You are responsible for securing your device, passcode, backups, and exported files.

16. Children

SaveSpeak is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has submitted personal information, contact us so we can investigate and delete it where appropriate.

17. No tracking or advertising

SaveSpeak does not use your financial records, audio, recognized text, or photos for third-party advertising and does not track you across apps or websites owned by other companies. If this practice ever changes, we will update this Policy and obtain any consent required by Apple or applicable law before the change applies.

18. Changes to this Policy

We may update this Policy when SaveSpeak, our providers, or applicable law changes. We will publish the new effective date here and provide additional notice or renewed consent when a material change affects how personal information is collected, used, or shared.

19. Contact

Privacy questions, data requests, and general support: support@savespeak.com

See also our Terms of Use.