Privacy policy

1. Principle: your data lives on your device

eevas is built local-first: all financial records (transactions, assets, budgets, allocations) are stored directly in your device memory.

We do not require an account to use the core features. You can log expenses, view reports and alerts without signing in.

2. Sign in with Google or Apple to sync and back up

Signing in is optional and uses your Google account (on iPhone you can also Sign in with Apple). When you sign in, eevas receives basic information (your email address — or a relay address if you hide your email with Apple — and an account identifier) to identify your account — we do not access your contacts, Gmail, or other Google/Apple data.

When you sign in, eevas enables syncing and backup/restore: your data is saved to central storage so your devices can read, write and restore it when needed. This data belongs only to your account.

Central storage runs on Supabase (a cloud database service). The server keeps encrypted nightly backups for incident recovery, each kept for at most 30 days — so after you delete your account, your data may remain in older backups for up to 30 days before it is gone.

You can sign out and keep using the app entirely on-device.

3. Receipt photos and AI

When you use receipt scanning, the photo is sent temporarily to the AI service to read its contents (amount, date, category) and return the result to your device. On phones the photo is kept on the device so you can review it; receipt photos are never synced to the server.

When you use spending/income analysis, the figures needed for it (amount, category, date and note of the transactions in the chosen period) are sent to the AI service to generate the summary.

The AI service is Claude by Anthropic. The data is only used to return the result to you; Anthropic does not train its models on data sent through its API. The app asks for your permission before sending any data to AI for the first time, and every other feature works without AI.

To enforce AI usage limits, the server records the number of AI calls and tokens per account — it does not store the photos or the content sent.

4. Third-party data

The app fetches gold, silver and exchange-rate prices from public price sources on the Internet to value your assets; the web version fetches them through an eevas relay server. These calls do not include your personal identifying information.

eevas does not integrate advertising and does not use advertising tracking networks. This website uses visitor analytics from Vercel, the infrastructure provider that serves this very site. It sets no cookies, builds no browser fingerprint, and does not follow you to other websites.

5. Anonymous usage statistics in the app

To learn whether the app is actually useful, eevas sends back a small amount of anonymous usage data: milestones (app opened, a transaction recorded, a receipt scanned, a budget set, an asset added, an AI summary generated) along with device type, app version and language. On the web version, the very first launch also records the name of the link source that brought you there (for example “chatgpt” if you came from an ad) — only the channel name, nothing about you.

The following is NEVER sent: amounts, balances, transaction contents or descriptions, category names you created, receipt photos, email, display name. The app applies a technical filter that only lets counts and fixed values through — text you typed is blocked on the device itself.

Statistics are tied to a random per-installation identifier, not to your account, so they cannot be traced back to you. Since version 1.27 the app no longer has a switch to turn statistics off; if you turned them off before, the app keeps that choice. You can ask us to delete this data via the contact email.

6. Bug reports and crash reports

When you tap More tab > Feedback & bug report, the app sends a technical log file along with your device model, OS version, app version, language and the note you typed. Logs never contain amounts, balances, transaction descriptions or category names.

In addition, when the app hits an error or stops unexpectedly, it automatically sends a crash report to Sentry (an error-monitoring service with servers in the European Union): the error type, where in the code it happened, device model, OS and app version, language, and the most recent technical log lines. The app strips error contents, the device name and anything you typed before sending; IP addresses are not stored. Reports are tied to a random per-installation identifier, not to your account, and kept for at most 90 days. Since version 1.27 the app no longer has a switch to turn crash reports off; if you turned them off before, the app keeps that choice.

Manual bug reports are linked to your account (if signed in) so we can reply. Both kinds of report are used only to fix bugs; you can ask us to delete them at any time via the contact email.

7. Groups and shared events

When you create or join a group / shared event, your display name and the expenses you add to it are visible to the other members. You can leave a group at any time.

8. We do not sell data

We do not sell, rent or share your financial data for advertising purposes.

9. Your rights

Because data lives on your device, you can view, edit, export (back up) and delete it any time in the app. Uninstalling the app removes the data on that device.

10. Contact

For any privacy questions, please contact: annd.dev22@gmail.com.