Privacy Policy

Thank you for using SayMoney. The protection of your data is our top priority. This policy explains what information is processed and how it is used to ensure you feel secure while using our software.

This application does not record or store personal identification data such as name, age, marital status, date of birth, address, or telephone number on our servers. To manage licenses and provide support, we only store functional metadata such as the operating system used and your purchase status.

You can manually enter income and expenses at your discretion. SayMoney is not online banking software. It does not have direct access to your bank accounts. You may, however, choose to import CSV files containing your bank transactions locally.

All entered data is stored exclusively in a protected area on your local device and cannot be accessed by third parties. To prevent unauthorized access, we recommend setting a four-digit PIN or using biometric authentication (fingerprint/FaceID) within the app settings.

You maintain full control over your information. All entered data can be completely and permanently deleted at any time via the application settings.

Payment Processing: For the purchase of premium features or the Pro version, we use external payment providers (Stripe) and our own secure backend for transaction verification. During a transaction, necessary data such as your email and payment method are processed. We do not have access to your full credit card or bank account details.

Cloud Synchronization: If you choose to use cloud services such as Dropbox, OneDrive, Google Drive, or Nextcloud for backup or synchronization, your transaction data is encrypted on your device before it is uploaded. The encryption password is generated on your device and stored only in its secure storage. You can view it as a QR code in the settings and scan or enter it on your other devices. We never receive this password and cannot recover the data if it is lost. Your data is processed by these providers according to their respective privacy policies. We do not have access to your cloud accounts or the encrypted data stored within them.

Auto-Update Feature: The Desktop versions include an automatic update feature. This service periodically checks our secure server for the latest version of the application. No personal or financial data is transmitted during this check.

Backend & Data Storage: We use a secure cloud-based backend (AWS Lambda) and a database to process payments, synchronize data tokens, and validate promo codes. While we do not store your financial records, we record functional data like your platform and purchase status to manage your license and provide technical support.

Voice Interaction: To enhance user experience, the application offers voice input and output features. Voice recognition is processed via the Microsoft Speech SDK, and voice output is generated using Google Text-to-Speech (TTS). When using these features, audio data or text fragments may be processed by these external service providers to fulfill your request. We do not store these audio recordings on our servers.

AI Assistant: Your question is sent to our backend and answered by Google Gemini. By default the assistant has no access to your financial data. Only if you explicitly allow it, either with the button in the chat or with the switch in the settings, does the app additionally send aggregated totals computed on your device: your balance, income and expenses for the current month, the previous month, and up to the last 12 months, plus per-category totals and averages for your largest expense categories over that same period. Individual transactions, notes, recipients and receipt files are never transmitted with that permission, and none of these figures are stored on our servers. You can withdraw financial-data permission at any time in the settings. If you submit feedback on an answer using the thumbs up or down buttons, the app sends your rating, an optional comment, the question and the assistant's reply to our backend, where they are stored in a database for up to 180 days so we can improve the assistant. A pseudonymised device ID, app language, platform and edition are stored with it. No e-mail address is required.

Website Assistant: The chat on this website answers questions about SayMoney using Google Gemini. Your question and the language of the page are sent to our backend, which forwards them to Gemini together with the matching section of our product guide. The assistant has no access to personal or financial data, and conversations are not stored. To limit misuse and cost, we store an irreversible hash of your IP address together with a counter for at most 36 hours. The IP address itself is never stored. Apart from this counter, which only exists if you actually use the chat, your visit remains anonymous as described in the next section.

Diagnostic Reports: If a problem occurs, you can send us a diagnostic report from the app settings. This never happens automatically. The report contains technical log entries of your session, the app version and information about your device and operating system. Access tokens and passwords are removed before the transfer. The log can contain file names and error messages, but no transactions, notes or receipt files. We store these reports for a maximum of 90 days and use them solely to find the cause of the problem.

Service Providers: We work with selected providers that process data on our behalf and are bound by contract to do so only on our instructions: Amazon Web Services (hosting, database and file storage), Stripe (payment processing), Google (text-to-speech and the Gemini model behind the AI assistant) and Microsoft (speech recognition). If you use cloud synchronization, your chosen storage provider is added to that list. Some of these providers are based in the United States or may process data there. Such transfers are made on the basis of the standard contractual clauses of the European Commission together with the corresponding recognitions under Swiss law.

Storage Periods: We keep data only as long as it serves a purpose. Purchase and licence records are subject to the statutory accounting retention period of ten years. Diagnostic reports are deleted after 90 days and feedback on answers of the AI assistant after 180 days. The access token for your cloud storage is deleted after twelve months without use. Everything you enter in the app stays on your device and is removed as soon as you delete it there.

Legal Basis: We process your data in order to perform our contract with you, which means providing the app and the features you purchased. We process it to meet legal obligations, in particular accounting and tax duties. And we process it on the basis of our legitimate interest in a secure and working product, which covers diagnostic reports and the protection against misuse. Wherever we ask for your consent, such as access to your financial figures for the AI assistant or the use of the voice features, you can withdraw it at any time with effect for the future.

Your Rights: Under Swiss law, you have the right to information, correction, or deletion of any data processed during the purchase phase. Since financial data is stored locally, you exercise your right to deletion by using the 'Delete Data' feature within the app. If you live in the European Economic Area or in the United Kingdom, the GDPR additionally grants you the right to restriction of processing, to data portability and to object to processing. Write to the contact address given in this policy to exercise any of these rights. You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner in Bern, in the EEA and the United Kingdom it is the authority of your country of residence.

We do not use cookies, pixels, or other tracking technologies to monitor your behavior. Furthermore, our infrastructure is configured such that we do not store server log files (e.g., IP addresses) of our visitors. Your visit to our website is anonymous unless you choose to contact us via our web form.

We confirm that we have no access to your personal financial history. No transaction data entered within the app is stored by us outside of your local device, except for technical metadata required for licensing and synchronization services.

Responsible Party: The entity responsible for data processing in accordance with the Swiss Federal Act on Data Protection (FADP) is Ivan Weber, Eigenstrasse 30, CH-6260 Reiden, Switzerland. Email: info@weberitapps.com

If you have any questions regarding your privacy or this policy, please do not hesitate to contact us.