Privacy Policy
MyWallet – Budget Planner · Effective October 12, 2026
MyWallet is built by Siarhei Tarasenka (“I”, “we”). This policy explains what data the app handles, where it goes and how you control it. There are no user accounts in MyWallet, and we never sell your data or use it for advertising.
- Your wallets, transactions, budgets and debts are stored on your device and, if you use iCloud, in your own private iCloud. We cannot see them.
- The AI features (voice input, receipt scanning and AI insights) send data to our server and to OpenAI only after you allow it in the app. You can withdraw this in Settings → AI processing at any time.
- We collect anonymous usage analytics (Amplitude) and handle subscriptions through RevenueCat and Apple.
- We do not track you across other companies’ apps or websites.
1. Data stored on your device
Everything you enter — wallets, balances, transactions and notes, categories and limits, savings goals, recurring payments, debts and the contacts you link to them — is stored locally on your device. If iCloud is turned on for MyWallet, this data is synced through Apple’s CloudKit to your private iCloud database, which only you can access. A passcode, if you set one, and Face ID / Touch ID settings never leave your device; biometric checks are performed by iOS and we never receive biometric data.
When you link a debt to someone from your Contacts, the app reads that contact’s name to show it in the app. Contact details are not sent to our server or to OpenAI (see section 2 for how names are handled in AI insights).
Photos of receipts are processed on your device by Apple’s text recognition and are not uploaded or stored by us.
2. AI features
Voice input, receipt scanning and AI insights are Premium features that work on our server
(api.uxui.one), which uses OpenAI to process the request. Before the first use, the
app explains what is sent and asks for your permission. Without it, nothing is sent and the
rest of the app works as usual.
| Feature | What is sent |
|---|---|
| Voice input | The audio recording of your request; then the transcribed text together with the names of your wallets and categories, their currencies, the current date and up to 10 of your recent transaction notes as hints for recognizing places and shops. |
| Receipt scanning | The text recognized from the receipt on your device (not the photo), together with the names of your wallets and categories and their currencies. |
| AI insights | The transactions for the selected period (amounts, currencies, dates, categories and notes), names, balances and goals of your wallets, category limits, a monthly summary of recurring payments, totals for the previous period, and your debts (amounts and due dates). Names of people in your debts are replaced with labels such as “[P1]” before sending and are put back only on your device. |
Our server
Our server only passes the request to OpenAI and returns the result to the app. It does not store the content of your requests: audio is held in memory for the duration of the request and is never written to disk, and the server keeps no logs of requests or their content. Your IP address is held in memory for a few minutes to limit the number of requests and prevent abuse.
To make sure requests come from the genuine MyWallet app, the app uses Apple’s App Attest. Your device creates a security key, and our server keeps its public part, a usage counter, Apple’s attestation receipt and the app version. This record contains nothing about you or your finances, is used only to verify requests and is deleted after 400 days without use. We also keep anonymous daily counts of how many requests passed this check, per app version.
OpenAI
OpenAI processes the data as our service provider under its business terms. Data sent through the OpenAI API is not used to train OpenAI’s models. OpenAI may keep it for up to 30 days to detect abuse and then deletes it, unless the law requires otherwise. Learn more in OpenAI’s API data privacy.
Apple speech recognition
While you speak, the app uses Apple’s speech recognition only to check that the recording contains speech. Where your language supports it, this runs entirely on your device; otherwise iOS may send the audio to Apple under Apple’s privacy policy.
Your choice
You can withdraw your permission in Settings → AI processing. After that, nothing more is sent until you allow it again; insights already received stay on your device.
3. Analytics
We use Amplitude to understand how the app is used: which screens and features are opened, whether actions succeed or fail, sessions, app version, device model, iOS version, language and the approximate location (country/city) that Amplitude derives from the IP address. We also record general properties such as whether you have Premium, your base currency and the number of wallets and transactions. Analytics is linked to a random identifier generated by Amplitude, not to your name, email or Apple ID, and it does not include your transaction amounts, notes or AI requests.
4. Purchases
Subscriptions are processed by Apple. We use RevenueCat to check your subscription status. RevenueCat receives purchase information (product, price, dates, transaction identifiers) and an anonymous app user identifier. We never receive your payment details.
5. Exchange rates
To convert currencies, the app downloads exchange rates from Fixer (apilayer). These requests contain no personal data beyond what any internet request reveals, such as your IP address.
6. Tracking
MyWallet does not track you across apps and websites owned by other companies, does not use the advertising identifier and does not show ads.
7. Data retention and deletion
- Data on your device stays until you delete it in the app (Settings → Delete all data) or delete the app. Data in iCloud can be removed in iOS Settings → [your name] → iCloud.
- Our server stores nothing from the content of AI requests; OpenAI deletes it after up to 30 days. The App Attest security key record is deleted after 400 days without use.
- To delete analytics data linked to your device, write to us at the address below.
8. Your rights
Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct or delete your personal data and to object to its processing. Most of your data never leaves your device, so you control it directly in the app. For anything else, contact us and we will respond within 30 days.
9. Children
MyWallet is not directed to children under 13, and we do not knowingly collect personal data from them.
10. Security
All connections to our server, OpenAI and other providers are encrypted (HTTPS). No method of transmission or storage is completely secure, but we keep the data we handle to the minimum needed for each feature.
11. Changes to this policy
We will update this page when the app’s data practices change and update the effective date above. If we start sending different data to AI services, the app will ask for your permission again.
12. Contact
Questions or requests about privacy: tarasenko.by@icloud.com.