Privacy Policy for LazyFinance

1. Introduction

LazyFinance ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what data LazyFinance processes, how that data is collected, how it is used, when it is shared, and how you can withdraw consent or request deletion.

2. What Data We Collect and How We Collect It

LazyFinance collects data in the following ways:

• Data you enter directly: typed expense text, expense amounts, item or merchant names, dates, categories, payment methods, and similar financial entry information you choose to record.
• Voice input: audio recordings you create in the app when using voice capture.
• Contextual settings: category names, payment method labels, default currency, default payment method, and related preferences used to interpret your expense entries correctly.
• Account and subscription data: authentication/session information from Supabase and subscription status information from RevenueCat.
• Technical and operational data: limited service and diagnostic data needed to authenticate requests, prevent abuse, monitor usage limits, and operate the app.

3. On-Device Processing

For free users, and for any user who keeps cloud AI turned off, expense processing is performed locally on the device using on-device speech recognition and/or an on-device AI model. In those cases, expense content is not sent to third-party AI providers for analysis.

4. Pro Cloud AI Processing

For Pro users, cloud AI processing is optional and is used only after the user gives explicit permission in the app. When cloud AI processing is enabled, user-provided expense content is sent to our backend and then forwarded to a third-party AI provider through OpenRouter for transcription and structured expense extraction.

• Data transmitted: typed expense text, audio recordings used for transcription/parsing, expense details contained in that content, and contextual parsing data such as category names, payment method labels, default currency, and default payment method.
• Purpose: to transcribe, categorize, and extract structured expense data such as merchant or item name, amount, currency, date, payment method, and category.
• Scope: we do not intentionally send your name, email address, or phone number to the AI provider unless you include that information in the text or audio content you submit.
• Routing: our backend sends requests to OpenRouter using the model route google/gemini-3-flash-preview. OpenRouter may route those requests through currently available Google providers for that model, including Google AI Studio and Google Vertex.

5. How Cloud AI Data Is Used

Cloud AI data is used only to provide the requested feature, improve reliability, enforce quotas and abuse controls, and operate the service. We do not use your expense content ourselves to train our own AI models.

Based on the provider documentation we reviewed, OpenRouter indicates that, to its knowledge, the current Google providers for this model do not use prompts and completions to train new models, and that OpenRouter submits API requests to those providers anonymously. Google's paid-service terms for Gemini state that prompts and responses are not used to improve Google's products, although Google may log prompts and responses for limited abuse detection, legal, security, and compliance purposes.

6. Third-Party Services and Shared Data

• Supabase: Used as our backend to authenticate requests and relay cloud AI processing.
• OpenRouter: Used as the routing layer for Pro cloud AI processing. OpenRouter privacy and logging information is available at https://openrouter.ai/docs/guides/privacy/logging.
• Google AI providers: OpenRouter may route google/gemini-3-flash-preview requests through Google AI Studio and/or Google Vertex. Relevant Google information includes the Google Cloud Privacy Notice and Google's Gemini API terms for paid services.
• RevenueCat: We use RevenueCat to manage subscriptions. Their privacy policy is available at https://www.revenuecat.com/privacy.
• Apple: Payment transactions are handled by Apple via the App Store. We do not have access to your credit card information.

We only share the data reasonably necessary to provide the requested functionality, and we rely on the published privacy, confidentiality, and data-protection commitments of these providers to protect the data they process on our behalf.

7. Retention and Deletion

Your financial entries are stored locally on your device and, if you enable sync, in your personal iCloud. LazyFinance does not maintain a separate long-term cloud history of your submitted prompts for cloud AI chat purposes.

However, when cloud AI is used, request and response data may be processed transiently by Supabase, OpenRouter, and Google's infrastructure. Those providers may retain certain service data for abuse prevention, security, debugging, legal compliance, billing, and operational reliability according to their own terms. For example, Google's Cloud Privacy Notice explains that some service data may be retained for up to 180 days and sometimes longer when required for abuse prevention, fraud, security, or legal obligations.

If you want to remove local data, you can delete entries inside the app or remove the app from your device. If you want to request deletion of account-associated backend data or have questions about deletion, please contact us using the email below.

8. Withdrawing Consent

You can withdraw consent for cloud AI processing at any time inside the app by going to Settings > AI and turning off Allow Cloud AI Processing. After consent is withdrawn, LazyFinance will keep processing expenses on-device instead of sending expense content to third-party AI services.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]