Privacy Policy
Version 1 · October 26, 2026
Plain language. No dark patterns.
1. What we collect
When you sign up, we store your name, email, password hash, and the locale + currency you pick. If you sign in with Google or Apple, we additionally store that account's ID (with Apple's "Hide My Email" we only receive the private relay address). We do not request, store, or transmit any payment-card or bank-account information — Solvory never holds money.
Each debt you record stores: the counterpart name, amount, currency, optional due date, optional notes, the type/category, and any photos or files you attach. None of this is shared with third parties without your action.
For a loan or card split into installments we store the schedule (due dates, amounts, what you marked paid), any late fee you confirm the bank added, and amounts you add to a debt (fees, purchases, interest the bank charged). If you choose to fill in your monthly plan, we also store your monthly income and payday, your living costs, what you pay toward debts each month and the share you keep for surprises. Every one of these is optional; they are used only to build your plan and reminders and can be cleared at any time.
Your money records — wallets (your own and family wallets), the money you add, pay and transfer, bills, budgets, goals and expense groups — are stored on your phone and synced to our server so they stay safe and reach your other devices.
If you pick a person from your phone's contacts, we store the name and phone number you picked for that person (never your whole address book). If you add a profile photo or attach photos or files to a debt, we store them. When you sign in, change your password or delete your account, we keep the IP address and device type of that request in a security log.
If you subscribe to Solvory Pro or buy AI actions, we store the subscription status or the AI action balance and the App Store or Google Play purchase record needed to verify it. If a store refunds a purchase, we record the refund and remove what it paid for (unused AI actions, or Pro). When you ask Apple for a refund, we tell Apple how much of that purchase you used only if you have given us your permission to do so (it is off unless you turn it on, and you can withdraw it at any time), so Apple can review the request; Apple handles that under its own privacy policy, and you can ask Apple about it at privacy.apple.com. We also store a push-notification token for your device and basic app diagnostics (see section 3).
2. What we don't collect
- No real money — Solvory never moves funds, holds funds, or links to bank/card accounts.
- No ads in the app, no advertising ID and no third-party advertising trackers. On Android only, we use a few app events (such as starting a subscription) to measure our own Google Ads campaigns; in the EU, the UK and Switzerland only if you allow it, and you can turn it off any time in Profile. The iPhone app sends nothing to Google Ads.
- No selling of personal data, full stop.
3. Third-party services
- Sign in with Google and Sign in with Apple — authentication, only if you choose them.
- Apple App Store and Google Play — process Solvory Pro subscriptions and AI action purchases. We never see your card details.
- Google Firebase — push notifications, crash reports, performance monitoring and app usage analytics. These contain device and app information, not your debt records; Google Analytics may infer your approximate location (country or city) from your IP address. In the EU, the UK and Switzerland, usage analytics run only with your permission (Profile → Usage statistics & ad measurement).
- OpenAI — we use OpenAI's API to translate the app's interface text (button labels, headings), and for the live voice call with the assistant (see section 4).
- Anthropic (Claude API) — powers the optional AI features (see section 4), which you use with Solvory Pro or with AI actions (every account gets a few to try). Anthropic processes this data only to answer the request and does not use API data to train its models.
- OpenAI and Google (Gemini API) — backups for the same AI features: only when Claude is unavailable, the same request (the same limited data, see section 4) goes to one of them instead. Neither uses API data to train its models.
- Google Drive — only if you turn on Cloud backup. The backup is encrypted on your device and stored in the app's private Drive folder.
- Hostinger — hosts our servers and database.
4. AI features (optional)
The AI features (smart add, receipt and ledger page scan, payoff plan, monthly insights, reminder writer, Ask Solvory, Arrange my month and the live voice call) run only when you use them. Each request sends only what that feature needs to Anthropic through our server (or, only when Claude is unavailable, to OpenAI or Google Gemini):
- Smart add: the text you typed or dictated, or the receipt photo you picked, plus your categories, default currency, a short list of your open debts (first name and amount) and the kinds of your accounts and the amounts of your bills (no names), so it can suggest what to record. It only proposes: nothing is saved until you approve each suggestion.
- Plan, insights, reminders and Ask: amounts, dates, categories, budgets, goals and the first name of the people involved; for the payoff plan, also your monthly income and living costs if you entered them; for Ask, also your question and the recent conversation. Your balances, the monthly plan, reports, zakat and the "Suggestions for you" on Home are worked out on your phone or our server and use no AI.
- Arrange my month: the payments due that month (amount, date, whether each is a bank, card or person debt or a bill, and the bill's category, never its name), the first name of the people involved, your monthly income and usual living costs. It only proposes changes: nothing changes until you approve each one.
- Never sent: your email, phone numbers, full counterpart names, account or bill names, or the notes on your debts and transactions.
We do not store the text of your AI requests or answers, except the monthly insight we show you and anything you send us with "Report this answer". Receipt and ledger page photos are not stored. Dictating into smart add uses your phone's speech recognition: on most phones it runs on the device; where the phone has no offline speech model, the phone's own system service (Apple or Google) processes the audio. Solvory receives only the recognized text and never the audio.
Live voice call. When you start a voice call with the assistant (the microphone in the middle of the bottom bar), your voice goes straight from your phone to OpenAI's Realtime API so the assistant can hear and answer; it does not pass through our servers and Solvory does not record it. OpenAI does not use API data to train its models and may keep it for up to 30 days only to detect abuse. During the call the assistant has the same limited data as smart add, and, when you ask about your money, the figures your phone works out (wallet balances by kind of wallet, this month's totals, what is due by kind and amount, your open debts with first names — never wallet names, bill names, full names or notes). It only prepares suggestions: nothing is saved until you confirm each one. Calls are charged in AI actions per minute. AI results can be wrong; always check them before saving. They are general information, not financial advice.
4a. Sharing with people you choose
- Partner sharing. When you link with someone (for example your husband or wife), you alone choose what they can see of you: nothing, your totals only (this month's money in and out and your debts in total), or everything except the entries and debts you hide. Their choice about what you see of them is theirs. Either of you can stop sharing at any time without the other's consent, and the other is told.
- Family wallets. Money you send to a family wallet shows as family spending in your records. You do not see how they spend it, and they see nothing of yours.
- Debts and groups with linked people. A debt or a group expense you record with a linked person is shared with that person so both of you see the same record.
- Share links. If you share a debt or statement by link, anyone with that link can open what you shared until you revoke it.
5. Reports and blocking
If you report a user, an expense or an AI answer, we store the report (reason, details and the reported item) so our team can review it. If you block a user, we store the block so that person can no longer send you requests.
6. Storage and security
Data is stored on our servers at Hostinger and sent only over encrypted connections (HTTPS). Passwords are hashed with bcrypt. API access is gated by short-lived Sanctum tokens scoped to your device. Your phone keeps its own copy of your money data in the app's private storage, encrypted by the phone's operating system, so the app works offline; changes sync to our server when you are online. Names of family wallets and copies kept when two devices edited the same record are encrypted on our server.
7. Your rights
- Export — in the app (Reports → Export): wallet statements and month reports as PDF, every movement as CSV, and all your data as JSON. You can also ask via contact.
- Delete — soft-delete an account from settings; permanent erasure within 30 days.
- Correct — every debt record is editable directly in the app.
8. Children
Solvory is not intended for users under 16. We don't knowingly collect data from minors.
9. Changes
If this policy changes materially, we'll notify you in-app and via email. The "last updated" date above always reflects the current version.
10. Contact
Privacy questions: contact us or email support@ai-compasss.in.