Privacy Policy
Last updated: January 22, 2026
1. Introduction
TalkSpense ("we", "us", or "our") operates the TalkSpense mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
Data Controller:
- • Name: Arkadiusz Gil / TalkSpense
- • Address: Kaszowo 29, 56-300 Milicz, Poland
- • NIP: 9161400152
- • Email: support@talkspense.app
This Privacy Policy complies with the General Data Protection Regulation (GDPR) and Polish Personal Data Protection Act (RODO).
2. What Data We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Display name
- Profile preferences (language, currency settings)
- Authentication credentials (via Google/Apple Sign-In (where available))
2.2 Expense Data
When you track expenses, we collect:
- Expense amounts and currencies
- Categories and subcategories
- Store/merchant names
- Purchase dates and times
- Payment methods
- Notes and descriptions
- Family member assignments (if Family mode enabled)
2.3 Receipt & Image Processing
✅ Privacy-First Approach:
Images are NOT permanently stored on our servers. Only parsed metadata (items, prices, merchant names) is saved to your account.
When you scan receipts or screenshots:
- Photos/screenshots are sent to our AI service for OCR
- Only text data extracted from images is saved
- Original images are deleted within 24 hours
2.4 Voice Input
✅ Privacy-First Approach:
Audio files are NOT stored permanently. Only text transcriptions are saved.
When you use voice commands:
- Audio recordings are transcribed via Groq Whisper AI
- Only text transcriptions are saved
- Audio is processed in-memory and deleted within 24 hours
- Language preference is saved for improved accuracy
2.5 Device Data
- Firebase Cloud Messaging (FCM) token for push notifications
- Device type (Android/iOS)
- App version and OS version
- Device language and timezone settings
2.6 Error Tracking
🔒 PII Protection:
All Personally Identifiable Information (emails, phone numbers, credit cards, national IDs) is automatically redacted from error logs.
3. How We Use Your Data
We use your information to:
- Expense Tracking: Record and categorize your financial transactions
- AI-Powered Features: Process receipts via OCR and voice-to-text transcription
- Family Budget Sharing: Enable collaboration with family members (if opted in)
- Push Notifications: Send budget alerts and receipt processing status
- Product Support: Respond to inquiries and provide technical assistance
- Service Improvement: Analyze usage patterns to enhance app functionality
- Security: Detect and prevent fraud, abuse, and security incidents
3A. Legal Basis for Processing (GDPR Article 6)
We process your data based on the following legal grounds:
Contract Performance (Art. 6.1.b)
Processing expenses, receipts, voice transcriptions, and AI features is necessary to provide the core service you signed up for.
Legitimate Interest (Art. 6.1.f)
Error tracking, fraud prevention, and service improvements are based on our legitimate interest to maintain a secure and reliable app.
Consent (Art. 6.1.a)
Marketing emails and optional analytics require your explicit consent, which you can withdraw at any time.
3B. International Data Transfers
Some of our service providers are located outside the EU:
- OpenRouter AI (Google Gemini): USA - Protected by EU Standard Contractual Clauses (SCCs)
- Groq (Whisper AI): USA - GDPR-compliant data processing agreements
- Supabase: EU/USA (customer choice) - GDPR-compliant infrastructure
All international transfers comply with GDPR Chapter V requirements.
3C. Age Requirement
Minimum Age: TalkSpense is intended for users 16 years or older (GDPR minimum age for consent).
We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal information, please contact us at support@talkspense.app.
Contact Us
If you have questions or requests regarding this Privacy Policy:
Email: support@talkspense.app
GDPR/RODO Inquiries: Use subject line "Data Protection Inquiry"