Privacy Policy

1. Scope

Iponaryo is a finance tracking app that helps users manage workspaces, accounts, entries, exports, optional cloud backup, and AI-assisted drafting. This policy applies to the app and the public website pages linked from the app.

2. Information we collect

Account and authentication information

When you sign in, we use Clerk to manage authentication. Depending on the sign-in method you use, we may receive your Clerk user ID, email address, username, profile image, and sign-in provider details such as Apple or Google.

Finance data you create

Iponaryo stores the finance information you choose to enter, such as workspace names, account details, balances, categories, entries, notes, schedules, and export settings. By default, the app is local-first, which means core finance data stays on the device or browser unless you choose to sync a cloud backup.

Optional cloud backup data

If you use cloud backup, we store the latest backup payload you send, related metadata such as schema version and item counts, a checksum, and payload size. Cloud backups are stored in Supabase and are associated with your authenticated Clerk account.

AI assistant and voice input

If you use Iponaryo AI, we process the messages, snapshots, workspace context, and voice uploads you submit to generate draft finance entries or responses. Voice recordings and chat prompts may be sent to our AI processing providers for transcription or response generation. The assistant quota system also stores limited usage records, such as daily chat counts and billed voice usage, and may keep hashed user or network identifiers for abuse prevention.

Technical and device information

We may collect basic technical information needed to operate the service, such as app version, platform, browser or device context, request metadata, and limited logs related to authentication, backup, and assistant requests.

4. Sharing and service providers

We do not sell your personal information. We share information only as needed to operate the service, including with:

• Clerk for authentication, account sessions, and social sign-in.
• Supabase for optional cloud backup, mirrored account records, and protected backend storage.
• Groq for AI assistant chat and voice transcription requests that you submit.
• Apple and Google when you choose those sign-in methods.
• Professional advisers, legal authorities, or counterparties when required by law or necessary to protect rights, safety, or the service.

These providers may process data in countries other than your own. We use them to operate the app and expect them to handle data under their own privacy and security commitments.

6. Security

We use reasonable technical and organizational measures designed to protect account-linked data, including authenticated access controls and protected backend storage. No system is perfectly secure, and you are responsible for keeping your device, browser, and account credentials secure.

7. Your choices

• You can choose whether to use optional cloud backup.
• You can choose whether to use AI chat and voice features.
• You can sign out and stop using the service at any time.
• You can permanently delete your account in the app from Settings.
• You can manage certain privacy preferences inside the app, such as balance masking and export confirmation rules.
• You can contact us to request access, correction, or deletion where applicable law provides those rights.

8. Children

Iponaryo is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date, publish the revised version in the app or website, or provide additional notice where required.