Privacy Policy

1. General provisions and scope

This Privacy Policy describes how data is handled in the Voice Finance mobile app for iOS and on the official website voicefinance.app.

It applies to: the Voice Finance app; the official website; and correspondence with support at [email protected].

It does not apply to Apple's services (App Store, iCloud, Apple Speech, StoreKit), which Apple provides to you directly under its own terms and privacy policy, nor to third-party websites and services that may be linked from the app or the website.

By using the app or the website you confirm that you have read this Policy.

2. Who the developer is and how to contact us

The owner and developer of Voice Finance is Individual Entrepreneur Kirill Mikhailovich Paramonov (the “Developer”).

Address: 3 Prospekt Mira, Apt. 44, Krasnoznamensk, Moscow Oblast, 143090, Russian Federation. INN (Taxpayer Identification Number): 500604796798. OGRNIP (Primary State Registration Number of the Individual Entrepreneur): 322508100269063.

For any question about this Policy, contact [email protected]. Full registration details are in section 21.

3. What the app does not collect or send to the Developer

The app is designed so that the Developer never receives your financial data. Specifically:

• the app creates no Voice Finance account: there is no sign-up, login, password or profile;
• the Developer operates no server or database to which your transactions could be sent;
• the app contains no third-party analytics, advertising SDKs, pixels, trackers or cross-site tracking tools;
• the app does not collect contacts, photos, location, browsing history or advertising identifiers;
• the Developer has no access to your card number or other payment credentials — these are handled solely by Apple.

4. Your financial records

As you use the app you create financial records: transactions (income and expenses), amounts, currencies, dates, transaction titles and merchants, categories, budgets and limits, and derived figures — analytics, category statistics, forecasts and the “Available to spend today” guide.

All of this is created and stored on your device and, if you use iCloud, synced through your personal iCloud storage (section 6). The Developer neither receives nor can access these records. Analytics and forecasts are computed locally on the device.

The app also stores local categorization rules derived from your own category corrections. Such rules hold normalized keys (for example an item or merchant name) and the category you chose; they contain no amounts and no original phrases.

“Available to spend today” is calculated locally from your own data and is an informational guide, not financial advice.

5. Local storage

Financial records and learned rules are stored in the app's local database on your device (SwiftData). App settings — language, appearance, base currency, haptics, onboarding completion — and a cache of market exchange rates are stored in the device's local storage.

Only the app itself can access this data, within the sandbox that iOS provides.

6. iCloud and CloudKit

Purpose. Sync makes your transactions available across your devices and restores them when you reinstall the app or change device.

How it works. The app uses the CloudKit mechanism built into SwiftData and stores data in the private database of your personal iCloud account (private CloudKit). Sync works if you are signed in to iCloud and have not turned iCloud off for Voice Finance in system settings.

Apple's role. Apple acts as the storage and sync infrastructure provider and processes this data under its own terms and privacy policy.

Developer access. The private iCloud database belongs to your Apple account. The Developer cannot access its contents, cannot view, export or restore your records, and receives no information about them.

Your control. You manage sync through the system: you can turn iCloud off for Voice Finance, change iCloud settings, or delete the app's data from iCloud. The app also offers full deletion of all financial data and learned rules, which covers the records in your iCloud.

Deletion and restoration. The Developer cannot restore deleted data, holding no copy of it. Restoration is possible only through Apple and only to the extent Apple provides.

7. Voice input

Microphone access. The microphone is used solely to add transactions by voice. Recording happens only while you hold the microphone button. Microphone and speech-recognition permissions are requested separately and can be revoked in system settings; manual entry remains available.

How audio is processed. Speech-to-text is performed by Apple's system component Apple Speech (SFSpeechRecognizer). When your device and the selected language support on-device recognition, the app explicitly requests the offline mode. Where such support is unavailable, audio may be sent to Apple's infrastructure for processing under Apple's terms.

Audio storage. The app does not save audio as files and does not transmit it to the Developer. The current session's audio buffers are held in memory only — solely to allow one retry of recognition in the alternate language — and are cleared as soon as the transaction is recognized, the retry completes, or the session is cancelled.

Purpose limitation. Your speech and the recognized text are not used for advertising, profiling, building ad segments, or training the Developer's models.

8. Parser and processing of recognized text

Recognized or manually entered text is processed by the app's local parser, which determines the transaction type, amount, currency, date, title and category. Parsing runs on the device and requires no network transmission of the text.

The result is shown to you for review before saving. The original phrase is not written to the database (section 5).

9. StoreKit and Premium

What Apple handles. Purchase, payment, renewal, cancellation and refunds of the subscription are handled by Apple through your Apple account. Apple processes payment credentials, purchase history and related information under its own terms and privacy policy.

What the app receives. The app uses StoreKit 2 and reads the current entitlement information from the system: the identifier of the purchased product and whether the purchase has been revoked. Premium features are enabled or disabled on that basis. This information does not leave the device.

What the Developer does not receive. The Developer has no access to your card number, banking details, billing address or other payment data, and receives no per-user purchase information from the app.

The aggregated sales statistics that the App Store makes available to developers in its own interface are produced by Apple and do not identify you.

10. Diagnostic data and crash reports

The app contains no third-party crash-reporting or error-monitoring services.

The app writes technical entries to the device's system log (os.log). These contain only service events and error codes; amounts, transaction titles, categories, recognized phrases and record identifiers never appear in the log.

If you have enabled sharing of diagnostics and usage data in iOS settings, Apple may provide the Developer with aggregated crash and performance reports. That exchange is controlled by you through system settings and is carried out by Apple.

11. Support requests

Support is provided by email at [email protected]. When you contact support, the Developer receives the email address you write from, the contents of your message, and any materials you attach.

When you write from within the app, the message is pre-filled with technical information: the app version and build number, the iOS version, the device model and the selected interface language. This helps reproduce the problem. You see the message before sending and may edit or remove any part of it.

This information is used solely to answer your request and resolve the problem described. It is not used for advertising or mailings and is not shared with third parties, except the email service provider that delivers and stores the correspondence.

12. The official website

The voicefinance.app website is static and is hosted by Netlify.

As with any request to a website on the internet, the hosting provider's infrastructure technically processes network requests: IP address, date and time of the request, the requested page address, and browser and operating-system type. This processing is necessary to deliver pages and maintain security, and is carried out by Netlify as the infrastructure provider.

The website uses Cloudflare Web Analytics (Real User Measurements), a privacy-focused web-analytics service. It is used only to obtain aggregated statistics on page visits and page performance, including Core Web Vitals. This helps us understand which pages are opened and how quickly they load.

Cloudflare Web Analytics is not used for advertising, profiling, session replay, building advertising segments, or tracking visitors across sites. According to Cloudflare's documentation, the service uses no cookies, applies no fingerprinting, and does not collect visitors' personal data for identification. The Developer receives only aggregated reports and cannot identify an individual from them.

The Developer does not and cannot obtain your financial records through web analytics: the website and the app are not connected, and app data is never sent to the website. Cloudflare acts here as an infrastructure provider and processes data under its own terms — see the Cloudflare Privacy Policy.

Apart from this, the website uses no cookies, no advertising pixels, no trackers, no profiling tools and no personal-data collection forms. Fonts and other resources are served from the site itself, without external CDNs. No cookie banner is required because no cookies are set.

13. Third-party services

The following third-party providers are actually used:

• Apple — app distribution (App Store), sync (iCloud/CloudKit), speech recognition (Apple Speech), subscriptions and payments (StoreKit), system diagnostics;
• Netlify — hosting of the official website;
• Cloudflare — delivery and protection of the official website, and Cloudflare Web Analytics (aggregated visit and performance statistics, see section 12);
• exchange-rate providers — api.frankfurter.dev (European Central Bank data) and www.cbr-xml-daily.ru (Bank of Russia data). Only currency codes are sent; amounts, transaction titles and user identifiers are not. As with any network request, the service operator can technically see the device's IP address;
• an email service provider — delivery and storage of support correspondence.

No other third-party libraries are embedded in the app: it contains no third-party analytics or advertising SDKs.

14. Purposes and grounds for processing

The Developer processes a limited amount of information, and only in the following cases:

• support requests — purpose: reviewing the request, replying and resolving the problem; ground: your own request and the performance of obligations connected with providing the app;
• technical operation of the website — purpose: delivering pages and maintaining security; ground: the legitimate interest in keeping the website operational.

Financial records inside the app are not processed by the Developer, who never receives them.

15. Retention and deletion

• Data in the app is kept on your device until you delete it or delete the app. Deleting the app removes the local database from the device.
• Data in iCloud is kept in your iCloud account until you delete it through the app or the system. Deleting the app alone may not remove the iCloud copy — use the app's delete-all-data function or iCloud settings.
• Support correspondence is kept for as long as needed to handle the request and confirm its outcome, and is deleted when no longer needed, unless the law requires otherwise.
• Technical website infrastructure records are kept by the hosting provider for a limited period under its own rules.

16. Security

The app is built to minimize risk: financial data never leaves your device and your iCloud, there are no accounts and no server-side database, and the amount of information the Developer processes is kept to a minimum. Data is protected by the iOS app-isolation mechanisms and, when iCloud is used, by Apple's protections.

That said, no app, device or method of transmission can guarantee absolute security. The Developer cannot guarantee protection against every possible incident, including those arising from loss of control over your device or Apple account, and recommends using a passcode, Face ID/Touch ID and Apple's two-factor authentication.

17. Your rights and how to exercise them

Most rights you exercise directly, without contacting the Developer: at any time you can view, edit or delete your records, delete all app data, reset the learned categorization rules, turn off iCloud sync, revoke microphone and speech-recognition permissions, and delete the app.

For the information the Developer actually processes (support correspondence), you may request access to it, its correction or its deletion. Write to [email protected].

The Developer cannot provide access to your financial records or restore them, having no access to them.

You also have the right to contact the competent data-protection authority in your jurisdiction.

18. Children and minors

Voice Finance is intended for personal expense tracking and is not directed specifically at children. The app does not ask for your age and does not collect information that would establish it.

The app's age rating and parental-control options are provided through the App Store and Apple's Screen Time settings. If you are a parent or legal guardian and believe a child has sent personal data to the Developer through support, write to [email protected] and that information will be deleted.

19. International infrastructure and applicable law

The Developer is registered in the Russian Federation. Apple's services, the website hosting and the exchange-rate providers use their own infrastructure, which may be located in various countries; any transfer of data by those providers is carried out under their own terms and rules.

This Policy does not limit the rights granted to you by the mandatory provisions of the law of your country of residence.

20. Changes to this Policy

This Policy may be updated when the app's functionality or the set of services used changes. The current version is always published on this page together with its effective date.

Material changes that expand the data processed take effect no earlier than their publication; such changes will be announced in the app or on the website.

21. Contact and registration details

• Owner and developer: Individual Entrepreneur Kirill Mikhailovich Paramonov
• Address: 3 Prospekt Mira, Apt. 44, Krasnoznamensk, Moscow Oblast, 143090, Russian Federation
• INN (Taxpayer Identification Number): 500604796798
• OGRNIP (Primary State Registration Number of the Individual Entrepreneur): 322508100269063
• Date of state registration: May 25, 2022
• Registration authority: Interdistrict Inspectorate of the Federal Tax Service No. 23 for the Moscow Region
• Contact: [email protected]

22. Effective date

This version of the Privacy Policy takes effect on July 25, 2026.