Your records
Oaktally uses your account identity, budget settings and records to show your plan, account balances, goals and reviews. Record only information you want to keep in the app. The website and early-access list have a separate privacy policy.
Private and shared
Your personal budget stays private. Joining a household gives its current members access to the shared plan and shared records. Paying for a plan does not grant access to another member's private budget. Leaving ends access to current household data; permitted records of your participation can remain available.
On your device
Native sign-in credentials use device secure storage. Signed-in drafts and unsent changes use an encrypted local database tied to your account. You can keep or discard drafts when signing out. The browser preview holds session and draft data in memory. Device backups, exported files and copies you share have separate lifecycles.
Service providers
Supabase processes authentication and saved database records. Cloudflare processes enabled background integration jobs. Expo provides builds and app updates. Apple or Google handles native sign-in. When subscriptions are enabled, the store and RevenueCat process purchase status linked to your account identifier, not your transaction descriptions or amounts. These services may process information outside your country.
Imports and exports
Transaction files are parsed on your device. Reviewed rows are saved when you confirm. Standard exports stay available after trial or subscription expiry. An export is a separate copy: recipients and your device may retain it after you delete records in Oaktally.
Receipt photos and AI
When receipt capture is available, you can choose a photo and send it through OpenRouter to an AI provider for extraction. Only that photo and extraction instructions are sent, not your ledger, account balances or partner records. AI output is a suggestion you review before recording. Photos and extracted drafts are private to the uploader, including photos used for shared entries. Cloudflare R2 stores the photo; no public image URL is provided. Provider routing requires no provider data collection and zero data retention support. Processing may occur outside your country. You can download a photo or remove it without deleting the recorded entry. Removal revokes access immediately and queues deletion from R2. Photos otherwise remain until account deletion; exported copies have their own lifecycle.
AI chat
When chat is enabled, it sends questions, category names and bounded recorded totals from the selected authorized budget through OpenRouter. Account details, transaction notes, private funding sources and partner identities are excluded. Answers and questions are private to your login. Provider routing requires no data collection and zero data retention support. Questions and answers remain in your account until account deletion. Figures can be incomplete and older answers are hidden after relevant records change. Chat provides educational information, not investment, tax or legal advice.
AI permission
The first time you use voice, receipt photos or chat with AI, Oaktally asks once for permission to send that content through OpenRouter. One choice covers every AI feature. Settings > Reset AI permission choices asks again next time. Choosing Not now keeps manual and on-device entry available.
Voice entry
Voice entry asks for microphone and speech access when you choose Record. Speech recognition uses your device and its configured recognition service. Local interpretation creates editable drafts. When AI voice is available, it sends bounded transaction text and selected category names through OpenRouter to Gemini. Raw transcripts are not saved in Oaktally device storage, URLs or analytics. Temporary server session state expires after ten minutes. You review drafts and choose Save before financial records are posted.
Investment prices
When enabled, market search and quotes use Twelve Data. Requests contain a security or search term, not your share quantity or portfolio balance. Shared server caching reduces repeated requests. Your device keeps scoped market reads in memory. Prices show their quote time and may be delayed or unavailable. Share quantities remain your responsibility. Oaktally does not buy or sell securities.
Analytics and ads
Oaktally uses PostHog to count how the app is used, such as which screens open and when an entry is saved. These events carry your account ID and short labels like "expense" or "voice", never amounts, payees, notes, account names or balances. Sentry receives crash reports with your account ID and technical details so we can fix errors. Singular measures which ads led to an install or subscription. If you allow tracking when iPhone asks, Singular and RevenueCat may use your device advertising identifier for that measurement. You can change this anytime in iPhone Settings, Privacy and Security, Tracking. Your budget and transactions are never shared with advertisers. There is no session replay.
Optional services
Bank connections and push delivery are not offered yet. Enabling them will require their own consent and disclosures. Provider, device and operational logs may still record technical request information.
Retention and deletion
Records are kept to provide your account until you remove them or request account deletion in Settings. Deletion requests are processed within 30 days after identity is confirmed. Personal records, identity and provider-linked data are included; restricted shared accounting records require review to protect other participants and satisfy applicable retention requirements. Backups expire under their provider retention schedules. Deleting the app alone does not delete your server account or cancel a subscription.
Your choices
You can correct records, export permitted data, leave a household and initiate deletion in the app. Contact fabio@echoforge.to about access, privacy or the status of a request. Do not include passwords, bank credentials or financial files in an ordinary support email.
Contact
Questions? Visit Support.