XYZMoney Privacy Policy

Last Updated: June 15, 2026

Developer: XYZTech
Contact Email: XYZTechFeedBack@gmail.com

Privacy Policy

  1. Introduction

XYZMoney respects and protects your privacy. This Privacy Policy explains what information XYZMoney collects or processes, how the information is collected, how it is used, how it may be shared, and how you can delete your data or revoke permission.

XYZMoney is designed as a local-first personal finance and bookkeeping app. Most user data is stored on the user’s device.

  1. Information We Collect or Process

2.1 Information You Create in the App

XYZMoney may store information that you enter, create, scan, import, or generate in the app, including:

  • expense records
  • income records
  • ledgers or account books
  • budgets
  • categories
  • tags
  • notes
  • receipt or invoice text
  • barcode or QR code information
  • shopping-list or inventory items
  • financial statistics and reports
  • optional bill location information, if you choose to save a location

This information is collected when you manually enter records, scan receipts, select images, use voice bookkeeping, create shopping or inventory items, generate reports, or otherwise use app features.

2.2 Photos, Camera, Receipt, Barcode, and OCR Data

If you grant Camera or Photo Library permission, XYZMoney may process images you capture or select for:

  • receipt scanning
  • invoice scanning
  • QR code recognition
  • barcode recognition
  • avatar or image selection
  • OCR text recognition

Receipt and image OCR is processed first on the device using Apple Vision. In the current OCR flow, the app uses recognized text and necessary context for bookkeeping features; the full original image is not sent to an AI provider unless a future feature separately explains this and asks for permission.

2.3 Voice and Speech Data

If you grant Microphone and Speech Recognition permission, XYZMoney may process your speech input for voice bookkeeping and voice text entry.

Speech input is converted into recognized text using Apple system speech recognition services according to iOS permission settings and Apple system behavior. XYZMoney uses the recognized text to create or suggest bookkeeping records.

2.4 AI Configuration and API Keys

If you choose to connect a third-party AI service, you may enter an API key, endpoint, model name, host, port, or related configuration.

User-provided API keys and AI configuration are stored locally on your device and are used only to authenticate requests to the AI service provider selected or configured by you. XYZMoney does not sell, rent, or use user-provided API keys for advertising or unrelated purposes.

2.5 Device and Diagnostic Information

XYZMoney may process limited device or diagnostic information to maintain app stability and respond to support requests, such as:

  • device model
  • system version
  • app version
  • crash or diagnostic information provided through Apple systems or by the user
  • information included in support emails sent by the user

XYZMoney does not use this information for advertising or tracking.

  1. Permissions Used by the App

XYZMoney may request the following iOS permissions only when needed for app features:

Camera:
Used for receipt scanning, invoice scanning, barcode recognition, and QR code recognition.

Photo Library:
Used for importing receipts, selecting images for recognition, and choosing images such as avatars.

Microphone:
Used for voice bookkeeping and voice input.

Speech Recognition:
Used to convert speech input into text for bookkeeping features.

Notifications:
Used for bill reminders, savings reminders, budget alerts, and other reminders selected by the user.

Location:
Used only if the user chooses to save location information with a bill or record.

Local Authentication:
Used for App Lock or similar local security features. XYZMoney does not upload biometric data.

  1. How We Use Information

XYZMoney uses information only to provide and improve app functionality, including:

  • creating, storing, and managing bookkeeping records
  • organizing ledgers, budgets, categories, tags, notes, and statistics
  • recognizing receipt, invoice, QR code, barcode, image, and speech content
  • generating financial statistics, charts, and reports
  • providing optional AI-powered bookkeeping and analysis features
  • generating shopping-list or inventory suggestions requested by the user
  • sending reminders and local notifications selected by the user
  • responding to support requests
  • improving app performance, stability, and security
  • preventing misuse, errors, or data loss

XYZMoney does not sell personal information. XYZMoney does not use personal information for third-party advertising or cross-app tracking.

  1. Data Storage

XYZMoney primarily stores user data locally on the user’s device.

Local storage may include:

  • Realm Database
  • SQLite Database
  • iOS application sandbox storage
  • UserDefaults or other local iOS storage mechanisms
  • locally stored AI configuration or API keys

Data stored locally remains on the device unless the user deletes it, uninstalls the app, enables an Apple system backup service, or chooses a feature that sends selected information to a configured third-party service after permission is granted.

  1. AI Services and Third-Party AI Providers

XYZMoney includes optional AI-powered features. These features are disabled unless the user chooses to configure and use them.

AI-powered features may include:

  • structuring receipt or OCR text into bookkeeping records
  • structuring speech-recognized text into bookkeeping records
  • smart transaction categorization
  • shopping-list food analysis
  • financial summaries or insights requested by the user

Before XYZMoney sends personal data to a configured AI service, the app displays an in-app permission prompt. The prompt identifies the configured AI recipient and endpoint and explains what data may be sent. If the user does not grant permission, XYZMoney does not send the data to that AI provider.

With permission, XYZMoney may send the minimum data needed for the selected AI feature, including:

  • text typed by the user
  • text recognized from speech input
  • text extracted from receipts or images by Apple Vision OCR
  • receipt or invoice text needed to create bookkeeping records
  • shopping candidate names, categories, prices, and dates
  • the minimum ledger context needed to generate the requested bookkeeping, shopping, or financial suggestion

In the current receipt and image OCR flow, the original image is processed first by Apple Vision. XYZMoney sends recognized text and necessary context to the selected AI provider, not the full original image, unless a future feature clearly explains otherwise and asks for separate permission.

The AI provider may be:

  • DeepSeek, if the user uses the built-in DeepSeek-compatible configuration
  • an OpenAI-compatible endpoint configured by the user
  • LM Studio, Ollama, or another local or self-hosted endpoint configured by the user
  • another custom AI endpoint entered by the user

AI requests may use the API key or endpoint configuration entered by the user.

Data sent to AI providers is used only to perform the AI feature requested by the user. XYZMoney does not sell AI-submitted content and does not use AI-submitted content for advertising.

For third-party AI providers integrated or used by XYZMoney, we require the provider to protect shared user data with the same or equal level of protection described in this Privacy Policy and required by applicable App Store privacy rules. If the user configures a custom endpoint, the user controls the recipient and should use only providers they trust.

Users may revoke AI data sharing permission in the app under Settings > Privacy > AI Data Sharing Details. After permission is revoked, XYZMoney will not send data to the configured AI provider unless the user grants permission again. If the configured AI recipient changes, XYZMoney will ask for permission again before sending data to the new recipient.

  1. Third-Party Services

XYZMoney may use Apple system services and user-configured third-party services to provide app functionality.

Apple system services may include:

  • Apple Vision
  • Apple Speech Recognition
  • Camera
  • Photos
  • Local Authentication
  • Local Notifications
  • Location Services, if enabled by the user

User-configured AI services may include:

  • DeepSeek
  • OpenAI-compatible services
  • LM Studio
  • Ollama
  • custom endpoints entered by the user

Third-party services that receive user data from XYZMoney must provide the same or equal protection of user data as described in this Privacy Policy and required by applicable App Store privacy rules.

  1. Cloud Services and Backups

XYZMoney is primarily local-first and does not require a XYZMoney cloud account.

Data stored locally may be included in Apple system backups depending on the user’s iOS backup settings. If a cloud synchronization feature is introduced or enabled by the user, users will be informed before synchronization is enabled.

  1. Data Sharing

XYZMoney shares user data only in the following situations:

  • when the user grants permission to send selected data to a configured AI provider for an AI feature
  • when Apple system services process data as part of iOS permissions and system functionality
  • when the user sends information to XYZTech for support
  • when required by law, legal process, or to protect the rights, safety, and security of users or the app

XYZMoney does not sell personal information.
XYZMoney does not track users across apps or websites.
XYZMoney does not use user data for third-party advertising.

  1. Data Retention, Deletion, and Revocation

User-created data is stored locally until the user deletes it, clears app data, or uninstalls the app.

Users may delete data by:

  • deleting individual records inside the app
  • clearing records or app data where available
  • removing saved AI API keys or AI configuration
  • revoking AI data sharing permission in Settings > Privacy > AI Data Sharing Details
  • uninstalling the application

Data stored locally on the device is removed when the user deletes the app, subject to iOS system behavior and backup settings.

Because XYZMoney does not require a XYZMoney cloud account for normal use, most app data is controlled directly on the user’s device. If you contact XYZTech by email and request deletion of support communications or related information, we will respond as required by applicable law.

  1. Data Security

XYZMoney uses reasonable safeguards to protect user information, including:

  • iOS app sandbox protection
  • local access controls
  • local secure storage mechanisms where appropriate
  • HTTPS for supported network requests
  • user-controlled permission prompts
  • local authentication for App Lock features, if enabled

No electronic transmission or storage method can be guaranteed to be completely secure. Users should protect their device passcode, API keys, and configured AI endpoints.

  1. Children’s Privacy

XYZMoney is not intended for children under 13 years of age or the minimum age required by applicable law.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

  1. International Processing

If the user configures or chooses an AI provider, data sent to that provider may be processed in the country or region where the provider, endpoint, or server operates. Users who configure a custom endpoint are responsible for choosing a provider they trust.

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users in the app, on our website, or through other appropriate means. Continued use of XYZMoney after the updated Privacy Policy becomes effective means that you accept the updated policy.

  1. Contact Us

If you have questions about this Privacy Policy or privacy practices, please contact us:

Developer: XYZTech
Email: XYZTechFeedBack@gmail.com