Privacy Policy for SayMoney

Last updated: August 27, 2026

This Privacy Notice for SayMoney (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

Download, install, or use our mobile application SayMoney (the “App”), a voice‑first personal expense tracker
Visit any website of ours that links to this Privacy Notice
Engage with us in other related ways, including any support, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@saymoney.app.

SUMMARY OF KEY POINTS

What personal information do we process? When you use the App, we may process the information you provide (such as your email, display name, and the financial entries you record) and information collected automatically (such as device and usage data). Learn more below.

Do we process voice recordings? When you use voice input, we record a short audio clip and send it to our AI provider to extract the transaction (amount, category, merchant). The audio is deleted immediately after processing and is not stored by us.

Do we process any sensitive personal information? The financial information you record may be considered sensitive in some jurisdictions. We do not process special categories such as racial or ethnic origin, health, religious beliefs, or sexual orientation.

Do we collect information from third parties? We do not collect personal information about you from third parties.

How do we process your information? To provide, operate, and improve the Services, communicate with you, ensure security and prevent fraud, show advertising (if enabled), and comply with the law. We process your information only when we have a valid legal reason to do so.

With whom do we share information? With service providers that help us run the App — primarily our cloud/database and authentication provider, our AI processing provider (Google), advertising and analytics partners, and app‑store/payment providers. We do not sell your personal information.

Is your information transferred internationally? Yes. Your account and transaction data are hosted in the European Union (Germany). Some providers (such as Google) may process certain data in the United States. This means your information may be transferred to countries other than yours.

How do we keep your information safe? We use reasonable organizational and technical measures. However, no system is 100% secure.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. You can also delete your data directly in the App (Settings → Delete my data).

How do you exercise your rights? Use the in‑App controls, or contact us at info@saymoney.app.

1. What information do we collect?

2. How do we process your information?

3. What legal bases do we rely on?

4. When and with whom do we share your personal information?

5. What is our stance on third‑party services?

6. Do we use cookies and other tracking technologies?

7. Is your information transferred internationally?

8. How long do we keep your information?

9. How do we keep your information safe?

10. Do we collect information from minors?

11. What are your privacy rights?

12. Controls for Do‑Not‑Track features

13. Do United States residents have specific privacy rights?

14. Do we make updates to this notice?

15. How can you contact us about this notice?

16. How can you review, update, or delete the data we collect from you?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

Depending on how you use the App, this may include:

Account information — your email address and a password, or your Google account if you sign in with Google. An account (email) is required to use the App. You may also set a display name.
Profile image (avatar) — if you choose one; a photo you select is stored locally on your device, not on our servers.
Financial information you record — the expenses, income, amounts, categories, merchant/description text, monthly budget, savings rate, and informal loans (“slafat”) that you enter by voice or by typing.
Support communications — information you provide when you contact us.

Sensitive information. The financial data you record may be treated as sensitive in some jurisdictions. We process it solely to provide the expense‑tracking Service and do not use it for advertising. We do not process special/“sensitive” categories of data.

Voice input (audio)

When you use the microphone to record a transaction, a short audio clip is captured and transmitted to our AI processing provider (Google — Gemini API) to extract the structured transaction. The audio recording is deleted right after this extraction and is not retained by us. Only the resulting text fields (amount, category, description) are saved to your account.

Information collected automatically

In short: Some information — such as device characteristics and usage/diagnostic data — is collected automatically when you use the App.

Device data — device model, operating system, language/locale, and approximate country/region (derived from your device settings) used to tailor features such as usage limits.
Usage and diagnostic data — how you interact with the App, feature usage, and crash/error reports used to fix bugs and improve stability.
Advertising identifiers — if advertising is enabled, your device’s advertising ID may be processed by our advertising partner to serve and measure ads.

We do not use precise GPS location. We only infer an approximate region from your device’s locale settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, and administer the Services, communicate with you, for security and fraud prevention, to show advertising (where enabled), and to comply with law.

We may process your personal information to:

Deliver the Service — record, categorize, store, and display your transactions and related insights.
Operate voice/text extraction — transiently process your audio or text through our AI provider to structure a transaction.
Respond to inquiries and provide support.
Send administrative information — such as changes to our terms and policies.
Improve the Services — understand feature usage and diagnose problems (including via crash reports).
Show advertising — display ads and measure their performance where advertising is enabled.
Protect the Services — for security, fraud monitoring, and abuse prevention.
Comply with legal obligations and enforce our terms.

We may also process your information for other purposes with your consent.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In short: We process your personal information only when we have a valid legal reason to do so.

If you are located in the EEA, UK, or Switzerland, we rely on:

Consent — e.g., for advertising, analytics, and processing you can withdraw at any time.
Performance of a contract — to provide the Services you request.
Legitimate interests — to secure, maintain, and improve the App, and to support our business, where not overridden by your rights.
Legal obligations — to comply with applicable law.
Vital interests — to protect someone’s safety in rare cases.

If you are located in Canada, we process your information based on your express or implied consent, and in the limited exceptional cases permitted by applicable law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We share information only with service providers that help us run the App, and only as needed. We do not sell your personal information.

We may share information with the following categories of third parties, under contracts designed to protect your data:

Cloud, database, and authentication provider — Supabase (hosting of your account and transaction data, authentication).
AI processing provider — Google (Gemini API) to extract transactions from your voice/text (audio deleted after processing).
Advertising partner — Google AdMob, where advertising is enabled, to serve and measure ads (may involve your advertising identifier).
Analytics provider — where enabled, to understand aggregate usage and improve the App.
App store — Google Play for app distribution.

Business transfers. We may share or transfer your information in connection with a merger, financing, acquisition, or sale of assets.

5. WHAT IS OUR STANCE ON THIRD‑PARTY SERVICES?

In short: We are not responsible for the practices of third parties.

The App relies on third‑party services (listed above) and may display third‑party advertisements. Their processing of your information is governed by their own privacy policies. We encourage you to review the policies of Google (including AdMob and Gemini) and Supabase.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: The App does not use browser cookies, but it uses similar technologies and identifiers.

As a mobile app, SayMoney does not use website cookies. However, we and our partners may use software development kits (SDKs), device/advertising identifiers, and similar technologies for essential functionality, crash reporting, analytics, and — where enabled — advertising. Where required by law, we will ask for your consent (for example, via a consent prompt) before using advertising or analytics technologies, and you can manage ad personalization through your device’s settings.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In short: We may transfer, store, and process your information in countries other than your own.

Your account and transaction data are hosted with our cloud provider (Supabase) in the European Union (Germany). Certain sub‑processors — in particular Google (Gemini AI processing, AdMob advertising, Google Play) — may process data in the United States or other countries. If you are outside the EEA, your data may therefore be transferred to the EU; if you are in the EEA, UK, or Switzerland and data is transferred outside those areas, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Copies of relevant safeguards can be provided on request.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information only as long as necessary.

Voice recordings — deleted immediately after the transaction is extracted; not retained.
Account and transaction data — kept while your account is active and until you delete it. You can delete all your data at any time in Settings → Delete my data, after which we delete it from our active systems (residual copies in backups are isolated and deleted on our backup rotation schedule).

When we no longer have a legitimate need to process your information, we delete or anonymize it.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We use organizational and technical measures to protect your information.

We use measures such as encrypted connections (HTTPS/TLS) and access controls (including database Row‑Level Security so each user can access only their own data). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You use the Services at your own risk and should keep your device secure.

10. DO WE COLLECT INFORMATION FROM MINORS?

In short: We do not knowingly collect data from or market to children under 18 (or the age required by your jurisdiction).

The Services are not directed to children. By using the App, you represent that you are at least 18, or the applicable age of majority, or the parent/guardian of a minor who uses it with your consent. If we learn we have collected data from a minor without proper consent, we will deactivate the account and delete the data. Contact us at info@saymoney.app if you believe we may have such data.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In short: Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, and to withdraw consent.

You can review, edit, or delete your data directly in the App (profile, transactions, and Settings → Delete my data), or by contacting us.
EEA/UK/Switzerland/Canada residents have rights under applicable data‑protection laws, including access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to solely automated decisions with legal effects.
Withdrawing consent. Where we rely on consent, you can withdraw it at any time; this does not affect processing already carried out.
Advertising choices. You can limit ad personalization via your device’s advertising settings, and where required we will present a consent prompt.

If you are in the EEA or UK and believe we process your data unlawfully, you may complain to your local data protection authority. In Switzerland, you may contact the Federal Data Protection and Information Commissioner.

To exercise your rights, contact us at info@saymoney.app.

12. CONTROLS FOR DO‑NOT‑TRACK FEATURES

Most browsers and some mobile operating systems include a Do‑Not‑Track (“DNT”) feature. As no uniform DNT standard has been finalized, we do not currently respond to DNT signals. If a standard is adopted, we will update this notice accordingly.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In short: If you are a resident of a U.S. state with a comprehensive privacy law (e.g., California, Colorado, Connecticut, Virginia, Texas, Utah, and others), you may have specific rights regarding your personal information.

Categories of personal information we may collect:

Category	Examples	Collected
A. Identifiers	Email address, display name, device/online identifiers, IP address	YES
B. Personal information (customer records)	Name, contact and financial information you record	YES
C. Protected classifications	Age, gender, etc.	NO
D. Commercial information	Transactions and financial details you record in the App	YES
E. Biometric information	Fingerprints, voiceprints	NO
F. Internet/network activity	App usage and interactions	YES
G. Geolocation data	Precise location	NO (approximate region only, from device locale)
H. Audio/visual	Voice recordings (transient, deleted after processing; not stored)	NO (not retained)
I. Professional/employment	—	NO
J. Education	—	NO
K. Inferences/profiles	—	NO
L. Sensitive personal information	Financial data (as used solely to provide the Service)	Limited

Your rights (subject to applicable law) include the right to know, access, correct, delete, and obtain a copy of your personal data; to opt out of targeted advertising, sale, or profiling; and to non‑discrimination for exercising your rights. We do not sell your personal information. Sharing your advertising identifier for targeted advertising may be considered “sharing” under some U.S. state laws; you can opt out via your device settings or a consent prompt, or by contacting us.

How to exercise your rights. Contact us at info@saymoney.app or use the in‑App controls. We will verify your identity before acting on your request. If we decline, you may appeal by emailing us at the same address.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes. We will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by a revised “Last updated” date. For material changes, we may notify you in‑App or by other means.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email us at info@saymoney.app, or by post at:

SayMoney

Ain Chock, Casablanca, Morocco

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You may review, update, or delete your personal information at any time:

In the App: edit your profile and transactions, and use Settings → Delete my data to erase your account data.
Or by contacting us at info@saymoney.app.

We will act on your request in accordance with applicable law.