Wallet Talk Privacy Policy
In short: Wallet Talk has no accounts and doesn't know who you are. Your entries are stored on your iPhone and in your own iCloud, which we can't see. To understand what you type or say, and to read receipts and bank loan schedules you scan, the app can send that one piece of content to our server, which passes it to an AI model and stores nothing. You can turn this off in Settings → Smart parsing, and everything then runs on your iPhone.
Where your data is stored
- Your transactions, accounts, categories, debts and loans, plans, formulas, profile photo, receipt photos and payment photos stay on your iPhone and, with iCloud sync on (the default), in your private iCloud database, which only your Apple ID can access. We can't.
- A few settings (main currency, spending limit, look) sync through iCloud key-value storage.
- Turn sync off in Settings → iCloud.
- Family account (optional): if you create a family account and invite people, the entries in that shared account are shared with them through Apple's iCloud sharing. Your personal accounts stay private.
Smart parsing
Smart parsing is on by default. Free users get a daily limit of smart entries (5 a day) and one receipt, one bank schedule and one long story a day; Wallet Talk Premium has no limit. When you're online and use it, the app sends over an encrypted connection (HTTPS) to our server (Cloudflare Workers):
- Phrases and questions: the text you typed or dictated, the names of your categories and accounts (so the right ones can be picked), your main currency, the app language, today's date and your time zone. Nothing else: no name, no email, no past entries, no balances.
- Receipts: when you take or pick a photo of a receipt, its text is first recognized on your iPhone. Then a downscaled copy of the photo and the recognized text are sent, so the total, the shop, the date and the lines can be read.
- Bank loan schedules: when you scan or pick the pages of a repayment schedule from your bank, their text is first recognized on your iPhone. Then images of those pages and the recognized text are sent, so the payment table can be read. These are financial documents: they can show the lender, the loan amount, the rate and the payments.
- Armenian voice input: Apple has no Armenian speech recognition, so when the app language is Armenian the recording of that one phrase is sent to our server, which passes it to OpenAI's transcription service and returns the text. With smart parsing off, Armenian voice input is not available and nothing is sent.
How it's handled:
- Phrases, questions, receipts and schedules are read by Anthropic's Claude model, which returns the result. Anthropic processes them under its commercial terms: it does not train models on them and may keep them for a limited time for abuse prevention before deleting them. See https://www.anthropic.com/legal/commercial-terms and https://privacy.anthropic.com
- Armenian recordings are transcribed by OpenAI under its API data policy (https://openai.com/policies/api-data-usage-policies); OpenAI does not use API data to train its models. The app deletes its copy of the recording right after.
- Our server does not log or store the content you send: no phrases, photos, pages, text or recordings. It logs only technical details such as timing, counts, cost and language.
- If you save the entry, a receipt photo stays only on your iPhone and in your own iCloud.
- Offline, on any error, or with the switch off, phrases are understood on your iPhone and receipts and schedules are read on your iPhone only. Nothing is sent.
Protecting the server
- Install ID: the app sends a random install ID (not the device identifier and not the advertising identifier), kept in the iPhone's Keychain. The server keeps only daily request counts under a hash of that ID, deleted after two days.
- App Attest: to prove requests come from the real app, the app uses Apple's App Attest. Once per install, your iPhone creates a key that Apple vouches for; the server keeps that key's public half and a counter, which identify this install of the app, not you. Requests are signed with it.
- Premium check: with Premium, the app also sends the subscription as Apple signed it (product, expiry and the subscription's transaction number; no name, email or payment details), so the server can check it. The server keeps only daily usage counts under a hash of the transaction number, deleted after two days.
Microphone and speech
- The microphone is used only while you turn on voice input.
- Speech is recognized by Apple's Speech framework, on your iPhone when the language supports it; otherwise Apple may process the audio under its privacy policy (https://www.apple.com/legal/privacy/). Smart parsing then gets only the resulting text.
- Armenian is the exception described above.
Camera and photos
The camera is used only when you scan a receipt or a document, or take a photo. Photos stay inside the app on your iPhone and in your own iCloud, except for the receipt and schedule images sent for reading as described above.
Apple Pay auto-capture
If you set up the Shortcuts automation, iOS hands the amount and merchant of each Apple Pay payment to Wallet Talk on your iPhone. Nothing about it is sent to us.
Purchases
Subscriptions are handled by Apple. We never see your name, Apple ID or payment details.
Notifications
Reminders for payments, debts and budgets are local notifications created on your iPhone.
Exchange rates and prices
- Exchange rates are downloaded once a day from open.er-api.com. The request contains none of your data.
- Prices for gold, silver and crypto come from our server. The request carries only the install ID described above.
Deleting your data
- Delete an entry, an account or anything else in the app, and it's deleted on all your devices.
- With sync off, deleting the app deletes all its data. Export it first if you want a copy: Settings → Export to CSV.
- With sync on, also delete the iCloud copy: iPhone Settings → your name → iCloud → Manage Account Storage → Wallet Talk → Delete Data.
- We hold nothing to delete: the counters above expire after two days on their own.
Children
The app is not directed at children and collects no data from them.
Changes
If this policy changes, the new version will appear on this page with a new date.
Contact
Questions about privacy: support@spentence.app