Privacy Policy

Last updated: October 13, 2026

This policy explains how Actualio handles information when you use our iPhone application and website. Actualio is operated by Ihar Lunhis. Contact: [email protected].

Information we process

• Account information: your account identifier, email address, and name or profile information supplied by your chosen sign-in provider. Apple may provide a private relay email address. With Google sign-in, we request basic identity information to authenticate you; we do not request access to your Gmail messages, contacts or Google Drive files.
• Expense information: the projects, budgets, categories, amounts, dates, merchant names, notes and currency preference you enter.
• Receipts: images you choose to scan or attach to an expense. Receipts may contain personal information, so avoid uploading information you do not need to track.
• Device permissions: camera or selected-photo access for receipts, and microphone and speech-recognition access when you choose voice entry. You can manage permissions in iOS Settings. Speech recognition uses Apple's speech services; on-device processing is requested where supported. Otherwise, recognition may involve Apple's servers.
• Operational information: authentication events, request metadata such as IP addresses, and service logs generated by the infrastructure used to run and protect the service.

How we use information

We use information to create and authenticate accounts, store and display your records, calculate spending summaries, send account confirmation and password recovery emails, respond to support requests, and maintain security and service reliability. Actualio does not connect to your bank account.

Service providers and sharing

Supabase provides authentication, database and receipt storage. Resend delivers transactional account emails. Apple and Google handle sign-in when you choose those options; Apple also provides system speech-recognition services. Cloudflare hosts this website and manages its domain and DNS. These providers process the information needed to provide their services under their own applicable terms and privacy policies.

We do not sell your personal information or use your expense records for advertising. We may disclose information when required by applicable law or when reasonably necessary to protect users, prevent abuse or defend legal rights.

Receipt and voice processing in the current version

The current development version has not connected an external AI expense-processing provider. Receipt images attached to saved expenses are stored with your account, and voice entry uses Apple's speech-recognition framework. If a future version sends receipt content, transcripts or recordings to an additional processing provider, we will update this policy and explain that processing before enabling it.

Retention and deletion

We retain account information and saved records while you maintain your account and as needed to provide the service. You can edit or delete records in the app and request account deletion through Settings → Delete account. You may also request deletion by emailing us. We may need to verify that you own the account before acting on a request.

Deletion from active systems may not immediately remove copies in backups or operational logs. Limited information may be retained where necessary for security, legal obligations or resolving disputes. We do not promise a fixed backup deletion period in this policy.

Your choices and rights

You can manage permissions in iOS Settings, choose your sign-in method, correct records and contact us to request access, a copy, correction or deletion of your personal information. Depending on your location, you may have additional rights, including objection, restriction, portability, withdrawal of consent or a complaint to your local data protection authority.

Depending on the purpose and applicable law, processing is based on providing the service you request, your consent for optional features, legitimate interests in security and support, or legal obligations.

Security and international processing

We use authenticated access and account-specific access controls to protect stored records. No online service can guarantee complete security. Our service providers may process information outside your country, subject to their applicable contractual and legal safeguards.

This website

This website does not include advertising trackers, analytics scripts or contact forms and does not set application cookies. Cloudflare may process technical request data to deliver and secure the pages. If you contact us by email, we receive the information you include in your message.

Children and policy updates

Actualio is not directed to children under 13. If you believe a child has provided personal information, please contact us. We will update the date on this page when the policy changes and provide additional notice of material changes where appropriate.

Contact

Ihar Lunhis · [email protected]