Your data stays with you

1 Introduction

DiPo ("we", "our", or "us") is a personal finance application designed with a privacy-first philosophy. This Privacy Policy explains how we handle—and don't handle—your information when you use the DiPo app.

The short version: your ledger stays on your device. We cannot see your salary, transactions or balances. A few features you choose to use — the web dashboard, shared savings, receipt scanning and support — send only what they need, as described in section 3.

2 What Stays on Your Device

These are stored on your phone and are not sent to us, except through a feature in section 3 that you choose to use:

• Your salary, income, or compensation details
• Your transaction history or spending records
• Your savings goals, financial targets, or budgets
• Your debt information or loan records
• Any financial account numbers or banking credentials
• Bank messages you share or paste into DiPo — they are read on your phone

You can use DiPo without an account. If you sign in with Apple or Google, you get a DiPo ID, which the features in section 3 use.

3 Features That Use Our Servers

These features only work through a server. Each sends only what it needs, and only when you use it:

• Account — if you sign in with Apple or Google: your DiPo ID, your Apple or Google account identifier, the name and email address they share with us, and your plan (Free or Royal).
• Web dashboard (Sync) — only when you tap Sync: your balances, card names, the last six months of transactions, debts and bills, so you can view them at dipo.info. The copy is locked with a one-time code shown in the app, expires after 24 hours and is then deleted; you can remove it sooner from the app.
• Target Bersama (shared goals) — the goal's name and target, members' display names and each contribution amount, visible to the goal's members. A goal kept in a Rekening Bersama is visible to that account's members, and money set aside for it from the account appears in both.
• Rekening Bersama (joint account) — the account's name, its monthly budget and balance, members' display names, and each entry: who recorded it, the amount, category, note and date. Visible only to the account's members; when someone records an entry, the other members get a notification with the name, note and amount. Deleted when the owner deletes the account.
• Support — your messages, any screenshots you attach and the email address you enter, kept until the ticket or your account is deleted.
• Subscriptions and AI credits — purchases are confirmed through RevenueCat using your account identifier; the number of AI credits used is kept per account.
• Investment prices — the ticker or coin names of your holdings, to fetch current prices. Never amounts.
• Security checks — requests to our servers carry a sign-in token and, where supported, Apple App Attest proof that they come from the real app. Neither contains financial data.

Receipt scanning and Ask DiPo are covered in section 6, notifications in section 7. Uninstalling DiPo clears your phone but not our servers: to remove the data above, delete your account from Profile.

4 Backup & Restore

DiPo offers an optional backup feature for users who want to transfer data to a new device. If you choose to create a backup:

• A backup file is saved on your device. DiPo also keeps a few automatic daily copies there, which travel with your phone's iCloud or computer backup
• The backup file is not encrypted — keep it in a safe location
• We do not receive or have access to your backup files

Because the backup file is unencrypted, we recommend storing it in a trusted location such as your personal iCloud Drive or a private folder.

5 Face ID & Device Authentication

DiPo supports Face ID and device passcode as an optional app lock. Biometric data is handled entirely by Apple's iOS frameworks (LocalAuthentication). DiPo never receives, stores, or processes your biometric data—we only receive a boolean yes/no result from iOS after authentication.

6 AI Features

DiPo's AI features fall into two categories, and they handle your data differently:

• On-device insights — Smart Insights such as spending trends and top categories are computed entirely on your device. This data never leaves your phone.
• Cloud AI features — Receipt Scan sends the receipt image to our secure processing service, which forwards it to our AI provider (Anthropic) to extract the transaction details. The Ask DiPo chatbot sends the text you type together with a short summary of your finances, so it can answer questions about them: income and spending totals for this month and the largest categories, a few recent transactions, your Smart Budget plan, recurring bills, debts and credit card balances, savings goals, the total others owe you (without their names), what a usual month costs, the interests you have picked and the choices you have marked as deliberate. The Debt analysis (Royal) sends, only when you tap it, the figures on the Debts screen: what a usual month brings in and costs by category, fixed bills, each debt and credit card with its instalments, the amounts and dates of money others owe you (without their names), cash on hand, your Smart Budget plan and savings goals.

For Cloud AI features, only what is listed above is sent, and only when you scan, send a message or ask for an analysis — never your full transaction history. We do not store it; our AI provider processes it under API terms that exclude using it to train its models.

7 Push Notifications

DiPo can send notifications such as payday reminders, budget alerts, and announcements from our team. To deliver them, your device's push token is registered with our notification service (Firebase Cloud Messaging) along with your display name and subscription tier.

This token identifies your device for delivery purposes only and contains no financial data. Notifications require your permission, which you can grant or revoke at any time in your iOS Settings.

8 Analytics & Crash Reporting

We may collect limited, anonymized, non-financial analytics to improve app performance, such as:

• App crash reports (no financial data included)
• Aggregate feature usage statistics (e.g., "how many users open the budget screen")
• Device type and iOS version for compatibility purposes

This data cannot be linked to your identity or your financial information. Screen-usage collection is off by default and is controlled centrally by us, not from a setting in the app; it records only screen names from a fixed list, never amounts, merchants, cards, categories or balances. To object to it or ask what has been recorded, contact us from Support inside DiPo.

9 Third-Party Services

DiPo does not integrate with third-party advertising networks, data brokers, or financial data aggregators. We do not sell, rent, or share your data with any third party for commercial purposes.

To run the features above we use Google Firebase (sign-in, database, notifications, crash reports, app checks), Cloudflare (our processing service), Anthropic (AI), RevenueCat (subscriptions) and Resend (support email). They process data on our behalf only. The App Store download and purchase are handled by Apple under Apple's Privacy Policy.

10 Children's Privacy

DiPo is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@dipo.info.

11 Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you via an in-app notice before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of DiPo after changes are posted constitutes acceptance of the updated policy.

12 Your Rights

Most of your data is only on your phone, and you control it there. For what is on our servers (section 3):

• Access: Open DiPo and view all your data in-app
• Export: Use the backup feature to export your data
• Delete: Profile → Delete Account removes your account and the server data in section 3. Uninstalling DiPo removes what is on the phone

For any other privacy-related questions or requests, contact us at support@dipo.info.