Privacy Policy

TalkTab (“TalkTab”, “we”, “us”), formerly called FinTrack, is a personal expense-tracking app operated by Swatantra Dhakal, based in Nepal. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It covers the TalkTab apps for iOS and Android, their home-screen widgets, and the server they sync with.

Questions, or want to use a privacy right? Email support@swatantra.dev.

2. Who is responsible for your data

The data controller is Swatantra Dhakal (Nepal), reachable at support@swatantra.dev. Users in the EU/EEA and UK: see Section 11.

3. What we collect and why

We collect what the app needs to work, and nothing from data brokers.

3.1 Account and identity

3.2 The financial records you create (the heart of the app)

• Records: amount, title, notes, category, date and time, an “important” star, how the record was made (by hand, voice, photo, or typed note), whether a photo was a receipt or an item, and which wallet it belongs to.
• Your setup: categories (names, colours, icons), recurring monthly charges, your opening balance and its date, spending limits and a savings target, and wallets (names and colours), where available.

These are stored on your phone and on our server so they sync across your devices and survive a lost phone (if you’re signed in with Google, Apple, or email).

3.3 Photos

Photos you take in TalkTab, pick from your library, or share to TalkTab from another app are uploaded to our server and kept with the records made from them, so you can see them again (for example under Receipts & bills). A photo is stored as you send it. A photo picked from your library may include metadata your camera added, such as the time or location where it was taken.

3.4 Voice recordings

A voice note is uploaded to our server, passed to Google’s Gemini API to be read (Section 4), and not kept on our server after that. A copy stays on your phone only, so you can play it back from the record it made. That copy is deleted when you delete the last record made from it, after 90 days, or when you sign out.

3.5 Typed notes and Ask questions

• Typed notes (such as “groceries 42 yesterday”) are sent to Gemini to be read. The records it files keep what was read from the note.
• Ask (questions about your own spending): we send Gemini the question, the names of your categories, and today’s date, and never your records or amounts. Gemini returns a plan (for example “spending, last month, Groceries”), and your phone works out the answer from the records on it. We do not store the text of your question. We keep the plan and a count of questions, to apply your monthly allowance and to answer a repeated request without asking Gemini again.

3.6 Captures waiting to be sent

If a voice note, photo, or typed note can’t be read right away (you’re offline, say), TalkTab keeps it on your phone and sends it when it can. You can delete it from Home at any time. It is removed when you sign out.

3.7 Purchases (TalkTab Pro)

If you subscribe, we receive and store your subscription’s status and identifiers (product, store transaction IDs, period dates) to unlock Pro and keep it in sync across your devices. Payments are handled by Apple or Google, through RevenueCat. We never see your card or payment details.

3.8 How the app is used (product analytics)

We use PostHog to understand how TalkTab is used, so we can improve it. It receives events such as which onboarding pages were seen and what was picked on them, which features were used, paywall views and purchase outcomes, and app opens. Each event carries a pseudonymous account number, your device model, operating system, and app version. Analytics events never include amounts, record titles or notes, photos, audio, or the text of Ask questions.

3.9 Crash reports

We use Sentry to receive crash and error reports, which include your device model, operating system, app version, and a technical description of what went wrong, so we can fix bugs.

3.10 What stays on your phone

Some things are never sent to us: your “Hide amounts” setting, your reminder time, the figures shown on your home-screen widget, and your voice clips (Section 3.4). Your daily reminder and Sunday recap are scheduled on your phone. We don’t send push notifications from our server.

3.11 Permissions

TalkTab asks for the microphone, camera, photo library, and notifications only when you first use the feature that needs them. You can turn any of them off in your phone’s settings and keep using the rest of the app. Adding records by hand needs no permission.

No ads, no tracking. TalkTab contains no advertising SDKs and does not track you across other companies’ apps or websites, so it shows no App Tracking Transparency prompt.

4. How the AI features work

When you add a record by voice, photo, or typed note, or ask a question in Ask, TalkTab sends that one item, with a fixed instruction, to Google’s Gemini API. Gemini returns structured details (an amount, a title, a category, a date), or for Ask a plan, which you review before anything is saved.

• Items are sent over an encrypted connection, inside the request itself. They are not uploaded to a file store at Google.
• We use the Gemini API under Google’s terms for paid services, under which Google does not use your prompts or responses to improve its products. See Google’s Gemini API Additional Terms.
• We do not use your content to train any model.
• AI reading can be wrong. Check every result before saving (see our Terms of Service).

You can avoid AI entirely by adding records by hand.

5. Legal bases (GDPR / UK GDPR)

Where the GDPR applies, we rely on:

• Contract: to provide the app, sync your records, and run your subscription.
• Consent: for the microphone, camera, photos, and notifications, and for sending an item to AI, which happens only when you choose to use an AI feature. You can withdraw consent by turning a permission off or not using the feature.
• Legitimate interests: to keep the service secure, prevent abuse, apply monthly allowances, fix crashes, and understand how the app is used so we can improve it.
• Legal obligation: to keep purchase records where the law requires.

6. Who we share data with

We share only what each service provider needs to do its job for us, under contract. We do not sell or rent personal data.

We may also disclose data if the law requires it, to protect our rights or users’ safety, or as part of a sale or transfer of the app, in which case we’ll tell you first.

7. International transfers

We are based in Nepal, our server and database are in Singapore, and our providers may process data in the United States, the EU, or elsewhere. Where we transfer the personal data of people in the EU/EEA or UK, we rely on appropriate safeguards such as the providers’ Standard Contractual Clauses.

8. How long we keep data

• Your account, records, photos, and setup: while your account is active.
• Records you delete (one at a time, or with Erase all records): they disappear from your phone and your other devices straight away. On our server they’re kept marked as deleted, which is how your other devices learn to remove them. Photos attached to them stay in storage. Email us and we will erase them permanently (Section 9).
• Voice audio: not kept on our server after it’s read. Kept on your phone for up to 90 days (Section 3.4).
• Ask question text: not stored.
• One-time passcodes: minutes, and only as a hash.
• Signed-in devices: until you sign that device out, or delete your account.
• Purchase records: as long as needed for your subscription and for accounting and legal duties.
• Analytics and crash reports: under PostHog’s and Sentry’s retention periods.

9. Deleting your data and your account

In the app: Settings → tap your profile → Account.

• Erase all records removes every record from your phone and your other devices.
• Delete account, straight away:
  • signs out every device;
  • revokes Sign in with Apple, if you used it;
  • erases your email address;
  • deletes your opening balance, spending limits, savings target, and wallet names;
  • deactivates the account, so it can’t be signed into again.
  Your records, photos, categories, and recurring charges are then no longer linked to any way of signing in, and nobody can reach them through the app, but they remain stored on our server until you ask us to erase them.

To have everything permanently erased, including records and photos, email support@swatantra.dev from the email on your account. If you used a device account (no email), tell us that, and we’ll work with you to confirm the account is yours. We complete erasure within 30 days, apart from copies in encrypted backups, which are overwritten on a rolling basis, and anything the law requires us to keep.

Signing out or deleting your account also removes TalkTab’s data from that phone. Deleting the app removes it from the phone, but does not delete your account or cancel a subscription.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you, and get a copy;
• correct it;
• have it erased;
• receive it in a portable format;
• object to or restrict some processing;
• withdraw consent at any time;
• complain to your data protection authority.

Email support@swatantra.dev to use any of these. We reply within the time the law sets (usually 30 days).

California (CCPA/CPRA)

We do not sell or share your personal information for cross-context behavioural advertising. California residents have the right to know, delete, and correct their personal information, and not to be discriminated against for using these rights. Send requests to support@swatantra.dev.

11. EU/EEA and UK users

We have not yet appointed a representative in the EU/EEA or UK under Article 27 of the GDPR. Until we do, contact us directly: Swatantra Dhakal — support@swatantra.dev. You can also complain to your local supervisory authority.

12. Children

TalkTab is for adults (18 and over, as our Terms of Service require) and is not directed at children. We do not knowingly collect children’s data. If you believe a child has given us data, contact us and we will delete it.

13. How we protect your data

• All traffic between the app and our server is encrypted with TLS (HTTPS).
• Sign-in tokens are kept in your phone’s secure storage (Keychain on iOS, Keystore on Android). On our server, sign-in keys and one-time passcodes are stored only as hashes.
• Every record and photo request is checked against the account that owns it.
• Access to production systems is restricted and authenticated.

No system is perfectly secure, but we take reasonable measures to protect your information, and we will tell you and the authorities about a breach where the law requires.

14. Changes to this policy

If we change this policy, we’ll update the “Last updated” date above, and for important changes we’ll tell you in the app before they take effect.

15. Contact

Swatantra Dhakal
Email: support@swatantra.dev
Website: https://fin.swatantra.dev