About Savio
Savio provides accounting, budgets, savings goals, reminders and analysis. This policy explains data processing, providers and your choices. Contact appmanservice@outlook.com about processing or your rights.
Data you provide
Records include income and expenses, amounts, categories, dates/times, payment methods and notes. Budgets and goals include planned income, fixed expenses, category budgets, goal names, amounts, dates and progress. Mood, weather and sleep are optional entries. Support requests include the contact information and messages you provide.
Local and cloud processing
Records, budgets, goals and related settings are stored on your device by default. Guardian’s local rule-based analysis does not require uploading your books. Cloud AI, purchases and restoring purchases involve the transfers described below. Local storage does not mean all service data stays on your device.
Voice input
Your operating system’s speech service transcribes your voice. Depending on your device, language, settings and availability, audio may be processed locally or sent to Apple or another system speech provider. Savio does not intentionally create permanent raw audio files for later storage; system providers process audio under their own policies. Microphone/speech permissions and cloud AI sharing consent are separate choices.
Cloud AI and shared data
Cloudflare receives cloud voice-parsing and financial-chat requests and forwards the required content to OpenAI.
Voice parsing sends the transcript, language, currency and date to identify amounts and categories. Text may contain spoken transactions, payment methods and notes.
To answer cloud AI questions, Savio sends your question, limited recent conversation and a summary of this month’s spending, income, budgets and savings goals through Cloudflare to OpenAI. Relevant transaction details, including payment methods and notes, are included when your question requests them. Basic budget lookups can be answered on your device without sending data.
If you separately enable daily context sharing, mood, weather, sleep and related Guardian analysis may also be sent. This option is off by default.
Data is used for requested features, not advertising. We do not sell or rent personal data. Avoid unnecessary ID numbers, full payment card details, passwords or other sensitive information in notes, goal names, speech or chat.
Consent and controls
Before your first voice input and first financial chat submission that requires cloud processing, the App separately explains recipients, data, purpose and retention and asks you to choose explicitly. Declining leaves manual entry and other available features that do not require cloud AI usable. Voice consent does not authorize financial chat.
Manage or withdraw each consent and daily context sharing in Settings → AI & data privacy. Disabling stops new transfers and attempts to cancel active requests. Data already delivered cannot be recalled and remains subject to applicable retention rules. Withdrawal does not delete your local books or cancel subscriptions.
Consent scope, disclosure version and timestamp are recorded locally. Restoring an accounting backup does not import AI consent from another device. Material expansion of recipients, data or purposes requires renewed permission before that expanded sharing occurs.
Providers and their roles
These providers process the data needed for the features you use. Listing a provider does not mean it receives all your records or endorses Savio.
OpenAI · AI parsing and answers
Receives the cloud voice-parsing or financial-chat content described above to identify record details and generate answers. Daily context is included only with your separate permission.
Cloudflare · Request routing and verification
Receives and forwards cloud AI requests. It processes and stores necessary installation/subscription identifiers, store transaction proofs, trial start time, usage counts, request times and security information to verify eligibility, enforce quotas and prevent abuse.
RevenueCat · Subscription entitlements
Helps verify purchases, restore purchases and manage subscription entitlements. Necessary data may include App User IDs, store transactions, products, entitlement status, expiry and device/app information. Subscription verification does not send your accounting entries or AI conversations to RevenueCat.
Apple · Payments and system services
Processes App Store payments, subscriptions and refunds, and may provide speech recognition depending on system settings. Savio does not receive full payment card details.
International processing
Cloudflare, OpenAI, RevenueCat and Apple may process data outside your country or region under service contracts, safeguards and applicable law.
Short-lived caching and operational metrics
To reduce unnecessary AI requests, the App and Cloudflare may temporarily reuse results in memory for up to 5 minutes; cached results may be lost sooner. Request IDs, hashes and statuses are retained briefly for retry protection (normally up to 5 minutes). Model, token counts, latency and estimated API cost are logged for operations, without questions, replies or accounting content in those usage metrics. Basic budget calculations stay on device and do not use cloud AI quota.
Retention and deletion
Cloudflare AI authentication sessions normally last up to about 15 minutes. Ordinary daily usage counters are retained for about 3 days and monthly counters for about 45 days; some upgrade-compatibility counters last about 45 days. Trial and repeat-trial prevention records currently have no automatic expiry and are not automatically removed when you delete the App. Contact us with processing or deletion requests. Operational/security logs follow service settings and processing purposes; counter expiry is not a deletion deadline for all logs.
OpenAI API data is not used for model training by default unless sharing is separately enabled. Default Chat Completions abuse-monitoring logs may retain request/response content for up to 30 days, subject to legal/policy exceptions or approved retention settings. No training does not mean no retention. Details: https://developers.openai.com/api/docs/guides/your-data
You can edit/delete records and use backup, restore and CSV/PDF export. Saving or sharing files transfers them to your chosen location or recipients. Deleting in-app data does not delete external backups, exports or recipients’ copies. Restoring purchases restores entitlements, not local books.
Requesting deletion
Email appmanservice@outlook.com with the scope of your request. We may ask for the minimum information needed to verify that the data belongs to you. Do not send passwords, full payment card numbers or a complete accounting backup.
Local records and backups you saved must be managed on your device or at their storage location; we cannot remotely erase those copies. For cloud records we manage and provider data, we will verify the scope, handle eligible deletion and explain the outcome, any data retained, the reason and applicable retention period.
Deleting data does not cancel an App Store subscription or erase transaction records Apple must retain by law. Manage your Apple subscriptions separately to stop renewal. Provider security, legal retention and backup-erasure schedules may differ from deletion within the App.
Security and other choices
Cloud AI transfers use HTTPS. Protect your device and exported files; no storage or transfer method is absolutely secure. The App does not automatically retrieve bank/card transactions or use advertising tracking identifiers or third-party advertising SDKs.
The App is not directed to children under 13; higher local age requirements apply. Material policy changes will be communicated appropriately. Continued use does not replace required consent to data sharing.