Privacy Policy

Information We Collect

Waltro is designed with privacy first. Here is exactly what the app stores and where:

• Financial data — transactions, categories, budgets, savings goals, and income sources are stored locally on your device only.
• Receipt photos — stored in your device's local Documents directory. Never uploaded anywhere.
• Account credentials — if you sign in (email, Apple or Google), your email address, your name if provided, and an account ID are stored securely with Supabase Auth for authentication only. No financial data is linked to this account.
• Ask Waltro conversations — stored locally on your device only and excluded from iCloud backups. See section 05 for what is sent when you ask a question.
• Voice — when you speak a transaction or a question, your speech is converted to text by Apple's speech recognition (on your device when available). Waltro does not store the audio.
• Preferences — currency, theme, and settings are stored locally via iOS AppStorage.
• Widget data — a lightweight summary (budget total, amount spent) is written to a shared App Group container on your device so the iOS widget can display it. This never leaves your device.

What We Never Collect

• We do not collect analytics, usage statistics, or behavioral data.
• We do not access your bank accounts, bank credentials, or payment instruments.
• We do not use advertising SDKs or third-party tracking libraries.
• We do not sell any data to any third party — ever.
• We do not access your contacts or location. The microphone is used only while you speak a transaction or a question, and the camera only when you choose to attach a receipt photo.

iCloud Sync

If you enable iCloud Sync in Settings, your financial data is synced to your personal iCloud account via Apple's CloudKit. This data is encrypted by Apple and stored in your private iCloud account, accessible only with your Apple Account (and end-to-end encrypted if you turn on Advanced Data Protection). Waltro has no access to your iCloud data whatsoever.

Authentication

Waltro offers optional sign-in with email and password, Sign in with Apple, or Google, using Supabase Auth. If you create an account:

• Your email address, your name if provided, and an account ID are stored securely for authentication purposes only.
• Passwords are hashed and never stored in plain text.
• You may use the app without signing in (Continue as Guest). Your data stays on your device either way; Ask Waltro's cloud AI and iCloud Sync need an internet connection.

Ask Waltro and Cloud AI

Ask Waltro answers questions about your own spending and income. With your permission, it uses OpenAI, a third-party AI service, to understand your question and write the answer. The first time you ask a question, Waltro asks whether to allow this — nothing is sent before you agree.

What is sent to OpenAI

• The text of your question. If you ask by voice, only the text is sent — never audio.
• A few recent messages from the same conversation, so follow-up questions make sense.
• The names of your categories.
• Only the figures needed for that answer — for example a monthly total, amounts per category, or matching transactions with their amount, date and note.

What is never sent

• Your full transaction history.
• Your name, email address, account ID, or any device identifier.
• Receipt photos.

Every figure is calculated on your iPhone; OpenAI only writes the wording of the reply. Under OpenAI's API data policy, data sent through its API is not used to train its models and is retained for up to 30 days for abuse monitoring, then deleted.

Notifications

Waltro sends local push notifications for budget alerts (e.g., when you reach 80% or 100% of a category budget). These notifications are generated entirely on your device and do not require internet connectivity or any external server. You can disable notifications at any time in iOS Settings → Notifications → Waltro.

In-App Purchases

Waltro offers premium features through Apple's App Store. All payment processing is handled exclusively by Apple. Waltro does not receive, process, or store your payment card details at any point.

We use RevenueCat to verify your subscription status. RevenueCat receives your purchase information and an account ID; it never receives your financial data.

Children's Privacy

Waltro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the app and provided personal information, please contact us and we will take appropriate action.

Data Deletion

Your financial data lives on your device. You can delete it at any time:

• Inside the app: Settings → Data Management → Delete All Data
• Or simply delete Waltro from your device — this permanently removes all locally stored data.
• Ask Waltro conversation: Ask Waltro → ••• → Clear conversation. Anything already sent to OpenAI is deleted by OpenAI within 30 days.
• Sign-in account: email info@ktm-studio.com from the address on your account and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through an in-app notice or by updating the "Last updated" date above. Continued use of Waltro after changes constitutes acceptance of the updated policy.