Duitara — Privacy Policy

Duitara is built by Nelenga on a simple principle: your financial records are yours. This policy explains what the app does — and deliberately does not do — with your information.

Data storage

Your transactions, wallets, categories, budgets, savings goals, and debts are stored locally on your device, in a database that is encrypted on disk. Using Duitara does not require an account, and if you never sign in, your financial data never leaves your device.

Optional account

Creating an account is optional and only needed for features that require a server. If you sign in, we store your email address and an account identifier. Nothing else about you is required.

Optional features that use the network

• Partner sync. If you enable sync, the records you choose to share are transmitted to our servers so paired devices stay up to date. Sync is off by default and can be disabled at any time.

• AI receipt scan. When you scan a receipt, the photo is sent to a third-party AI provider acting on our behalf, which reads the amount, date, merchant, and line items and returns them as text.

  We do not store the photo. It is not saved to our servers, not written to any storage bucket, and not kept after the request that processed it — only the extracted text fields come back to your device. This is enforced by how the feature is built: the image travels inside the request itself, so no stored copy exists that could be forgotten or leaked. We never use your photos to train models.

  The AI provider may change over time as we improve accuracy and cost — at the time of writing we use the gpt-4.1-nano model. We only engage providers whose terms limit use of the image to returning the extracted fields and prohibit training on it; providers may hold it briefly for abuse monitoring under their own policies. If you never use receipt scan, no photo ever leaves your device, and the camera permission is requested only at the moment you use this feature.

• Subscriptions. See “Subscription data” below.

Where your data is processed

Our servers are hosted on Supabase infrastructure in Singapore (ap-southeast-1). If you use any of the optional network features above, data related to those features is transferred to and processed there.

Subscription data

Duitara Pro subscriptions are managed through RevenueCat, which handles purchase validation and subscription lifecycle on our behalf. RevenueCat receives your account identifier and the purchase details reported by the app store (product, purchase and renewal dates, subscription status). It does not receive your financial records.

Payment itself is handled entirely by Google Play or the App Store. We never see or store your card, bank, or e-wallet details.

Advertising

The free version of Duitara shows ads served by Google AdMob. AdMob may collect device identifiers as described in Google’s privacy policy. Upgrading to Duitara Pro removes ads entirely.

What we never do

We do not sell your data. We do not read your transactions for marketing or advertising targeting. We do not request permissions unrelated to the app’s features.

Retention & deletion

• Receipt photos: never stored — see “AI receipt scan” above. There is nothing to delete because nothing is kept.
• Local data: uninstalling the app removes everything stored on your device.
• Server data: if you created an account, the app has a Delete account action that permanently erases your server-side data. Your local data and any exports you made stay with you — we cannot reach them.
• Data tied to optional features is kept only while your account exists, except where we are required to retain records longer by law.

Your rights

You may request access to, correction of, or deletion of the personal data we hold about you, and you may withdraw consent for optional features at any time by turning them off. Most of this is available directly in the app; for anything else, write to us.

Children

Duitara is not directed at children under 13, and we do not knowingly collect personal data from them.

Changes & contact

Material changes to this policy will be reflected in the “last updated” date above and noted in release notes. Questions or requests: support@nelenga.com