Privacy Policy — SSMoney

Overview

Your privacy is extremely important to us. SSMoney is designed as a privacy-first expense tracking application. Your personal expense data (expense entries, notes, categories) is stored exclusively on your device under your complete control. When you capture or import a receipt image or PDF statement, that file is transmitted to our secure backend solely for AI-assisted text extraction (OCR). The file is automatically and permanently deleted from our servers within 1 hour of upload — no exceptions. We do not retain, review, sell, or use your images or PDFs for any purpose other than immediate processing.

This Privacy Policy explains our data practices and your rights regarding your information.

Key Privacy Principles

1. Information We Collect

1.1 Information We DO NOT Collect or Retain

We DO NOT collect, retain, or transmit for non-processing purposes:

Your expense data and financial information never leave your device.

1.2 Temporary Processing Data (Images and PDFs)

When you use the receipt scanning or PDF import features:

• Your image or PDF is transmitted over an encrypted connection to our secure backend servers
• It is processed by our AI/OCR engine solely to extract transaction text (amounts, dates, merchant names)
• The file is automatically and permanently deleted from our servers within 1 hour of upload
• No human reviews your images or PDFs
• The extracted text results are returned to your device and processed locally
• We do not store, cache, analyze, or use your images or PDFs for any purpose beyond this immediate extraction

1.3 Anonymous Data We Collect

To improve app performance and user experience, we collect anonymous, non-personally identifiable data through Firebase services:

Analytics Data (Firebase Analytics)

• App usage statistics (screens viewed, features used)
• Session duration and frequency
• Device information (model, OS version, language)
• General location (country/region level only, not precise location)
• App performance metrics
• Anonymous user interactions

Crash and Performance Data (Firebase Crashlytics & Performance)

• Crash reports and stack traces
• App performance metrics (launch time, screen rendering)
• Device state at time of crash (memory usage, battery level)
• Anonymous installation identifiers

Configuration Data (Firebase Remote Config)

• App configuration requests
• Feature flag usage

Important: All Firebase data is anonymized and cannot be used to identify you personally.

2. How Your Data is Stored

2.1 Local Storage — Expense Data

All expense data created in SSMoney is stored exclusively on your device using:

• iOS secure local storage (SwiftData framework)
• Device file system for photos retained locally at your choice
• iOS Keychain for sensitive settings (if applicable)

2.2 Backend Processing — Images and PDFs

When you scan a receipt or import a PDF:

• The file is uploaded via TLS-encrypted connection to our secure backend servers
• Processing occurs in an isolated environment
• The file is automatically and permanently deleted within 1 hour of upload — this deletion is automated and irreversible
• Only the extracted text (transaction data) is returned to your device
• We maintain no copies, backups, or logs of the file content after deletion

2.3 No Persistent Cloud Storage of Personal Files

We do not provide cloud storage for your expense images or PDFs. No image or PDF file you submit for processing is retained beyond the 1-hour processing window.

2.4 Your Responsibility for Local Data

You are responsible for:

• Backing up your device using iOS backup features (iCloud Backup or iTunes/Finder backup)
• Protecting your device with a passcode, Face ID, or Touch ID
• Managing your data — deletion of the App will delete all associated local data

2.5 Data Transmission

The App requires internet connectivity for:

• Uploading receipt images and PDFs to our backend for OCR processing (files deleted within 1 hour)
• Sending anonymous analytics and crash reports to Firebase
• Receiving push notifications (if enabled)
• Fetching remote configuration updates
• Downloading app updates from the App Store

3. Backend Image and PDF Processing

3.1 How Processing Works

SSMoney transmits your receipt images and PDF statements to our secure backend servers to perform AI-assisted text extraction. This approach enables more accurate OCR results for a wider range of receipt formats.

Our backend processing commitments:

• 1-Hour Auto-Delete: Every uploaded image or PDF is subject to an automated deletion policy. Files are permanently deleted within 1 hour of upload — regardless of whether processing is complete or fails
• No Human Review: No employee, contractor, or third party will view, access, or review your images or PDFs
• No Secondary Use: Your images and PDFs are processed solely to extract transaction data for your use. They are never used for AI/ML model training, analytics, advertising, profiling, or any other purpose
• No Third-Party Sharing: Your images and PDFs are never shared with, sold to, or disclosed to any third party
• Encrypted Transmission: All uploads are protected by TLS encryption in transit
• Isolated Processing: Each file is processed in an isolated environment to prevent cross-contamination

3.2 What Is Extracted and Returned

The only data returned from backend processing is the extracted text from your receipt or PDF — specifically amounts, dates, merchant names, and line items you choose to use. This extracted data is processed locally on your device and stored only in your local expense records.

3.3 Processing Failures

If backend processing fails (e.g., due to network error or unrecognizable file format):

• The file is still deleted within the 1-hour window
• No partial data is retained
• You will be notified to retry or enter expense details manually

3.4 Speech Recognition

SSMoney integrates Apple's Speech Recognition framework for voice-based expense input:

• Speech recognition is processed by Apple's servers (not our servers)
• Voice audio is sent to Apple for processing when you use voice input features
• Apple's privacy policy governs this processing
• You can disable voice input features in the App settings
• We do not store or have access to your voice recordings or transcriptions

4. Photos and Receipts

4.1 Camera and Microphone Access

SSMoney requires camera access to capture expense receipts and microphone access to record audio notes. These permissions are requested in accordance with iOS requirements.

How we use these permissions:

• Camera: To capture photos of receipts for backend OCR processing
• Microphone: To record audio notes associated with expenses
• Photo Library: To allow you to import existing photos or PDF files

4.2 Storage and Retention

• Expense entries and locally saved photos are stored on your device
• Images submitted for OCR processing are transmitted to our backend and permanently deleted within 1 hour
• You can delete individual local photos or recordings at any time through the App
• Deleting an expense entry will delete associated local data
• Uninstalling the App will delete all local data

4.3 No Permanent External Storage of Your Files

We never permanently store, retain beyond 1 hour, share, or sell your receipt images or PDF files. The only external transmission of image or PDF data is the temporary upload for OCR processing described in Section 3.

5. Data You Control

5.1 Full Ownership

You retain complete ownership of all data you create in SSMoney, including:

• Expense entries and transactions
• Locally saved photos and images
• Audio recordings
• Categories, tags, and notes
• Any other content generated through the App

5.2 Data Access

Your financial data is accessible only through the App on your device. We do not access, store, or review your personal expense records.

5.3 Data Deletion

You can delete your data at any time by:

• Deleting individual entries within the App
• Clearing all data through the App's settings (if available)
• Uninstalling the App (this will delete all local App data)

Note regarding processed files: Images and PDFs submitted for backend processing are automatically deleted within 1 hour. You do not need to take any action to ensure deletion.

6. Third-Party Services

6.1 Firebase (Google)

We use Firebase services provided by Google LLC to improve app quality and user experience:

Services Used:

• Firebase Analytics — Anonymous usage analytics
• Firebase Crashlytics — Crash reporting and diagnostics
• Firebase Performance Monitoring — App performance metrics
• Firebase Remote Config — Feature flag and configuration management
• Firebase Cloud Messaging — Push notifications (if enabled)

Data Shared with Firebase:

• Anonymous device identifiers
• Device model, OS version, and app version
• Usage patterns and interaction events
• Crash logs and performance data
• General geographic region (country/region level)

6.2 Apple Services

• App Store: Apple's privacy practices govern the App Store download and purchase process.
• In-App Purchases: All purchases are processed by Apple. We do not collect or store your payment information.
• Speech Recognition: When you use voice input features, your voice audio is processed by Apple's Speech Recognition service.

6.3 Our Backend Processing Service

We operate our own backend infrastructure for image and PDF OCR processing. This is a first-party service operated by SSMoney. Your images and PDFs are not shared with any third-party AI or cloud OCR vendors. All processing occurs on infrastructure under our direct control and subject to the deletion policy in Section 3.

6.4 Advertising (Google AdMob)

SSMoney integrates Google AdMob to display advertisements within the App. AdMob may collect and use certain data to serve relevant ads, including:

• Anonymous device identifiers (Advertising ID)
• General location data (country/region level)
• App usage context for ad placement

Important:AdMob does NOT have access to your personal expense data, financial records, receipt images, or any locally stored content. We do not sell your personal data to advertisers. You can limit ad personalization by disabling "Allow Apps to Request to Track" in iOS Settings > Privacy > Tracking.

7. Push Notifications

SSMoney may send push notifications to remind you to log expenses or provide helpful tips.

7.1 Firebase Cloud Messaging

Push notifications are delivered via Firebase Cloud Messaging (FCM). When you enable notifications:

• A unique FCM token is generated for your device
• This token is used only to deliver notifications to your device
• You can disable notifications in iOS Settings > SSMoney > Notifications

7.2 Notification Content

Notifications do not contain your personal expense data. They are generic reminders and tips.

8. Children's Privacy

SSMoney does not knowingly collect personal information from children. While we collect anonymous analytics data, this data cannot be linked to any individual, including children. The App can be used by individuals of all ages. Parents and guardians should supervise children's use of the App and review this Privacy Policy.

9. Data Security

9.1 Backend Security

Our backend image processing infrastructure implements:

• TLS/HTTPS encryption for all data in transit
• Isolated processing environments per file
• Automated deletion enforced at the infrastructure level (not dependent on application logic)
• Access controls limiting who can access processing infrastructure
• No persistent storage of uploaded files beyond the processing queue
• Regular security audits and penetration testing

9.2 Device Security

Since expense records are stored on your device, the security of your financial data depends on your device's security measures. We strongly recommend:

• Using a strong device passcode
• Enabling Face ID or Touch ID
• Keeping your iOS version up to date
• Not jailbreaking your device

9.3 App Security

We implement industry-standard security practices including:

• Secure coding practices
• Regular security updates
• Use of iOS secure storage APIs
• Encryption where applicable

9.4 Lost or Stolen Devices

If your device is lost or stolen, your local expense data may be at risk. We recommend:

• Enabling Find My iPhone
• Using iCloud or iTunes/Finder backup regularly
• Remotely wiping your device if it is lost or stolen
• Reporting the loss to local authorities

10. Data Retention

10.1 Images and PDFs — 1-Hour Maximum Retention

Images and PDF files submitted for OCR processing are permanently deleted within 1 hour of upload. This is an automated, irreversible process. We retain no copies, thumbnails, metadata, or logs of the file content after deletion.

10.2 Local Expense Data

Your expense records are retained on your device indefinitely until you choose to delete them. We do not have access to your local expense data.

10.3 Automatic Local Deletion

Your local data is automatically deleted when:

• You delete it through the App
• You uninstall the App
• You restore your device to factory settings

10.4 Analytics Data Retention

Anonymous analytics data collected by Firebase is retained according to Google's data retention policies:

• Analytics data: Up to 14 months by default
• Crash reports: Up to 90 days
• Performance data: Up to 90 days

You can request deletion of analytics data associated with your app installation by contacting us.

11. Your Privacy Rights

11.1 Right to Access

You have complete access to all your local expense data through the App at any time. Images and PDFs submitted for processing are deleted within 1 hour and are not accessible thereafter.

11.2 Right to Deletion

You can delete any or all of your local data at any time through the App or by uninstalling the App. Backend processing files are automatically deleted within 1 hour — no action required.

11.3 Right to Data Portability

Since your expense data is stored locally, you can access and export it through iOS device backups or the App's export features (if available).

11.4 Right to Information

You have the right to understand how your data is processed, which is detailed in this Privacy Policy.

11.5 Right to Opt-Out of Analytics

You can:

• Enable "Limit Ad Tracking" in iOS Settings (iOS 13 and earlier)
• Disable "Allow Apps to Request to Track" in iOS Settings > Privacy (iOS 14+)
• Contact us to request deletion of analytics data associated with your installation

11.6 Right to Disable Features

You can disable:

• Receipt scanning and PDF import (to avoid any backend transmission)
• Push notifications in iOS Settings
• Voice/speech input within the App settings
• Camera and microphone access in iOS Settings > Privacy

12. International Data Transfers

12.1 Backend Processing

Images and PDFs submitted for processing are transmitted to our backend servers. These servers may be located in jurisdictions outside Vietnam, including countries with different data protection standards. We ensure appropriate safeguards are in place, including encryption in transit and strict 1-hour deletion policies.

12.2 Firebase (Analytics)

Firebase services are operated by Google, which may transfer and process anonymous analytics data on servers located outside of Vietnam, including in the United States. Only anonymous, non-personally identifiable data is transmitted to Firebase.

Google implements appropriate safeguards including:

• Standard Contractual Clauses (SCCs)
• Encryption in transit and at rest
• Security certifications (ISO 27001, SOC 2/3)

13. International Users

SSMoney is designed for users in Vietnam but can be used globally. Your personal expense records remain on your local device regardless of your location. Images and PDFs submitted for backend OCR processing are transmitted to our servers and deleted within 1 hour.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the App or legal requirements. We will notify you of any material changes by:

• Posting the new Privacy Policy within the App
• Updating the "Last Updated" date at the top of this policy
• Providing notice through the App Store update notes

Your continued use of the App after changes become effective constitutes your acceptance of the revised Privacy Policy.

15. Legal Compliance

15.1 GDPR Compliance (European Users)

We respect the principles of the General Data Protection Regulation (GDPR):

• Data Minimization: Images and PDFs are processed only to extract transaction data; all other personal data collection is limited to anonymous analytics
• Purpose Limitation: Images and PDFs are used solely for OCR extraction; analytics data is used only for performance monitoring and improvement
• Storage Limitation: Images and PDFs are deleted within 1 hour; analytics data is retained for limited periods
• Security: Data is encrypted in transit; backend files are stored in isolated environments with automated deletion
• Transparency: This policy provides clear information about all processing activities
• Legal Basis: Backend OCR processing is based on your explicit consent via use of scanning features; analytics processing is based on legitimate interest in app improvement

15.2 CCPA Compliance (California Users)

Under the California Consumer Privacy Act (CCPA), we confirm:

• We do not sell your personal information
• Images and PDFs are temporarily processed and permanently deleted within 1 hour; they are not retained as "personal information"
• We collect only anonymous analytics data, not personal information as defined by CCPA
• You can request deletion of analytics data associated with your app installation
• You have the right to opt-out of scanning features to avoid any backend transmission

15.3 Vietnamese Law Compliance

SSMoney complies with Vietnamese data protection laws and regulations, including Decree 13/2023/ND-CP on Personal Data Protection. Images and PDFs are processed transiently for OCR purposes and permanently deleted within 1 hour. Personal expense data remains on users' devices and is not retained by our systems.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: support@silverai.com
App:SSMoney: Snap & Smart Money

We will respond to your inquiry within 30 days.

17. Your Choices and Control

17.1 What You Can Control

• Receipt/PDF Scanning: Disable to avoid any backend image transmission
• Notifications: Disable in iOS Settings > SSMoney > Notifications
• Camera Access: Disable in iOS Settings > Privacy > Camera
• Microphone Access: Disable in iOS Settings > Privacy > Microphone
• Speech Recognition: Disable in iOS Settings > Privacy > Speech Recognition
• Ad Tracking: Disable in iOS Settings > Privacy > Tracking

17.2 What We Collect Automatically

Firebase Analytics, Crashlytics, and Performance Monitoring collect anonymous data automatically when you use the App. This helps us fix crashes and bugs, improve performance, understand which features are most useful, and make the App better for all users.

This data is anonymous and cannot identify you personally.

18. Agreement

By downloading, installing, or using SSMoney, you acknowledge that you have read, understood, and agree to this Privacy Policy, including our use of backend servers for temporary OCR processing of receipt images and PDFs (with automatic 1-hour deletion), Firebase services for anonymous analytics, and Apple Speech Recognition for voice features.

If you do not agree with this Privacy Policy, please do not use the App.

Summary

SSMoney — Your expenses stay private, your data stays yours.