Privacy Policy — MindSpend

1. Overview

MindSpend (the “App”) is developed and operated by Thitipong Nonnoi, a sole proprietor, operating as Jovey.co (“we”, “us”). This policy explains how the App handles your information.

MindSpend is a local-first personal finance app — your financial data is stored on your own device (via SwiftData). There are no user accounts, no registration, and we run no server that holds your data. Only a few features connect to external services to function; all of them are listed in Section 3.

2. Information Stored On Your Device

The following stays on your device only; you enter and control all of it:

• Expense and income records — amounts, merchants, categories, notes, and planned/impulse tags
• Wallets, credit cards, and debts — accounts, cards, and balances you add yourself
• Investments and net worth — the securities/funds/crypto you hold and their quantities
• Income and recurring items — settings you configure for budgets and forward planning
• Settings and preferences — categories, theme, icon packs, and options (in on-device UserDefaults/App Group)

3. Data That Leaves Your Device, and Third-Party Services

For transparency, here is every case in which data leaves your device — only when you use the related feature. All of it is sent over an encrypted connection (HTTPS), is not linked to any account or your identity, and is never used for advertising or tracking:

• AI receipt reading (optional — requires in-app consent): When you enable it and tap agree, the App reads the text from a receipt photo on-device with Apple Vision, then sends only that text (store name, items, prices) to Typhoon AI (by SCB 10X, via api.opentyphoon.ai) to structure it — no images are sent. Under Typhoon's terms, the provider may retain the submitted text and use it to improve and train its AI models, so avoid scanning receipts that contain sensitive information. The App asks for your permission before the first send, and you can turn the feature off at any time in Settings → AI Receipt Scanning (on-device parsing is used when it's off).
• AI statement-column mapping (CSV) (optional — requires in-app consent): When you import a statement file and choose AI assistance, the App sends only the column headers and up to 3 sample rows (date, amount, merchant) to Typhoon AI (SCB 10X) to map the columns — this uses the same consent as AI receipt reading. If you decline, an on-device mapper is used instead.
• Stock/fund/crypto prices: When you add an investment, the App sends only the asset’s symbol/identifier to Yahoo Finance, CoinGecko, and Thailand’s SEC to fetch the latest price — never the amount, quantity, or any identity data.
• Merchant/brand logos: To display merchant icons, the App may request a logo image by the merchant’s name or domain — no financial data is attached.

Typhoon AI (by SCB 10X) acts as our data processor. We send only the minimum needed, only after your explicit in-app consent, and we require the provider to process the data for this feature and protect it consistent with applicable law. However, under the provider's own terms the submitted text may be retained and used to improve/train its models — which is exactly why we obtain opt-in consent before every send and let you withdraw it at any time. The price-lookup services (Yahoo Finance, CoinGecko, SEC) are third parties with their own policies. We never sell your data or use it for advertising.

4. Camera and Photo Library Access

The App requests camera and photo access only to scan slips/receipts. Images are processed on-device with Apple Vision and then discarded — the App stores no photos and uploads no images.

5. Notifications · Widgets · Live Activity

Notification permission is used only for daily reminders and Story Cards. Data shown on Widgets and Live Activity lives in an on-device App Group and never leaves the device.

6. How We Use Your Information

On-device data is used only to make the App work as you intend: recording and displaying entries, computing budgets, net worth, and behavioral reflections, sending the notifications you enable, and running the features that require external connections described in Section 3. We do not use your data for advertising, marketing, or resale.

7. What We Do NOT Do

• No user accounts, no registration, no server of ours holding your data
• No analytics, no behavioral tracking, no IDFA, no third-party ad/attribution SDKs
• No advertisements
• We never sell your data or share it for marketing
• We never move, transfer, or withdraw your money — and this is not investment advice
• We do not store receipt/slip images (processed on-device, then discarded)

8. Data Security

All connections are encrypted with HTTPS (App Transport Security). Any sensitive credentials you might enter are stored only in the iOS Keychain on your device (accessible when the device is unlocked) — never transmitted or synced.

9. Data Retention and Deletion

Data stays on your device until you delete it — delete items in the App, or delete the App and all data is gone (there is no cross-device sync yet). The price-lookup services (Yahoo Finance, CoinGecko, SEC) use a request only to respond. Typhoon AI, however, may retain the submitted receipt text and use it to improve/train its models per its own terms (see opentyphoon.ai) — you control this by enabling/disabling AI Receipt Scanning in the App.

10. Your Rights (PDPA)

Because the data lives on your own device, you can access, edit, and delete all of it at any time inside the App. You can withdraw consent for receipt data by disabling AI Receipt Scanning. This design aligns with Thailand’s Personal Data Protection Act (PDPA). For any question or request about your rights, contact support@mindspend.app; we will respond within 30 days.

11. Children’s Privacy

MindSpend is not directed at children under 13, and we do not knowingly collect data from children (age rating 4+).

12. Changes to This Policy

If this policy changes (e.g., introducing cross-device sync), we will update this page with a new effective date and notify users through an app update.

13. Contact

For privacy questions, contact Thitipong Nonnoi (Jovey.co) at support@mindspend.app

14. Terms of Use

MindSpend is provided “as is” as a tool to record and reflect on personal spending behavior. It is not financial, investment, or banking advice, and the App does not move your money.

You are responsible for the accuracy of the data you record and for your own financial decisions. Trademarks, brand names, and other intellectual property belong to their respective owners. Use of the App is governed by the laws of Thailand.