Privacy Policy

Scope and contact

The service provider and data controller for Javger Finance is Ugur Bassarac. This policy applies to the Javger Finance app and services at javgerfinance.com. Send privacy requests to support@javgerfinance.com. We do not connect to your bank account or request bank login credentials or your full payment card number.

Information processed and purposes

Account and profile: your name, email address, account identifier, optional profile photo and session information are processed for registration, sign-in, account security and profile management.

Collection methods: we receive information when you enter registration or profile details, create financial records, select a photo, send an AI request with permission or contact support. Purchase-verification information comes through Apple; limited connection and error records are generated automatically during service operation.

Financial records: account names and balances, income and expense transactions, categories, dates, notes, budgets, goals, debts, receivables and recurring transaction details are used for record keeping, synchronisation, calculations, reports and reminders.

Purchases and usage: Apple transaction and product identifiers, subscription status, credit grants and usage records, and daily Assistant usage counts are kept to verify entitlements, manage balances and prevent duplicate grants and abuse. Apple processes your payment details in its own systems and does not send us full card details.

Technical records: limited diagnostics such as IP addresses, request times, connection details and service errors may be processed for reliability and security. Some records may be linked to an account identifier; do not assume all diagnostics are anonymous.

Support: emails, descriptions and optional attachments you send us are processed to resolve your request. Do not send passwords, app PINs, verification codes or unnecessary sensitive information.

Subscription recovery: a support draft prepared on your device for review may include your current Javger account email and ID, app version, check time and results, limited error codes and available verified Apple product/transaction information. You can review the text before sharing; after agreeing to share it, you can copy it or open it in your email app. Preparing a draft does not automatically send an email or transfer a subscription or credits. It does not include your password, verification code, full card number or another account’s identity information.

Data on your device and in the cloud

Your account information and saved financial records are stored and synchronised against your account using Supabase infrastructure.

Profile photo: adding a photo is optional. Uploaded photos are stored in the cloud and can be accessed by someone who has their link; this is not a private document vault requiring sign-in. The link does not grant access to your financial records. Do not upload sensitive documents as your profile photo. You can change or remove it under Profile → My Account.

The current app stores new receipt photos and unsaved scan drafts in account-specific areas on your device; it does not upload them to a new cloud receipt archive. Transaction details you approve for saving are synchronised to the cloud as financial records. Receipts uploaded by older versions may remain associated with your account and are included in account deletion. New local receipt and draft areas are excluded from device backups; deleting the app may cause these files to be lost. Do not assume local receipts or drafts will be available on a new device.

The current Assistant does not create a persistent chat history; messages in the open conversation are used in app memory. This does not mean that AI requests stay on the device or are never retained by the provider. That processing is explained below.

Exports: PDF and CSV files are generated on your device. If you share a file, the app or service selected in the iOS share sheet processes it under its own terms. Deleting your account does not automatically remove copies saved outside Javger.

AI, explicit permission and control

Assistant and Receipt Scan each present a separate disclosure and permission request before the first transfer. No data is sent to AI for the selected feature without your permission. You can revoke permission through the data-sharing/information control on the relevant screen; this stops future submissions but does not undo processing already performed.

When you use Assistant, your question, relevant messages from the open conversation and the financial context needed for the answer are sent through Javger’s Supabase infrastructure to Anthropic (Claude). Context may include account names and balances, transaction notes, income and expense data, budgets, goals and debts. To answer your question, Assistant may query relevant transaction or category records in your account and send the results to the same provider.

When you use Receipt Scan, the receipt or invoice image you select is sent to Anthropic. Depending on the document, it may contain merchant/customer names, addresses, phone numbers, tax or identity numbers, an IBAN, visible final card digits, document numbers, dates, items and amounts. Information present in the image may be transferred; conceal anything unnecessary before sending it. Extracted results can be inaccurate; you review them before creating a transaction record.

Even though Javger does not maintain a persistent chat archive, provider retention terms apply. Anthropic’s published standard API policy generally deletes inputs and outputs within 30 days; exceptions such as safety, legal or different contractual requirements can result in longer retention. We do not promise zero retention. See Anthropic’s retention explanation.

Service providers and transfers

Supabase provides authentication, database, profile/legacy-file hosting and server functions; Anthropic processes AI requests you permit; Brevo delivers account emails; and Apple provides app distribution, payments and subscription management. Support emails are processed through email infrastructure.

The website is served through Cloudflare. An IP address and basic connection/browser information may be processed by this infrastructure for delivery and security. The current site does not request fonts from Google Fonts. Interactive product examples use demonstration data and do not read real financial records from your Javger account. We do not sell app data or share it for third-party advertising tracking.

Providers may process data on infrastructure outside your country. Processing and transfers support service delivery, security, applicable legal obligations and the permissions you give for relevant features. Contact us about requests and rights applicable in your country.

Security and device lock

We use encrypted connections in transit and account access controls. The app PIN is a separate six-digit local lock, not your account password. The PIN itself is not sent to the server; derived verification data is held in the device’s Keychain. The PIN is not a financial-record encryption key, and this feature does not mean that records are end-to-end encrypted.

iOS performs device-owner verification using Face ID, Touch ID or the device passcode; the app does not receive biometric templates. If you forget your PIN, you can use the app’s device-owner authentication option. No system can guarantee absolute security.

Camera and photos: using the camera requires iOS permission; profile and scan features use images you select through the system picker. Selecting an image and permitting its transfer to AI are separate actions.

Widgets and notifications: balance and income/expense summaries are shared locally between the app and its own widget extension. Widgets you add may display this information on the Home Screen or Lock Screen. Permitted local reminders may include amounts, categories or names entered in debts and receivables. Manage visibility in iOS notification preview and widget settings; the app lock does not guarantee that all these system surfaces are hidden.

Retention and account deletion

Account and financial records are kept with your account to provide the service. You can request deletion through Profile → My Account → Delete Account. The account, related financial records and owned cloud files are deleted; after success is confirmed on the device, local receipts, drafts and settings belonging to that account are cleaned up.

Purchase-verification/duplicate-grant prevention records, failed grant attempts, limited usage/security records and a one-way digest of the email address used to prevent repeated starter-credit grants may be retained as needed for security, disputes or legal obligations. The digest is not the plain-text email address, but it enables matching and should not be treated as fully anonymous data. These are not a chat archive. Retention needs and rights requests are assessed separately.

Files you exported elsewhere, copies on other devices, providers’ own records and legacy local files whose owner cannot be established may not be deleted automatically at the same time. See the Data Deletion Policy for details and how to request help with an inaccessible account. Deleting an account does not cancel an Apple subscription.

Your rights and updates

Where applicable law provides for them, you may request access, correction, deletion, restriction or objection to processing, and data portability. We may need to verify your identity appropriately to protect the account; we will not ask for your password or one-time code. Your right to contact the competent data protection authority remains unaffected. Material changes are reflected on this page and, where required, also notified in the app.