Privacy Policy

Overview

Pibo Money is a local-first personal finance application for iPhone. This policy describes how the app handles data, when it leaves your device, and how you can control those flows. The short version: your financial records stay on your device by default, AI features require explicit consent, and we collect no analytics or telemetry.

Data We Do Not Collect

Pibo Money does not collect, transmit, or store the following on any server operated by Pibo AI:

• Your financial transactions, balances, or account details
• Budget limits, savings goals, or debt records
• Generated reports or exported files
• Usage analytics, session data, or behavioral telemetry
• Device identifiers, advertising IDs, or crash logs
• Location, contacts, or any other system data

On-Device Storage

All financial data is stored in an encrypted SQLite database on your iPhone, protected by iOS Data Protection (hardware-backed AES-256 encryption). The database is accessible only when your device is unlocked and the app is in use. Pibo AI does not operate any database servers that store your records.

The app uses Apple Keychain for authentication tokens and session credentials. These are scoped to your device and are deleted on sign-out.

AI Features (Opt-In Only)

Pibo Money includes an AI chat assistant and receipt scanner. These features are entirely opt-in. You can use all core budgeting, transaction tracking, and reporting features without enabling AI.

When you use AI features:

• When you use AI chat, the message you send is transmitted to an Azure-hosted OpenAI service together with the limited financial context needed to answer it: your account and category names, account balances, and a summary of recent spending or budget status. When you ask about specific records, the assistant may read relevant transactions to respond. Your complete transaction history is never sent in bulk, and your full local database is never uploaded.
• Receipt images are processed through Apple Vision framework on-device for OCR. Only the extracted text (not the image) is optionally sent for AI parsing, after sensitive details are redacted.
• AI responses are processed in memory and written to your local database only after your explicit approval.
• Azure OpenAI processes requests per Microsoft's data processing terms. The AI service is stateless — it stores no chat history and retains neither your message nor its financial context after responding, and requests are not used to train AI models.

You can disable AI features at any time in Settings → AI. Previously generated AI content remains in your local database and is not automatically deleted.

Backups

Pibo Money lets you create an encrypted backup file on demand. The backup is encrypted on your iPhone using a key derived from a passphrase you choose, before the file leaves the device. You then export it yourself — to Files, iCloud Drive, or another destination via the share sheet. The passphrase is never transmitted, and only it can decrypt the file. Pibo AI operates no backup servers and retains neither your backup files nor your passphrase.

Pibo Money does not automatically upload your data to any cloud service. If you choose to save an exported backup file to iCloud Drive or another location, that copy is handled by the storage provider you selected, subject to its own privacy policy.

Apple Sign-In

Authentication uses Sign in with Apple. Apple provides a user identifier and optional email relay, which are stored only on your device (in the iOS Keychain) to keep you signed in. Pibo AI does not operate authentication servers and does not transmit or store your Apple user identifier, name, or email on any external server.

App Attest

To protect the integrity of AI key provisioning, the app uses Apple App Attest. This verifies that requests originate from a genuine, unmodified version of Pibo Money. No personal data is transmitted during attestation — only a cryptographic proof of app integrity.

Children's Privacy

Pibo Money is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has used the app in a way that transmitted personal data, contact us at pibo_support@icloud.com.

Your Rights and Controls

• Delete all data: Delete the app from your iPhone. All on-device data is removed by iOS.
• Disable AI: Settings → AI → disable chat and receipt features.
• Export your data: Use the Reports section to generate PDF or CSV exports of your financial records.
• Cancel subscription: iPhone Settings → your name → Subscriptions → Pibo Money.

Contact

For privacy questions or data requests, contact: pibo_support@icloud.com

We will respond within 5 business days.

Changes to This Policy

Material changes will be announced via an in-app notice. The updated policy will be posted at this URL with a revised effective date. Continued use of the app after the effective date constitutes acceptance.