Privacy Policy

Vyaya (“we”, “our”, or “us”) is a personal finance tracking application. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

Information you provide:

• Name and email address (for account creation)
• Financial data including transactions, wallets, budgets, and debts
• Profile photo (optional)

Information collected automatically:

• App usage data for improving user experience
• Device information (model, OS version)
• Biometric authentication status (stored locally, never transmitted)
• Notification preferences (stored locally)

We request camera access solely for scanning receipts to auto-fill transaction details. Receipt images are processed by Vyaya’s AI providers (OpenAI, Google) and are not retained by Vyaya or its providers after processing.

Before any receipt data is sent to our AI providers, the app performs on-device text recognition (OCR). Sensitive information including phone numbers, UPI IDs, bank account numbers, IFSC codes, email addresses, GST numbers, and transaction reference numbers are automatically stripped from the text. Only sanitized, non-sensitive transaction details (amount, merchant name, date) are sent to the AI provider.

• To provide and maintain the app's features
• To store your financial data securely via Supabase
• To process receipt images and advisor chat messages via AI for transaction parsing and financial guidance
• To send daily reminder notifications (optional, can be disabled)

• Your financial data is stored securely on Supabase servers with Row Level Security (RLS) — only you can access your data
• We never sell your personal data to third parties

If you enable biometric lock, authentication is handled entirely by your device’s secure enclave. No biometric data is collected, stored, or transmitted by the app.

Our app integrates with:

• Supabase — database and authentication (supabase.com/privacy)
• OpenAI / Google — AI provider services for receipt scanning and financial advisor chat. Receipt images and chat messages are transmitted to these providers for processing and are not retained after processing.

You can at any time:

• Access and export your data from the app
• Delete your account and all associated data
• Disable notifications from app settings
• Remove your profile photo

Upon account deletion, all your data is permanently removed from our servers within 30 days. Locally stored data (preferences) is cleared immediately.

Vyaya is not intended for users under 13 years of age.

We may update this policy. We will notify you of changes by updating the date at the top of this policy.

For privacy questions, contact us at:

support.vyaya@gmail.com