Privacy Policy — MindSpend

1. Overview

MindSpend (the “App”) is developed and operated by Thitipong Nonnoi, a sole proprietor, operating as Jovey.co (“we”, “us”). This policy explains how the App handles your information.

MindSpend is a local-first personal finance app — your financial data is stored on your own device (via SwiftData). You can start locally without creating a MindSpend account. We run no central server holding your financial records. You may connect your Apple account and opt in to sync supported data through private iCloud. Only a few features connect to external services to function; all of them are listed in Section 3.

2. Information Stored On Your Device

The following is stored locally by default. If you enable iCloud, supported records may sync as described in Section 3:

• Expense and income records — amounts, merchants, categories, notes, and planned/impulse tags
• Wallets, credit cards, and debts — accounts, cards, and balances you add yourself
• Investments and net worth — the securities/funds/crypto you hold and their quantities
• Income and recurring items — settings you configure for budgets and forward planning
• Settings and preferences — categories, theme, icon packs, and options (in on-device UserDefaults/App Group)

3. Data That Leaves Your Device, and Third-Party Services

For transparency, these are the data paths used by the current features — only when you use the related feature. Service connections use HTTPS. Some features, such as iCloud, are associated with your Apple account. Sharing sends information to the service or recipient you choose:

• AI receipt reading (optional — requires in-app consent): When you enable it and tap agree, the App reads the text from a receipt photo on-device with Apple Vision, then sends only that text (store name, items, prices) to Typhoon AI (by SCB 10X, via api.opentyphoon.ai) to structure it — no images are sent. Under Typhoon's terms, the provider may retain the submitted text and use it to improve and train its AI models, so avoid scanning receipts that contain sensitive information. The App asks for your permission before the first send, and you can turn the feature off at any time in Settings → AI Receipt Scanning (on-device parsing is used when it's off).
• AI statement-column mapping (CSV) (optional — requires in-app consent): When you import a statement file and choose AI assistance, the App sends only the column headers and up to 3 sample rows (date, amount, merchant) to Typhoon AI (SCB 10X) to map the columns — this uses the same consent as AI receipt reading. If you decline, an on-device mapper is used instead.
• iCloud (optional): Off by default. When enabled, supported SwiftData records, including transactions, wallets, categories and holdings, sync through your private CloudKit database in your Apple account. This does not cover all app data: groups, shared bills, the Milestones journal, some preferences and chat history remain local. Changing the sync setting may take effect on the next launch.
• AI statement reading (separate consent): If selected, transaction lines such as dates, merchants and amounts are sent to Typhoon after the app attempts to mask card/account numbers, names, email addresses and phone numbers. This path sends no images. Redaction reduces identifiability but does not guarantee anonymity. Disable it in Settings → AI Statement Reading.
• Chat with Mind (separate consent): Your question, necessary conversation context and financial information prepared for the question, such as totals, ratios and relevant historical context, are sent to Typhoon to generate a reply. Avoid entering unnecessary sensitive information in your message. The app’s chat history stays local and can be deleted from chat history. Consent can be withdrawn in Settings.
• Groups, shared bills and sharing: Groups and bills are stored locally, without online group membership. Sharing opens the iOS share sheet for you to choose a service and recipient. A summary or bill link may contain names, amounts, merchants, items and PromptPay information if configured. Review it before sending. Marking a share received does not transfer money.
• Sati Plus purchases: Product lookup, purchase and restoration use Apple StoreKit/App Store. The app uses the resulting purchase entitlement to enable features. Manage subscriptions through your Apple account.
• Stock/fund/crypto prices: When you add an investment, the App sends only the asset’s symbol/identifier to Yahoo Finance, CoinGecko, and Thailand’s SEC to fetch the latest price — never the amount, quantity, or any identity data.
• Merchant/brand logos: To display merchant icons, the App may request a logo image by the merchant’s name or domain — no financial data is attached.

AI requests are sent only while consent for the relevant feature is valid. Consent covers subsequent sends until revoked or a disclosure update requires renewed consent. The provider may retain submitted text and use it to improve models under its own terms. Disabling AI stops future sends; it does not erase information already sent. External services have their own data policies.

4. Camera and Photo Library Access

The App requests camera and photo access only to scan slips/receipts. Images are processed on-device with Apple Vision and then discarded — the App stores no photos and uploads no images.

5. Notifications · Widgets · Live Activity

Notification permission is used only for daily reminders and Story Cards. Data shown on Widgets and Live Activity lives in an on-device App Group and never leaves the device.

6. How We Use Your Information

On-device data is used only to make the App work as you intend: recording and displaying entries, computing budgets, net worth, and behavioral reflections, sending the notifications you enable, and running the features that require external connections described in Section 3. We do not use your data for advertising, marketing, or resale.

7. What We Do NOT Do

• No MindSpend account is required for local use; we run no central server holding your financial records
• No analytics, no behavioral tracking, no IDFA, no third-party ad/attribution SDKs
• No advertisements
• We never sell your data or share it for marketing
• We never move, transfer, or withdraw your money — and this is not investment advice
• We do not store receipt/slip images (processed on-device, then discarded)

8. Data Security

Service connections use HTTPS. Sensitive values such as import-file passwords and PromptPay identifiers use iOS Keychain according to their purpose. A bill share you choose may include PromptPay information; review it before sending. Disabling sync or AI does not recall copies already sent to a destination.

9. Data Retention and Deletion

Manage entries and data reset inside the app. Uninstalling the app should not be treated as erasing every copy. If iCloud was enabled, data may remain in private iCloud, and information sent to recipients or external services is governed by those destinations. Groups, bills and the Milestones journal have local storage separate from synced records. History beyond the free browsing window is hidden, not deleted. Withdrawing AI consent stops new requests but does not recall text already sent.

10. Your Rights (PDPA)

Because the data lives on your own device, you can access, edit, and delete all of it at any time inside the App. You can withdraw consent for receipt data by disabling AI Receipt Scanning. This design aligns with Thailand’s Personal Data Protection Act (PDPA). For any question or request about your rights, contact support@mindspend.app; we will respond within 30 days.

11. Children’s Privacy

MindSpend is not directed at children under 13, and we do not knowingly collect data from children (age rating 4+).

12. Changes to This Policy

If this policy changes , we will update this page with a new effective date and notify users through an app update.

13. Contact

For privacy questions, contact Thitipong Nonnoi (Jovey.co) at support@mindspend.app

14. Terms of Use

MindSpend is provided “as is” as a tool to record and reflect on personal spending behavior. It is not financial, investment, or banking advice, and the App does not move your money.

You are responsible for the accuracy of the data you record and for your own financial decisions. Trademarks, brand names, and other intellectual property belong to their respective owners. Use of the App is governed by the laws of Thailand.