# OnTrack – BudgetApp

## Privacy Policy

**Effective Date: 08.04.2025**

—

## 1. Introduction

This privacy policy explains how our budget tracking app („the App“) handles your personal information. We are committed to protecting your privacy and ensuring transparency about our data practices.

—

## 2. Data Collection and Storage

### Local Data Storage

The App operates primarily on your device and stores most data locally. All budget-related information remains exclusively on your device and is not transmitted to external servers.

### Types of Data Processed Locally

– Budget categories and their names

– Budget amounts and spending limits

– Expense records including amounts, dates, and optional notes

– Category colors and display preferences

– App settings and configurations

### AI Receipt Analysis Feature

When you use the optional AI-powered receipt capture feature („KI-Auto-Erfassung“), the following data processing occurs:

**Data Transmitted:**

– Receipt photographs are temporarily processed through our secure server proxy

– Images are compressed and resized (max. 768px width) before transmission to reduce data usage

– The image is sent to OpenAI’s GPT-4o-mini vision API for analysis

– Your category names are included in the analysis request to help categorize expenses

– Optional user notes describing specific items on shared receipts

**Data Extracted:**

– Transaction amount

– Currency (if visible)

– Suggested category name

– Merchant/store name (if visible)

– For shared receipts: calculated user share based on described items

**Important Notes:**

– Receipt images are NOT permanently stored on our servers or OpenAI’s servers

– Images are processed in real-time and immediately discarded after analysis

– No personal identifying information (name, address, payment details) is extracted or stored

– The AI analysis is performed by OpenAI’s API; see OpenAI’s privacy policy at https://openai.com/policies/privacy-policy

– You must explicitly enable this feature in Settings before it can be used

– This feature is entirely optional; the app works fully without it

**Usage Limits:**

– Free tier: 3 scans per day, 2 per minute, 30 total scans

– Premium tier: 10 scans per day, 4 per minute, unlimited total scans

– Limits are enforced both locally on your device and on our server to protect against abuse

—

## 3. Data Usage

The data processed by the App is used solely to:

– Track your personal expenses and budget progress

– Display spending analytics and budget summaries

– Maintain your custom categories and preferences

– Provide budget notifications and alerts

– Analyze receipt images to automatically extract expense information (when enabled)

—

## 4. Data Sharing

We do not share, sell, rent, or transfer any of your personal data to third parties, with the following exception:

**AI Receipt Analysis:**

When you use the receipt capture feature, compressed receipt images are sent to:

1. Our secure server proxy for rate limiting and security

2. OpenAI’s API for image analysis

Both services process images in real-time and do not permanently store them. OpenAI processes the data according to their API terms and privacy policy. No other third-party services receive your data.

—

## 5. Data Security

### Local Data

Your budget data is stored locally on your device using standard iOS/Android secure storage mechanisms. The security of your data depends on your device’s security settings, including screen locks and device encryption.

### Transmitted Data (Receipt Analysis)

– All data transmission uses HTTPS encryption

– Images are compressed before transmission to minimize data exposure

– Our server proxy implements rate limiting and security controls

– Images are not logged or stored on our servers

– OpenAI processes images according to their enterprise security standards

—

## 6. Data Retention and Deletion

### Local Data

– Data persists on your device until you manually delete it or uninstall the App

– You can delete individual expenses, categories, or reset all data within the App

– Uninstalling the App will permanently remove all associated data from your device

### Receipt Analysis Data

– Receipt images are processed in real-time and immediately discarded

– No receipt images are stored on our servers or OpenAI’s servers

– Analysis results (amount, category, note) are only stored locally on your device

– Usage quota counters are stored locally and reset according to the time windows (per minute, per day)

—

## 7. Children’s Privacy

The App does not knowingly collect personal information from children under 13. Since budget data remains local to the device and receipt images are only processed transiently, no persistent data collection from children occurs.

—

## 8. Third-Party Services

### Without Receipt Analysis Feature

The App does not integrate with or transmit data to any third-party services, analytics platforms, or advertising networks.

### With Receipt Analysis Feature (Optional)

When enabled, the App uses:

– **OpenAI GPT-4o-mini API**: For analyzing receipt images and extracting transaction details

  – Privacy Policy: https://openai.com/policies/privacy-policy

  – API Terms: https://openai.com/policies/api-terms

  – Data Processing: Images processed in real-time, not stored permanently

  – Location: OpenAI servers (may be located outside your country)

Our secure server proxy acts as an intermediary to:

– Enforce usage limits and prevent abuse

– Protect our OpenAI API credentials

– Provide a consistent service experience

The proxy does not log or store receipt images.

—

## 9. Your Rights and Controls

### Data Control

Since budget data is stored locally on your device, you have complete control over your information. You can access, modify, or delete any data at any time through the App’s interface or by uninstalling the App.

### Receipt Analysis Control

– You can enable or disable the receipt analysis feature at any time in Settings

– When disabled, no images are transmitted to any servers

– You can view your current usage quota in Settings

– Disabling the feature does not delete previously created expenses (which are stored locally)

### Data Portability

All your budget data remains in standard formats on your device. You can export or backup your data through your device’s standard backup mechanisms (iCloud, Google Backup).

—

## 10. International Data Transfers

When using the receipt analysis feature, your receipt images may be transmitted to:

– Our server proxy (location: varies by deployment)

– OpenAI’s servers (location: primarily United States)

These transfers are necessary to provide the AI analysis service. Images are processed in real-time and not permanently stored.

—

## 11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected in the App Store listing and within the App itself. Significant changes will be communicated through the App with an update notice.

—

## 12. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal basis for processing data is:

– **Legitimate Interest**: For local budget tracking functionality

– **Consent**: For optional AI receipt analysis feature (you must explicitly enable it)

– **Contract Performance**: To provide the services you request

You have the right to withdraw consent for the receipt analysis feature at any time by disabling it in Settings.

—

## 13. Contact Information

If you have questions about this privacy policy or wish to exercise your data rights, please contact us at:

**Email:** app@jaa.cool

For data protection inquiries, please include „Privacy Request“ in the subject line.

—

## 14. Summary of Key Points

✓ **Budget data**: Stored only on your device, never transmitted to servers  

✓ **Receipt analysis**: Optional feature, must be explicitly enabled  

✓ **Image processing**: Real-time only, images not permanently stored  

✓ **Third parties**: Only OpenAI for receipt analysis (when enabled)  

✓ **Your control**: Full control over all data, can disable features anytime  

✓ **Security**: HTTPS encryption for all transmissions, secure local storage  

✓ **No tracking**: No analytics, no advertising, no user profiling  

—

*Last updated: 06.11.2025*