Privacy Policy

1. Information we collect

Account information: your name, email address and country, which you provide when you create an account. If you choose to add a profile picture, it is uploaded to our cloud storage and linked to your account.

Financial information you enter: income, expenses, budgets, bills and reminders, savings goals, categories and tags, and mortgage-readiness inputs such as household income, expenses, debts and savings. You choose what to enter — the App does not connect to your bank.

Information we never receive: some features are calculated entirely on your phone, and their data is never sent to us or stored on our servers. This includes your Tax Stash (the amounts you set aside, expense claims, notes and its audit history), the tax details you enter for take-home and provisional-tax estimates, your debt payoff and first-home/KiwiSaver inputs, and your Money assistant conversation history. It is held on your phone and, like the rest of your phone, is included in your device’s own iCloud or Google backup — but it never reaches us. See section 3.

Device and usage information: basic technical data needed to run the App reliably, such as app settings and, where you enable it, local notification preferences. App-lock and biometric settings are stored on your device only.

App analytics: to understand which features people actually use, we record which screens you open in the App, your plan (Free or Plus) and the time you opened them. These records are linked to your account. We do not attach any of your financial information to them — no amounts, merchants, notes, categories or individual transactions.

We do not intentionally collect government identifiers, and we ask that you do not enter full bank account numbers, card numbers or passwords into free-text fields.

2. How we use your information

We use your information to:

• provide the App and its features — dashboards, budgets, insights, reminders and estimates;
• keep your data in sync across your devices;
• secure your account and detect misuse;
• understand which features are used, so we can improve the App and retire features that are not useful;
• respond to your support requests; and
• comply with our legal obligations.

We do not sell your personal information, we do not use your financial data for advertising, and we do not track you across other apps or websites.

3. Where your information is stored

Your account and the financial information described above are stored using Supabase, our cloud infrastructure provider, in a data centre located in the Sydney region (Australia). Storing data offshore is permitted under the NZ Privacy Act; we require our provider to protect it to New Zealand standards. Your information is encrypted in transit (TLS) and at rest (AES-256).

The App is not end-to-end encrypted: because features such as search and calculations run on the server, our infrastructure can technically process your data to provide the service. We restrict access to it.

On-device data: the information listed in section 1 is held in the App's private storage on your phone. It is not uploaded to us, not part of the data we store in the cloud on your behalf, and not visible to us at any time. Like your other app data, it is included in your phone's own automatic backup (iCloud Backup on iPhone, or Google backup on Android) — that backup is yours, held in your Apple or Google account and encrypted by them; we never receive it or have access to it. It is also protected by your phone's encryption and screen lock, so keeping a passcode or biometric lock enabled is important.

Because we never hold a copy, we cannot recover this information for you — recovery depends entirely on your own backups. If your phone’s automatic backup is switched on, your on-device data can be restored along with the rest of your phone when you set up a new device (on iPhone this happens when you restore a new phone from iCloud, not on a plain re-install). If that backup is turned off, this information cannot be recovered by anyone. For a copy you fully control — one that isn’t tied to your phone’s backup, and that you can optionally lock with a passphrase — use Settings → Backup & restore.

Backups you create: Settings → Backup & restore produces a single file containing the on-device information described above. You can optionally protect it with a passphrase that you choose; if you do, the file is encrypted and only someone with the passphrase can open it. The file is never sent to us. You decide where it goes — for example iCloud Drive, Google Drive, or your own computer — and once you save it there it is held in your account with that provider and covered by their terms and privacy policy, not ours. We cannot read a passphrase-protected file, recover it, or open it for you if you forget the passphrase, and we cannot delete any backup file once you have saved it. Treat it like any other financial record: keep it somewhere you trust, and delete copies you no longer need.

If more than one person signs in on the same phone, each account's on-device data is kept separate, and one account cannot see another's.

4. Sharing your information

We share personal information only where necessary:

• with service providers who host and operate the App on our behalf (such as Supabase), under confidentiality obligations;
• with our AI provider (Anthropic), but only if you turn on the AI mode of the Money assistant, and only anonymised summary figures — such as category totals, budgets and safe-to-spend. We never send your name, account details, notes or individual transactions. If you use the on-device assistant instead, nothing leaves your device;
• when you choose to share it — for example, exporting a report or transactions file to send to your accountant or broker; and
• where required by law, or to protect the rights, safety or property of users or the public.

We do not share your information with data brokers or advertisers.

5. Your choices and rights

You can access and correct your information within the App at any time. You can export a copy of your data, and you can permanently delete your account and data (Settings → Privacy & security). Deleting your account removes your cloud data and also erases your on-device data (section 3) from the phone you delete it on.

Signing out does not erase on-device data, because we hold no copy of it and it would be lost for good. It stays on your phone, kept separate from any other account, until you delete your account or remove the App.

Deleting your account removes your data from our systems and clears the on-device data from the phone you delete it on. It cannot reach copies held outside our systems — a backup file you saved yourself, or the automatic backup your phone keeps in your Apple or Google account. Those are in your own storage and under your control; managing or deleting them is done through your device or your Apple/Google account.

Under the NZ Privacy Act you may also ask us to confirm what personal information we hold about you and to correct it. To make a request, contact us using the details below.

6. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete or de-identify your personal information, except where we are required to retain some records to meet legal obligations. Backups are cycled out in the ordinary course.

On-device data has no retention period on our side, because we never receive it. It remains on your phone under your control until you delete your account or remove the App.

7. Security

We use technical and organisational measures to protect your information, including encryption, access controls and per-user data isolation so that you can only access your own records.

No system is completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Privacy Commissioner (New Zealand) as required by law.

8. Children

The App is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date above and, for material changes, notify you in the App.

10. Contact us

If you have questions or a privacy request, contact us at contact@veloxpi.com. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.