Privacy Policy

Last updated: November 8, 2026

Pronoa is built to help you manage your money without giving it away. This policy explains what we collect, why, who helps us process it, and what we do not do. Pronoa is operated by Pronoa d.o.o., Sarajevo, Bosnia and Herzegovina.

1. Information We Collect

• Account: your email address, name and a hashed password.
• Financial data you enter: transactions, income, expenses, budgets, goals, debts, recurring payments and financial snapshots. We do not connect to your bank accounts.
• Things you give the AI features: receipt photos, bank statements you upload, the text of voice entries and your Eywa chat messages.
• Settings: preferences such as currency, theme and notifications, including whether and when you allowed AI features.
• Your plan: whether you have Premium and until when, as reported by the App Store.
• Push token: a token for your device, if you allow notifications.
• Crash and error reports: the error, the app and device version and the screen it happened on. Never amounts, transactions or your email.

2. How We Use Your Information

• To provide Pronoa: dashboards, budgets, goal and debt tracking, health scores and Eywa's insights.
• To authenticate your account and keep your data secure.
• To run the AI features you choose to use (section 3).
• To manage your Premium subscription.
• To send the notifications you turned on.
• To find and fix crashes and errors.

3. AI Features and OpenAI

Some features use OpenAI, which processes data for us as our processor. Nothing is sent to OpenAI until you allow AI features in the app. This is what is sent, and only when you use the feature:

• Receipt scan: the photo, and your category names so it can pick one.
• Voice entry (Premium AI reading): the text of what you said and your category names. Your phone turns your voice into text (on iPhone, Apple's speech recognition); Pronoa never receives the audio.
• Statement import: the statement's content (dates, descriptions and amounts), to read it, analyse it and match it with transactions you already have.
• Eywa chat: your messages and the conversation so far, a summary of your finances (monthly totals, scores, goals, debts, spending by category) and, when your question needs it, the matching transactions.
• Eywa's tips: the text of up to four tips, which contain your amounts and may name your goals or categories, so they can be reworded.

OpenAI does not use data sent through its API to train its models. It keeps it for up to 30 days to detect abuse, then deletes it, unless the law requires it to keep it longer. See OpenAI's privacy policy.

If you do not allow AI, everything else keeps working: Eywa's tips show in their standard wording and voice entry uses the built-in reader. You can withdraw your consent at any time in the app under Settings → Privacy → AI features. From then on nothing more is sent, and AI wording we stored for you is deleted.

4. Processors We Use

• OpenAI: the AI features in section 3.
• RevenueCat: manages your Premium subscription. It receives your Pronoa account id and your purchase and subscription status from the App Store, never your card details.
• Apple: App Store payments and subscriptions, and speech recognition for voice entry.
• Supabase: our database and private storage for receipt photos.
• Expo: delivers push notifications. It receives your device's push token and the notification text, which includes amounts and the names of your debts and goals only if you turn that on.
• Sentry: crash reports, as described in section 1.

Some of these companies are based in the United States, so your data may be processed there. We use no analytics, no ad networks and no data brokers. We do not sell, share or rent your personal information.

5. Data Storage & Security

Your account and financial data are stored in our Supabase database, and receipt photos in private Supabase storage. Our API runs on a rented server. All connections use HTTPS and passwords are hashed with bcrypt. Your Eywa chat history and the app lock settings stay on your phone.

6. Data Retention

• Your data is kept while your account is active.
• Receipt photos are kept until you delete them or your account. An uploaded statement file is not kept, only what was read from it.
• AI wording and other cached results expire on their own, usually within a day.
• Error reports sent to our server are deleted after 90 days.
• When you delete your account, all associated data is permanently removed within 30 days. Records of paid purchases are kept as long as tax law requires, with your account id replaced by a one-way code.
• OpenAI keeps data from AI features for up to 30 days, as described in section 3.

7. Your Rights

• Access and export: view your data in the app at any time, and export it from Settings → Data management.
• Correction: update your profile and financial records at any time.
• Deletion: permanently delete your account and all associated data from Settings → Data management. This cannot be undone.
• Withdraw AI consent: Settings → Privacy → AI features.
• GDPR requests: ask for a full data report, or object to processing, by emailing privacy@pronoa.app.

8. Children's Privacy

Pronoa is not intended for users under the age of 16. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date above.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at privacy@pronoa.app. We respond within 5 business days.