Privacy Policy

Last updated: September 24, 2026

Viva Expense Tracker is the personal finance app; Viva Finance is the operator of the service. Ahmed Shareef is the contact person for privacy and product matters (see Contact).

Official website: viva-finance.net

This policy describes how we collect, use, store, and share information when you use the Viva mobile and web apps and related services.

1. Who we are

The service is operated as Viva Finance, with Ahmed Shareef as the primary contact for data protection and user inquiries at the addresses listed in Contact us.

2. Information we collect

2.1 Account & profile

• Email address, display name, and profile photo (if you add one).
• Authentication data processed by Supabase and, if you choose them, Google or Apple sign-in.

2.2 Financial and app data you enter

Viva Expense Tracker is a manual finance tracker. You (and, in shared mode, your linked partner) enter data such as:

• Transactions: expenses, incomes, transfers between accounts you define in the app.
• Structure: categories, category budgets / overrides, bills, subscriptions, loans and recurring items where the app supports them.
• Savings: emergency fund (Safety Net), savings goals, and related activity for your account (stored per user; see Partner features below).
• Net worth module: assets and liabilities you add.
• Accounts: wallets, bank-style accounts, cards, and pension-style buckets you name and balance manually — we do not receive live bank logins or card numbers.

2.3 Partnerships (shared household)

If you link a partner in the app, we store the relationship and user identifiers needed to enforce access rules. Row-level security in our database controls what each user can read and change.

2.4 AI-related data

• Viva AI (OpenAI and Anthropic): When you use AI features, we send prompts and context needed for that feature (see section 5). That can include aggregated numbers, category names, transaction titles/descriptions, budgets, receipt images (if you scan a receipt), and text you type (e.g. chat). Merchant or place names in your data may be personally identifying in context.
• Merchant memory & training: Rules you save (e.g. merchant → category) and related fields stored in our database.
• AI usage: We may store usage counts or quotas (e.g. monthly free-tier limits) tied to your account.

2.5 Subscriptions (Viva Pro)

If you subscribe through Apple App Store, Google Play, or similar, Apple or Google process payment; we receive subscription status via RevenueCat (or equivalent integration) — not your full payment card details.

2.6 Device & notifications

• Push tokens (e.g. via Firebase Cloud Messaging) if you enable notifications.
• App preferences: currency, theme, language, view mode, and similar settings.
• Diagnostics: We may use third-party crash or error reporting (e.g. Sentry) with configuration aimed at limiting personal data; check your app build for what is enabled.

2.7 Local storage on your device

The app may keep caches (e.g. AI responses, monthly report previews, chat for the current session) in localStorage or sessionStorage. These are stored on your device and are tied to your usage; clearing app data or uninstalling removes them.

3. How we use your information

• To run the app: sync data, show dashboards, budgets, savings, and partner/shared views where applicable.
• To provide Viva AI features via OpenAI and Anthropic (see section 5).
• To enforce Pro vs free limits and subscription state.
• To send push notifications you opt into.
• To improve reliability and fix bugs (aggregated or error reports where used).
• To comply with law or protect rights when required.

We do not sell your personal information.

4. Partner features and data boundaries

• Shared view: Where the product allows it, you may see your linked partner’s expenses, incomes, bills, subscriptions, and certain account/transfer information in the UI, consistent with our database rules.
• Editing: You can edit or delete only your own transactional rows (your user_id). Partner rows are not modifiable through your account.
• Savings (Safety Net & goals): Under current policy, savings goals, emergency fund, and their ledgers are scoped to each user in the database. The app loads your savings data only for your session, even in shared browsing modes.
• AI: Structured AI context (insights, chat system prompt, receipt tools, etc.) is built for the signed-in user’s own data so that automated AI features do not include your partner’s numbers in the model input. Anything you paste or type into chat is still sent as you wrote it.

5. Artificial intelligence providers

AI features may include, without limitation: insights and tips, chat, spending DNA / personality-style summaries, receipt scanning, category suggestions, natural-language expense parsing, budget warnings, merchant name normalization, and goal projections.

OpenAI and Anthropic process inputs on our behalf when those features run. Content may include financial amounts, descriptions, images (receipts), and free text. That content can be sensitive or identifying.

Provider handling is described in the OpenAI privacy policy and Anthropic privacy policy. When web search is enabled, a search query derived from your request is sent to Serper to retrieve web results. We do not use OpenAI to sell your data; we use it to generate responses for you.

6. Data storage, security, and location

• Data is stored in Supabase (PostgreSQL) with Row-Level Security (RLS) so queries respect per-user (and, where designed, partner read) rules.
• Traffic uses TLS.
• Our Supabase project is described in product docs as EU-hosted by default; confirm your project region in the Supabase dashboard if you need certainty for compliance.

Viva Finance does not routinely access your financial detail except as needed to operate the service (e.g. backups, support if you contact us, or legal process). Ahmed Shareef / operators cannot read your encrypted-at-rest database contents without going through the same authentication and policy constraints as the app.

7. Third-party services (subprocessors)

Each has its own privacy policy; links are maintained on our website where applicable.

8. Retention and deletion

• Data is kept while your account exists unless you delete it or request deletion.
• Wipe data (in-app): removes your financial records according to the feature’s scope; some account-level rows may remain until full account deletion.
• Delete account: Permanently deletes your user data and auth account through our delete-account flow (subject to short backup or legal retention if ever required).

Deletion is irreversible. We aim to complete account deletion within 30 days unless the law requires otherwise.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data, and to object or restrict certain processing. Contact us at feedback@viva-finance.net to exercise these rights. You may also use in-app delete account and wipe data tools.

10. Children’s privacy

Viva Expense Tracker is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact feedback@viva-finance.net.

11. International users

If you use Viva from outside the Maldives, your data may be processed in the EU or other regions where our providers host services. By using Viva, you acknowledge that transfer.

12. Changes to this policy

We may update this Privacy Policy. We will post the new version on viva-finance.net and in the app where practical, and update the Last updated date. Material changes may be announced in-app or by email.

13. Contact us

• Product & privacy: feedback@viva-finance.net — Ahmed Shareef, Viva Finance
• General: info@viva-finance.net
• Support: support@viva-finance.net
• Website: viva-finance.net