Vesi

Privacy Policy

Last updated: July 28, 2026

Vesi ("the app", "we", "our", or "us") is a personal finance tracker for iOS, developed and published by Mikhail Pak as an independent developer. This Privacy Policy explains what information the app handles, how it is stored, and the limited circumstances in which it is shared.

We have designed Vesi to keep your financial information private. The app does not require an account, and we do not operate servers that store your transactions, balances, or other financial records.

Summary

No account. You can use Vesi without signing up or logging in.
Your data stays with you. Everything you enter is stored on your device and, if you have iCloud enabled, in your own private iCloud account. We cannot see it.
No analytics or tracking. Vesi contains no analytics, advertising, crash‑reporting, or third‑party tracking SDKs.
AI parsing is optional. When you add a transaction by voice, by scanning, uploading, or sharing a receipt, or by importing a bank statement, the resulting text (a speech transcript or text read from the image or document on your device) is sent for AI parsing. Receipt images, photos, and statement files are read on your device and are never uploaded — only the extracted text is sent. This text is processed transiently and is not stored by us.

Information the App Handles

1. Financial information you enter

When you use Vesi you may create transactions, wallets, budgets, categories, and notes (for example: amounts, dates, merchant or note text, wallet names, and category labels). This information is stored locally on your device and is synced to your private iCloud account if iCloud is enabled (see Storage and Sync below). It is not transmitted to us.

2. Microphone and speech

If you choose to add a transaction by voice, the app records audio and converts it to text using Apple's on‑device/server speech‑recognition services. Apple's handling of this audio is governed by Apple's Privacy Policy. The app only accesses the microphone while you are actively recording a voice entry.

3. Camera, photos, and shared receipts

You can add a transaction by scanning a receipt with the camera, choosing a photo from your library, or sharing a receipt, order summary, or payment confirmation to Vesi from another app. In every case the image is read on your device using Apple's on‑device text recognition. The image itself never leaves your device — only the text recognized from it is used for AI parsing (see the next section). The app accesses the camera or the specific photo you choose only for this purpose.

4. Voice transcripts, receipt text, and statement text for AI parsing

Whether the text comes from a voice transcript, from text read from a receipt or photo, or from a bank statement you import (see below), that text — together with the names of your wallets and categories and your currency code — is sent to our parsing service so that it can be turned into structured transaction details (such as amount, type, merchant, and category). This is what lets Vesi understand a phrase like "spent 20 dollars on groceries" or read the total from a receipt.

Statement import is an optional feature that reads a bank or card statement (a PDF or screenshots you choose) on your device and sends only the extracted text for AI parsing so the listed transactions can be added for your review. Because a statement is itself a record of transactions, the text sent this way includes the transactions shown on the statement and may include other details printed on it (such as balances or account numbers). The statement file or image itself is never uploaded, statements are only read when you explicitly choose them, and the text is handled transiently exactly like receipt text.

The text is sent over an encrypted (HTTPS) connection to a Cloudflare Worker that we operate, which forwards it to Anthropic's Claude API for processing.
The text is processed transiently to generate a response and is not stored by our service. Anthropic processes the request to return a result and may retain it briefly under its own API terms for security and abuse‑prevention purposes; per those terms it is not used to train its models.
Apart from the text you explicitly submit, we do not send your balances, account numbers, transaction history, name, email, or any image or file — only the capture text plus the wallet/category names and currency needed to interpret it. (If you import a statement, the statement's own text is what you are submitting — see Statement import above.)
To operate the free AI allowance and prevent abuse of this service, the request also includes a randomly generated device identifier, an Apple DeviceCheck token, and an anonymous purchase identifier. Our Cloudflare Worker stores the device identifier (to count how many AI logs you have used) and your IP address (briefly, to rate‑limit requests) — it does not store the transcript or receipt text. These identifiers are not linked to your name or Apple Account.

If you do not use voice entry, receipt scanning/upload/sharing, or statement import, no text is ever sent.

5. Notifications

If you enable notifications, Vesi schedules local reminders (for recurring transactions, budget alerts, and a daily logging nudge) directly on your device. These are generated on‑device and are not sent through our servers.

6. Purchases and subscriptions

Vesi offers an optional paid upgrade ("Vesi Pro"). If you choose to buy it, the payment is processed by Apple through the App Store — we never receive or store your payment card details.

To unlock your purchase and restore it across your devices, we use RevenueCat, a subscription‑management service. RevenueCat receives a record of the purchase (such as the product you bought and Apple's transaction/receipt information) and an anonymous, randomly generated identifier used solely to manage your entitlement.
This information is not linked to your name, email, or any account (Vesi has no accounts), and is not used for advertising or tracking.
Apple's and RevenueCat's handling of this data is governed by their respective privacy policies.

If you never make a purchase, no purchase data is sent.

Storage and Sync

On device: App data is stored locally using Apple's SwiftData framework.
iCloud: If you are signed in to iCloud and have iCloud enabled for Vesi, your data is synced through Apple's CloudKit to your private iCloud database so it stays consistent across your devices. This data resides in your Apple account; we do not have access to it and cannot read it. Apple's handling of iCloud data is governed by Apple's Privacy Policy.

You can disable iCloud sync for Vesi at any time in the iOS Settings app under your Apple Account → iCloud.

Third‑Party Services

Vesi relies on the following services strictly to provide its functionality. We do not sell or share your information for advertising.

Service	Purpose	Data involved
Apple iCloud / CloudKit	Optional sync and backup of your data	Your financial data, stored privately in your Apple account
Apple Speech Recognition	Convert spoken voice entries to text	Audio you record during voice entry
Cloudflare (Workers)	Securely route text to the AI parser; enforce free‑usage limits and prevent abuse; serve cryptocurrency prices	Transcript, receipt, or statement text, wallet/category names, currency code (transient; images and files are never sent); plus a device identifier and your IP address, used to meter usage and rate‑limit requests
Anthropic (Claude API)	Extract structured transaction details from transcript, receipt, or statement text	Transcript, receipt, or statement text, wallet/category names, currency code (processed to return a result; may be retained briefly under Anthropic's API terms for security; images and files are never sent; not used for model training)
Frankfurter (exchange‑rate API)	Fetch current fiat currency exchange rates	Your IP address and the currency codes requested; no personal or financial data
CoinStats	Provide cryptocurrency prices (fetched and cached by our server)	None; your device requests prices only from our Cloudflare Worker, and no data about you reaches CoinStats
Apple (App Store / In‑App Purchase)	Process your optional purchase of Vesi Pro	Purchase and transaction information (payment is handled by Apple; we do not see your card details)
RevenueCat	Unlock and restore your Vesi Pro purchase across devices	Purchase/receipt information and an anonymous identifier (not linked to your identity; not used for advertising or tracking)

These providers act as processors that handle data only as needed to deliver the feature you requested.

Information We Do Not Collect

We do not require or collect names, email addresses, or account credentials.
We do not use analytics, advertising, or crash/diagnostics SDKs.
We do not track you across apps or websites.
We do not maintain a server‑side database of your transactions or balances.

Permissions You Control

Vesi asks for permissions only when needed, and you can change them anytime in the iOS Settings app:

Microphone & Speech Recognition — required only for voice entry.
Camera & Photos — required only when you scan or upload a receipt or statement screenshots; the image is read on your device and is not uploaded.
Notifications — required only for reminders and budget alerts.
iCloud — controls whether your data syncs across your devices.

Denying any of these still lets you use the rest of the app.

Data Retention and Deletion

Because your data lives on your device and in your iCloud account, you remain in control of it:

Erase All Data — In Settings → Erase All Data, you can permanently delete all transactions, budgets, and wallets and reset Vesi to a fresh state. (Your built‑in categories are kept.)
Delete the app — Removing Vesi deletes its local data from that device.
Remove iCloud data — You can delete Vesi's iCloud data from iOS Settings → your Apple Account → iCloud → Manage Account Storage.

Voice transcripts and receipt, photo, or statement text sent for AI parsing are not retained by us after the response is generated, and receipt images, photos, and statement files are never uploaded.

Security

Data transmitted for voice parsing is sent over encrypted HTTPS connections. On‑device and iCloud data is protected by your device passcode/biometrics and by Apple's platform security. No method of storage or transmission is 100% secure, but we limit collection and transmission to what is strictly necessary.

Children's Privacy

Vesi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, please contact us and we will address it.

Your Rights

Depending on where you live (for example, under Canada's PIPEDA, the EU/UK GDPR, or California's CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information. Because Vesi does not collect or store your personal data on our servers, you can exercise these rights directly:

Access / export: Your data is available within the app and your iCloud account.
Deletion: Use Erase All Data, delete the app, or remove the iCloud data.

If you have questions about your rights, contact us using the details below and we will assist where applicable.

International Users

Voice transcripts and receipt, photo, or statement text processed for AI parsing may be handled on servers located in other countries (including the United States) by Cloudflare and Anthropic. By using voice entry, receipt scanning, upload, or sharing, or statement import, you consent to this transient cross‑border processing.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected in the app or on the page where this policy is hosted.

Contact

If you have any questions about this Privacy Policy or your data, contact us at:

Email: info@tryvesi.app

Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario, Canada, and the federal laws of Canada applicable therein, without regard to its conflict‑of‑law provisions.