Privacy Policy

Last updated: July 5, 2026

VoceSpesa (“the App”) is developed and operated by Paolo Cappelletti (“the Controller”). This policy describes how we collect, use and protect your data.

Data we collect

Authentication data

To create an account we collect your email address and a password. This data is handled through a secure authentication service and stored on servers located in the European Union.

Expense data

All the expenses you log (amount, description, category, date and any voice transcription) are saved locally on your device (local-first approach). In the free version they remain exclusively on the device and are not sent to our servers or to third parties. If you activate a Pro subscription and enable cloud backup, a copy of this data is saved on our servers to provide backup and sync: see the “Cloud backup (Pro users)” section.

Cloud backup (Pro users)

If you activate a Pro subscription, your expenses (amount, description, date, category and any voice transcription) and your custom categories are continuously saved on our servers (Supabase, European Union region — Ireland) to provide automatic backup and restore on a new device. The data is protected by authentication and per-user isolation (Row Level Security). When the subscription expires, the backup stops updating and the cloud copy is kept for 60 days so you can reactivate the service without losing anything; after 60 days it is deleted automatically. If you delete your account from the App, the cloud copy is deleted immediately. The data on your device is never removed by these processes.

Voice data

Speech recognition is handled natively by iOS through Apple’s speech recognition system. Audio is processed on the device. VoceSpesa does not record, store or transmit audio files. The transcribed text becomes part of the expense and follows the same rules described above (local, and in the cloud only if you have enabled Pro backup).

Subscription data

In-app purchases are managed directly by Apple (StoreKit): we do not collect or process payment data, which is handled entirely by Apple through the App Store. To verify and keep your subscription status up to date, Apple sends us a transaction identifier and the subscription status, which we associate with your account on our servers (European Union).

Purposes of processing

We use the collected data exclusively to:

  • Allow access to your account
  • Verify your subscription status
  • Provide data backup and sync (Pro only, with backup enabled)
  • Improve how the App works

Data sharing

We do not sell or share your personal data with third parties for commercial purposes. Data is processed exclusively for the purposes described above and entrusted to technical providers (authentication and hosting in the European Union) that process it on our behalf.

Data retention

Authentication data is kept as long as your account remains active. Expenses are saved locally and remain under your control: you can delete them at any time from the App. The cloud backup copy (Pro only) is kept while the subscription is active; when it expires it is retained for 60 days and then deleted automatically. If you delete your account from the App, your authentication data and the entire cloud copy are deleted immediately; the data on your device is not affected by these processes.

Your rights

Under the GDPR (EU Regulation 2016/679) you have the right to:

  • Access your personal data
  • Request rectification or erasure
  • Object to processing
  • Request data portability

To exercise your rights, write to: vocespesa@paolocappelletti.com

Security

We adopt technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest and per-user isolation (Row Level Security), which prevents access to other users’ data.

Changes

We may update this policy. In case of significant changes, we will inform you through the App. The date of the last update is shown at the top of this document.

Contact

For any privacy questions: vocespesa@paolocappelletti.com