Privacy Policy

1. Overview

Ollo is an offline-first personal finance application. Core financial data is stored locally on your device using Drift (SQLite). Online features such as an Ollo account, Cloud Sync, AI Scan, and Ollo Assistant are optional and require data to be processed by Ollo's servers and, for AI features, the providers described below.

This policy explains what data is processed, why it is processed, and the choices available to you. Ollo does not sell personal data or share it with advertisers.

2. Data stored on your device

You can use Ollo's core manual finance features without creating an Ollo account. Device backups or export files may be copied to a location or cloud-storage provider you choose; Ollo does not control that destination.

• Financial records such as wallets, transactions, categories, budgets, bills, goals, debts, notes, and related settings.
• AI Assistant chat history and AI preferences, unless you explicitly submit selected feedback.
• Authentication tokens and app preferences needed to keep you signed in and operate the app.
• Photos or attachments you choose to retain with a transaction.

3. Ollo account and Cloud Sync

If you sign in, Ollo processes account identifiers and profile information supplied by Google or Apple, such as your account ID, email address, and display name where available. Passwords for Google or Apple are never provided to Ollo.

If you enable Cloud Sync, selected financial data is stored on Ollo's servers so it can be synchronized between your devices. This includes wallets, transactions, categories, budgets, recurring transactions, savings, bills, wishlists, debts, cards, notes, and assets. Cloud Sync is optional and signing in does not automatically enable it.

Ollo also processes synchronization metadata such as record identifiers, timestamps, versions, deletion markers, device identifiers, and aggregate pending-operation counts to prevent duplicates, resolve conflicts, and diagnose sync problems.

4. AI Scan

When you choose AI Scan, the image you select or capture is sent over HTTPS to Ollo's server and then to OpenRouter, which routes it to a Google Gemini model for extraction. Category names and identifiers may be included so the model can suggest a category. An account-owner name is included only when you configure one for transfer detection.

Ollo does not intentionally store the submitted receipt image on its server after processing. The extracted result is shown for your review and can be edited before it is saved. AI Scan does not send your complete transaction history or wallet balances with the image.

Per-account usage counts are stored to enforce trial or subscription quotas and prevent abuse. AI Scan is optional; manual entry remains available.

5. Ollo Assistant

When you use Ollo Assistant, messages you type, recent turns needed for context, optional tone preferences, and financial summaries prepared on your device are sent through Ollo's server to DeepSeek. Summaries may include totals, trends, budgets, wallet balances, savings, bills, or debt.

Ollo does not send raw individual transaction titles, notes, merchants, or attachments as Assistant context. Assistant chat history is stored locally on your device. If you explicitly submit feedback, the selected conversation, rating, issue tags, optional note, app version, platform, and language are stored on Ollo's server for product improvement.

Assistant output is informational and is not professional financial, investment, tax, legal, or medical advice. Usage counts are stored to enforce quotas and prevent abuse.

AI features run only with your explicit consent: before first use, the app shows a consent dialog naming the actual providers, and your acceptance is recorded per account and feature with a timestamp. You can revoke all AI consent at any time from Profile → Account → Account Management; revoking stops AI processing without deleting your transactions, account, local chat history, subscription, or cloud data.

6. Voice, camera, and files

Camera or photo-library access is used only when you choose to capture or select an image. Microphone access is used for voice entry; speech may be processed by the speech-recognition service provided by your device platform. You may deny these permissions and continue using manual entry.

Uploads are subject to file type and size validation. Do not upload content you are not authorized to process or content containing unnecessary sensitive information.

7. Subscriptions and purchases

Purchases are processed by Google Play or Apple's App Store. RevenueCat helps Ollo verify subscription entitlements. Ollo does not receive your full payment-card details. Subscription status, product identifiers, purchase metadata, and an app-specific user identifier may be processed to unlock premium features and prevent fraud.

8. Service, security, and diagnostics data

Ollo's servers may process IP address, request time, device/app version, endpoint, response status, security events, and limited diagnostic information to operate the service, enforce rate limits, investigate abuse, and fix errors. Logs are designed not to contain passwords, authentication tokens, receipt contents, or full financial payloads.

Data is encrypted in transit using HTTPS. No system can guarantee absolute security, but Ollo applies access controls, limited database privileges, monitoring, backups, and staged security testing.

9. Retention and deletion

Local data remains on your device until you delete it, clear app data, uninstall the app, or restore/replace it. Cloud data is retained while your account and Cloud Sync data are active, or as needed for security, backup recovery, legal obligations, and resolving sync deletions.

You may request deletion of your Ollo account and associated cloud data by contacting ollowithyou@gmail.com from the email linked to your account. When in-app account deletion is available, it may include a cancellation period before permanent deletion. Deleting an Ollo account does not cancel a Google Play or App Store subscription; subscriptions must be managed in the relevant store.

Some minimal non-content security or deletion audit records may be retained where necessary to demonstrate completion, prevent abuse, or comply with law. Backups expire according to operational retention schedules.

10. Third-party services

These providers process data under their own terms and privacy policies. Provider availability, subprocessors, and retention practices may change. Ollo limits submitted data to what is needed for the selected feature.

• Google and Apple: sign-in, app distribution, purchases, device services, and speech recognition where applicable.
• RevenueCat: subscription entitlement management.
• OpenRouter and Google Gemini: AI Scan processing.
• DeepSeek: Ollo Assistant processing.
• A storage or sharing provider you choose for exported backup files.

11. Children, changes, and contact

Ollo is not directed to children under 13, and we do not knowingly collect their personal data. We may update this policy as features or legal requirements change and will update the date on this page.

For privacy questions, access requests, or account/data deletion requests, contact ollowithyou@gmail.com.