Privacy Policy

We collect only the information needed to provide the app’s features:

• Account information: your name, email address, and an account ID. You provide your name and email when you sign up, or Google Sign-In or Sign in with Apple shares them with us when you choose those options. The account ID is created automatically.
• Financial information: the accounts, transactions, budgets, categories, and balances you choose to record. You enter this yourself to track your own money. We do not collect bank credentials or card numbers, and we do not connect to your bank.
• Photos: receipt images and your profile picture. You take them with your camera or select them from your photo library; we only access photos you explicitly choose.
• Voice recordings: audio you record with your microphone when you use voice input in Wasle AI. Recording only happens while you are actively recording a voice note.
• AI assistant messages: the messages you type or dictate to Wasle AI, and the messages you type into the support chatbot on our website.
• Customer support messages: the messages you send us when you contact support.
• Device information: device name, model, platform, and app version, collected automatically when you sign in so you can see and manage the devices signed in to your account.
• Usage and diagnostic data (web app): when you use Wasle in a browser at web.wasle.io, we collect information about how you use it, such as the pages you visit, clicks and scrolling, your browser and device type, your approximate location based on your IP address, and error reports. See Section 6.
• Authentication data: biometric unlock (fingerprint / Face) is handled entirely by your device’s operating system. We never receive, store, or transmit your biometric data.

• To create and manage your account.
• To provide the app's core features: recording transactions, budgets, reports, and receipts.
• To sync your data securely across your sessions and devices.
• To show you the devices signed in to your account and let you sign them out.
• To secure your account and protect your financial data.
• To respond to your support requests.
• To understand how people use the web app and to find and fix errors and performance problems, as described in Section 6.
• To power optional AI features (the Wasle AI finance assistant, voice input, receipt reading, and the support chatbot), only after you give permission, as described in Section 5.

We do not use your data for advertising, and we do not sell your personal information.

Your data is stored securely using our infrastructure provider, Supabase, which acts as our data processor. All data is encrypted in transit using industry-standard TLS/HTTPS. Access is restricted to your authenticated account.

We do not sell your personal or financial information, and we do not share it with third parties for their own independent purposes. We only use trusted service providers that process data on our behalf, under contract, and that provide the same or equal protection for your data as described in this policy. We may disclose information if required by law.

Our service providers are:

• Supabase: hosting and secure storage of your account and financial data.
• Alibaba Cloud (Qwen): a third-party AI service, processed in Singapore. Only after you allow it in the app, we send Alibaba Cloud your AI assistant messages and recent conversation, voice recordings, receipt photos, and the financial records needed to answer your question, so it can generate a response. See Section 5 for details.
• Google Analytics: usage statistics for the web app. See Section 6.
• Microsoft Clarity: session recordings and heatmaps of the web app. See Section 6.
• Vercel Web Analytics: page view statistics for the web app. See Section 6.
• Sentry: error and performance monitoring for the web app. See Section 6.

Wasle offers optional AI features: the Wasle AI finance assistant, voice and photo input for adding transactions, and a support chatbot on our website. These features are powered by Qwen, a third-party AI service operated by Alibaba Cloud and provided through QwenCloud by Intelligent Cloud Computing (Singapore) Private Limited. Requests are processed in Alibaba Cloud’s Singapore region.

What is sent

• Finance assistant (chat): the message you send, the recent messages in the conversation, and the specific records needed to answer, such as transaction amounts, dates, categories, and account names. These records are always limited to your own data.
• Voice input: your voice recording, as audio, so it can be transcribed. The transcript is then sent to the finance assistant as a message.
• Photo input: the receipt photo you take or choose, as an image, so the merchant, amount, date, and category can be read from it.
• Support chatbot (website): only the text you type and the recent messages in that chat session. It is not connected to your account data.

We do not send your name, email address, password, location, or device information to Alibaba Cloud.

Who it is sent to and how it is protected

The data is sent to Alibaba Cloud through the Qwen API and processed in its Singapore region. Alibaba Cloud processes it on our behalf to generate a response and returns that response to the app, and states that it does not use this data to train its models. We share this data with Alibaba Cloud only under terms that provide the same or equal protection for your data as described in this policy. We do not authorize Alibaba Cloud to use it for advertising or for any purpose other than generating your response.

Your permission

• We ask first: before anything is sent, the app shows a screen explaining what will be sent and that it goes to Qwen by Alibaba Cloud, and asks you to Allow or Don’t Allow. Nothing is sent to Alibaba Cloud until you tap Allow.
• If you don’t allow it: nothing is sent and the AI features stay unavailable. The rest of the app works normally.
• You can change your mind: turn AI sharing off or on at any time in the app under Settings → Security & Privacy → Wasle AI. Once turned off, nothing more is sent.
• We ask again if anything changes: if we change what is sent or who receives it, the app asks for your permission again.

Conversation history

Support chatbot messages are held only temporarily, so the assistant can keep context within the same session, and are discarded when that session ages out (within about 24 hours); they are not saved to your account. Your finance assistant conversations are saved so they sync across your devices and remain available when you reopen the app; they are permanently deleted when you delete your account.

Please avoid entering highly sensitive information, such as passwords or government ID numbers, into an AI feature, as that content is processed by Alibaba Cloud to generate your response.

When you use Wasle in a web browser, we use the tools below to understand how the web app is used and to find and fix problems. The Wasle mobile app does not use them.

• Google Analytics: records the pages you visit, how long you stay, your browser and device type, and your approximate location based on your IP address. It uses cookies. Google processes this data under its own privacy policy.
• Microsoft Clarity: records how you interact with pages, such as clicks, scrolling and mouse movement, to create session recordings and heatmaps. Recordings can include what is shown on the page. Clarity uses cookies, and Microsoft processes this data under its own privacy statement.
• Vercel Web Analytics: counts page views and records your browser, device type and country. It does not use cookies.
• Sentry: when something goes wrong, collects technical details such as the error message, the page it happened on, your browser and performance timings, so we can fix it.

We don’t link these tools to your Wasle account by name, email address, or account ID.

You can block or delete cookies in your browser settings, or use a browser extension that blocks analytics. The web app keeps working if you do.

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from within the app: Settings → Delete Account. You may also email us at support@wasle.io to request deletion.

See our Delete Account & Data page for full details.

• Photos: to attach receipts and set a profile picture.
• Camera: to photograph a receipt.
• Microphone: to record a voice note for Wasle AI voice input.
• Biometrics: to unlock and protect the app.
• Notifications: to send reminders and alerts you enable.

You can revoke any of these permissions in your device settings.

Wasle is intended for users aged 18 and over. We do not knowingly collect information from children.

You have the right to access, correct, or delete your personal data, directly in the app, or by contacting us. You can also withdraw your permission for AI features at any time, as described in Section 5.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Questions about this policy or your data:

support@wasle.io
Brandsquare Limited