Opisio Privacy Policy

1. Who we are

Opisio is developed and published by Patryk Jakubik, an individual developer publishing as Velocip (“we”, “us”). For the purposes of data protection law (including the EU General Data Protection Regulation, “GDPR”), we are the controller of the limited data described in this policy.

Contact: support@velocip.com

2. Data stored on your device

To do its job, Opisio stores what you enter or import in a private database on your device:

• Your income: main salary, additional named income streams, pay day and working-time settings.
• Your costs: names, amounts, categories (Needs / Wants / Savings), schedules, collection dates, contract end and reminder dates, tags, descriptions, notes and web links you add.
• Monthly statements the app builds from your costs, and costs imported from bank statements.
• Savings goals and savings account records you enter (for example the provider, interest rate and deposit amounts), including unsaved drafts.
• PDF documents you attach to a cost.
• App preferences, such as theme, display options and your default PDF viewer.

This data stays on your device. We do not have access to it, and it is not uploaded to any server we run. Opisio does not ask you for your name, email address, phone number, bank login, account numbers or location.

3. Data that leaves your device

Google Gemini API: reading statements and photos

Opisio can recognise costs automatically in a bank statement PDF you import or share with the app, or in a photo of a bill, invoice or receipt that you take or pick. This happens only when you start it. Nothing is sent in the background.

When you use it:

• What is sent: the PDF or image you selected, plus instructions telling the AI what to extract. A bank statement can contain personal and financial information, such as your name, address, account details and transaction history. Photos are re-encoded before they are sent, which removes embedded metadata such as GPS location.
• Who receives it: Google LLC, through the Gemini API (a Google service that processes the content for us).
• Why: to extract cost names, amounts and dates and return them to the app, where you review them before anything is saved.
• How long it is kept: Opisio uploads a statement PDF to Google’s temporary file storage and deletes it as soon as the extraction finishes. If that deletion ever fails, Google removes the file automatically within 48 hours. Photos are sent directly and are not stored as files. Only the extracted results are saved, on your device.
• Use by Google: Opisio uses the Gemini API’s paid service. Under Google’s terms for paid services, Google does not use your content to train or improve its models. Google may keep prompts and responses for a limited period only to detect abuse and policy violations, and to meet its legal obligations.

See Google’s Gemini API Additional Terms of Service and the Google Privacy Policy.

If you do not want any document to leave your device, do not use statement import or “add from photo”. Every other feature of the app works without them, and you can enter costs by hand.

Firebase Remote Config: app configuration

Opisio uses Google Firebase Remote Config to turn app features on or off without an app update. To fetch this configuration, the Firebase SDK sends Google a random Firebase installation ID together with basic technical information, such as the app version, device operating system version, language and country. This does not identify you by name and includes none of your financial data. See Privacy and Security in Firebase.

Firebase Analytics: usage statistics

Opisio uses Google Firebase Analytics to understand which features are used and how often, mainly to work out what the AI features cost to run so Opisio Pro can be priced fairly. When usage statistics are on, the app sends Google:

• Feature events: that you read a cost from a photo (and whether it came from the camera, the photo picker or another app), that you imported a bank statement, or that you opened the Opisio Pro offer for a feature.
• Technical details of those events: how many AI tokens the request used, how long it took, whether it succeeded, and for a statement its page count, file size and the number of transactions found.
• Standard Firebase data: a random app-instance ID, app version, device model, operating system version, language, approximate country, and app opens and session length.

It never sends your income, cost names or amounts, statement contents, photos, documents or notes. Advertising ID collection is turned off. You can stop usage statistics at any time with Settings → Share usage statistics; nothing more is sent after you turn it off. See Privacy and Security in Firebase.

Google Play: purchases

If you buy Opisio Pro, Google Play processes the payment. We do not receive your payment card details. Google tells the app whether a purchase is active so it can unlock Pro features. See the Google Privacy Policy.

Links you open

If you save a web link on a cost and tap it, it opens in your browser or the matching app. Opisio does not track which links you open.

4. Permissions

5. Backups

If Android backup is turned on for your Google account, Android may include Opisio’s app data in your device backup, which Google stores in your Google account. That backup belongs to you, is managed by Android and Google, and is not accessible to us. You can manage it in your device’s backup settings.

6. How and why we use data (legal bases)

• Recognising costs from a statement or photo: done at your request, to provide the feature you asked for (GDPR Art. 6(1)(b)), with your explicit action each time (Art. 6(1)(a)). Financial details are processed only for this purpose.
• App configuration through Firebase Remote Config: our legitimate interest in operating and gradually rolling out features (Art. 6(1)(f)).
• Usage statistics through Firebase Analytics: our legitimate interest in understanding how the app is used and what its AI features cost to run (Art. 6(1)(f)). You can object at any time by turning off Settings → Share usage statistics.
• Purchases: to fulfil the purchase you made (Art. 6(1)(b)).

We do not use your data for advertising, profiling or automated decisions about you.

7. Who we share data with

We share data only with these service providers, and only as described above:

• Google LLC (Gemini API, Firebase, Google Play), which acts as our processor or as an independent provider under its own terms.

We do not sell, rent or trade your data. We may disclose information only if the law requires it. Because we do not hold your financial data, in practice we have very little to disclose.

Google may process data outside your country, including in the United States. Where GDPR applies, these transfers rely on the safeguards Google provides, such as the EU–US Data Privacy Framework and Standard Contractual Clauses.

8. Retention and deletion

• On your device: data stays until you delete it. You can delete individual costs, statements, attachments and savings records in the app. To delete everything, clear the app’s storage in Android settings or uninstall the app.
• Gemini: uploaded statement files are deleted straight after processing, or at the latest within 48 hours. Any limited abuse-monitoring logs Google keeps are subject to Google’s retention periods.
• Firebase: installation data is kept according to Firebase’s retention rules and can be removed by uninstalling the app. Usage statistics linked to the app-instance ID are kept for up to 14 months and then deleted automatically.

9. Security

All network traffic from Opisio uses encrypted HTTPS (TLS). Data on your device is kept in the app’s private storage, which Android isolates from other apps. We recommend protecting your device with a screen lock. No method of storage or transmission is completely secure, but we keep what leaves your device to a minimum.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time. Most of your data is in your own hands on your device, so you can view, edit and delete it in the app directly. For anything else, including questions about data processed by Google on our behalf, email us at support@velocip.com and we will respond within 30 days.

If you are in the EU/EEA, you also have the right to complain to your local data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO).

11. Children

Opisio is a personal finance app intended for adults. It is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly process children’s data. If you believe a child has used the statement or photo feature, contact us.

12. Changes to this policy

We may update this policy when the app changes, for example when a new feature sends data to a new service. We will change the effective date above, and for significant changes we will tell you in the app or on its store listing.

13. Contact

Patryk Jakubik (Velocip)
Email: support@velocip.com
Web: velocip.com/apps/opisio/privacypolicy