Clio

Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains what data Clio processes, why, who receives it, and what you can do about it. On the App Store the app is listed as “Clio AI: Expense Tracker”. The Service is the iOS app and the web app together. The provider is Makar Kovtunov, an individual in Belgrade, Serbia.

What we process

• Account data: email address, a password stored hashed by our auth provider, profile name, public user code, time zone, and profile photo.
• Expense data you enter: amounts, currencies, categories, notes, groups, balances, repeating expenses, favorite currencies, and category preferences.
• Media you choose to send: voice for expense input, receipt or screenshot images for parsing, and a profile photo.
• Notifications, if you turn them on: a push token, the device platform, and the text of a reminder. A reminder can include an expense title, an amount, a group name, or another member’s name.
• Technical data: session identifiers, app and device type, and error or performance logs needed to run the Service.

Why we process it

• To provide the Service you asked for: an account, expense tracking, sync, and shared groups. This is necessary for the contract with you.
• To parse voice, a receipt photo, or text when you start that feature.
• To send reminders you turned on.
• To keep the Service secure and to fix failures. This is our legitimate interest, within what you would reasonably expect from an expense app.
• Microphone, camera, photo library, and notifications turn on only after you allow them on the device.

AI

On iPhone, voice audio goes from your phone directly to OpenAI for transcription. If live transcription fails, the recording can be sent to our servers and then to OpenAI. Typed text and receipt photos go to our servers and then to OpenAI so we can turn them into expense drafts. We do not sell this data and we do not use it for advertising. Check a draft before you save it. Parsing can be wrong.

Who else processes data

• Supabase — accounts and Service data, stored in the European Union.
• Vercel — hosting of the app and API.
• OpenAI — voice, images, and text when you use those features.
• Expo and Apple Push Notification service — iOS reminders.
• Firebase Cloud Messaging — web reminders, if you enable them.
• PostHog, when enabled — server-side product metrics, such as whether a parse succeeded. Those events do not include the text of your expenses, and we do not sell the data.
• Frankfurter — exchange rates. Rate requests do not include your expenses.

Groups

People in a group with you can see your profile name, profile photo, public code, and the expenses shared in that group. You decide what goes into a shared expense.

How long we keep data

We keep account and expense data while the account exists. You can delete the account in the app: Profile → Delete account. We then delete the login, profile, your expenses, groups you own, preferences, and push tokens. In someone else’s group you are shown as “Deleted”, with a neutral photo. Your public code can remain so older “who paid” rows still match. Receipt photos are not stored in your account. A parse result can sit on our servers for about 10 minutes and is then removed. Voice recordings are not kept as part of the account. Backups at our infrastructure providers can hold a residual copy until they are overwritten.

If you cannot sign in, email us from the account address.

Your rights

You can ask for a copy of your data, a correction, deletion, a restriction, or an export, and you can object to processing based on legitimate interest. Email us, or delete the account in the app. You can complain to the Commissioner for Information of Public Importance and Personal Data Protection in Serbia (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti). If you live in the EU, EEA, or the UK, you can also complain to your local data protection authority.

Children

The Service is for people aged 16 and over. We do not knowingly collect data from anyone younger.

International transfers

Account and expense data are stored in the European Union. OpenAI, Vercel, Expo, Apple, Firebase, and PostHog may process data in the United States or other countries under their data-processing terms. Those countries may protect data differently from Serbia or the EU.

Analytics and tracking

We use technical and product events to keep the Service working. We do not sell your data. We do not use data for cross-app advertising tracking under Apple’s App Tracking Transparency.

Changes

We may update this Policy. The date at the top will change. If a change materially affects how we use your data, we will tell you in the app or by email when the law requires notice.

Contact

Privacy questions: kovtunovdesign@gmail.com