Privacy policy

What we collect

Your account: your email address and, if you sign in with Google or Apple, the name they share. Sign-in is handled by Clerk.

What you record: transactions (amount, direction, description, category, date), wallets and their currencies, reminders, and the sentence you said or typed for each voice entry. When you fix a voice entry, the fix is kept so the same mistake isn’t repeated.

Usage counts: how many voice messages you sent this month, to apply the free plan’s limit.

Payments: if you subscribe, Lemon Squeezy (the merchant of record) processes your payment. We receive your subscription status, plan and email, never your card details.

How voice works

Your phone’s speech recognizer (from Google on Android, Apple on iOS) turns what you say into text, under their own privacy terms.

To find the transactions, that text is sent to z.ai. For a second, more accurate hearing, the short recording (up to 30 seconds) may also be sent to z.ai. Recordings are deleted from your phone right after.

Typed sentences in the voice screen are sent to z.ai the same way. Entries you add by hand are not.

Ads on the free plan

On the free plan, Qolha shows a few ads served by Google AdMob, and you can choose to watch an ad for more voice messages. Qolha Pro shows no ads.

Google may collect your device's advertising identifier, IP address and how you interact with ads, to show, measure and (where you allow it) personalize them, under Google's privacy policy (policies.google.com/privacy). We never share your transactions, wallets, voice entries or other records with Google or any advertiser.

When you watch an ad for voice messages, Google tells our server your account id and that the ad finished, so we can add the messages.

Where the law requires it (for example in the EEA, UK and some US states), Qolha asks for your consent before personalized ads, and you can change your choice in Settings → Ad privacy choices. On iPhone, ads are personalized only if you allow tracking. You can also reset or limit your advertising identifier in your phone's settings.

Notifications

Reminder notifications are scheduled on your phone from your reminders; nothing about them is sent anywhere to show them.

If you allow notifications, the app also saves a push token for your phone with your account, so we can send you messages about your plan or the app. Pushes travel through Expo and, on Android, Google Firebase Cloud Messaging, or Apple Push Notification service on iPhone. They never contain your transactions.

Turn notifications off any time in Settings → Notifications or in your phone’s settings. Signing out or deleting your account removes the push token.

Who processes your data

Clerk (sign-in), Supabase (database and server functions), z.ai (speech recognition and understanding what you said), Lemon Squeezy (payments and tax), Google AdMob (ads on the free plan), Expo and Google Firebase (push notifications). Exchange rates are fetched from Coinbase and open.er-api.com without any personal data.

These providers process data only to run the service. Some are outside Egypt, so your data may be transferred internationally.

How we protect it

Data travels encrypted. In the database, access rules make sure each account can read only its own records. Keys for the AI and payment services stay on our servers, not in the app.

Keeping and deleting your data

We keep your data while you have an account. You can export everything (Settings → Export) and delete all transactions at any time.

Settings → Delete account permanently removes your account and all its data, and stops a paid plan from renewing. Payment records Lemon Squeezy must keep by law stay with them.

Children

Qolha is not meant for children under 13, and we don’t knowingly collect their data.

Changes and contact

If this policy changes, we’ll update the date above and, for important changes, tell you in the app.

Questions or requests: support@qolha.online