Siaupoa · Last updated: 15 October 2026
Siaupoa ("the App") is developed and operated by Goodsvalu Inc. ("we", "us"). For any privacy question, contact support@goodsvalu.com.
Your bookkeeping data is stored only on your device. The following information is kept in a local database on your phone and is never uploaded to our servers:
Backups are created only when you request them. You choose where to save or share the backup file using your device’s share menu, such as your personal cloud storage, email, or local storage. We do not receive or store your backup files.
Your bookkeeping data stays on your device unless you explicitly use a feature that requires data to be sent. There are only four cases:
| You do this | What is sent | To whom |
|---|---|---|
| When you take or select a receipt photo and confirm it | The receipt image, resized and converted to JPEG on your device before being sent | Our server, then securely forwarded to our AI provider |
| When you type or dictate a description and tap Submit | That text | Our server, then our AI provider for processing |
| When you open the subscription screen, or — while you are signed in — when you open Reports or Settings, or tap Export after the first 30 days | An identifier, and a request to check your subscription status or look up current prices | Our subscription provider |
| When you finish signing in | The date and time you first opened the App on this device, with your account identifier and your device identifier. No bookkeeping data. | Our server |
| While you are signed in, when you open Settings | A request for how much of this month’s free AI recognition allowance you have left, with your account identifier and your device identifier. No bookkeeping data, and no email address. | Our server |
The first two occur only after you have given consent through the in-app consent screen, and only when you submit an AI recognition request. Along with the receipt photo or text you submit, the request includes the names of your expense categories and subcategories so the AI can select a category that already exists in your books. It also includes the current date, your app version, your device identifier, and a randomly generated one-time request identifier. The device identifier is used only to keep the free allowance from being claimed repeatedly; our server converts it into a one-way hash and stores only the hash, and it is never passed on to our AI provider (see section 6).
The third case — checking your subscription status — is not covered by the AI consent screen because it does not involve your bookkeeping content. No receipt photo, recognition text, transaction data, or email address is sent for this purpose.
The App sends only an identifier, used solely to determine whether you have an active subscription. While you are signed in, this is your account identifier. While you are signed out, the App does not contact the subscription provider at all — a subscription can only be purchased while signed in, so there is nothing to check. The one exception is the subscription screen itself: if you open it while signed out, the App asks for the current prices in your local currency, and our subscription provider generates an identifier for that App installation. No account identifier is sent, because you do not have one.
The fourth case — the allowance check on the Settings screen — goes to our own server, not to any third party, and is a read-only query: it does not use up any of your allowance and sends none of your bookkeeping content. It happens only while you are signed in, because there is no allowance to look up otherwise.
The App contacts the subscription provider only when it needs to check your subscription status or show you current prices. Simply opening the App, entering transactions, or viewing your books does not send your bookkeeping data to us or to the subscription provider.
The App does not include its own speech-recognition feature and does not request microphone access for this purpose. When you dictate an entry, you are using your phone keyboard’s built-in dictation feature, which is provided by your operating system. The App receives only the resulting text. No audio is ever recorded, accessed, or transmitted by the App.
AI recognition requests pass through our server before reaching the AI provider so we can track usage and manage service costs. Our server does not store the content you submit. Its database has no fields designed to store receipt images or the text you provide. This protection is built into the system's architecture, rather than relying solely on a promise not to retain your content.
| Stored | Why |
|---|---|
| Your email address and your account identifier | To keep your monthly free AI recognition allowance associated with your account rather than with a specific device. |
| The number of AI recognitions used during the current calendar month, associated with the hashed identifiers described below rather than with your account. | To enforce the free AI recognition allowance and prevent it from being reset or claimed again by deleting and re-creating an account. |
| For each AI recognition request: the timestamp, input type (photo or text), whether the recognition succeeded or failed, token usage, processing cost, response time, AI model used, app version, and a one-time request identifier. | To track service costs, detect abuse, and troubleshoot technical issues. |
| Your subscription tier (Siaupoa Base or Siaupoa Plus) and its expiration date | Your subscription status, including which subscription you have, determines your monthly AI recognition allowance. To ensure the correct allowance is applied, our server verifies your subscription status directly with our subscription provider and stores the result. |
| The earliest date and time on which the App was first opened by you, associated with the hashed identifiers described below rather than with your account. | Export and creating backups are free for the first 30 days after you first open the App. This record keeps that period from starting again when the App is reinstalled, moved to another device, or the account is deleted and re-created. |
| One-way, salted hashes of your email address and device identifier. Only the hashes are stored — never the original email address or device identifier. | This allows the monthly AI recognition allowance and the 30-day free period for export and backups to remain consistent even if an account is deleted and re-created. Without these limited records, deleting an account and signing up again could incorrectly grant a new free allowance each time. |
No advertising identifiers — there is no advertising in the App. The App uses a device identifier provided by your operating system (Apple’s Identifier for Vendor, or Android’s SSAID) only to prevent the free AI recognition allowance from being claimed repeatedly. It is not used for advertising or to track you across other apps or websites, and it is never sent to our AI provider. Our server converts the identifier into a one-way hash and stores only the hash, not the original identifier. Separately, our subscription provider generates its own identifier for the App installation. This is used to associate the installation with the correct subscription. It is kept separate from the hashed device identifier described above and is not used by us for advertising or cross-app or cross-website tracking.
An account is required only for AI recognition. You sign in with your email address and a one-time code sent to your email — no password is required or stored. All other features in the App work without an account.
The account is used to keep your monthly free AI recognition allowance consistent across reinstalls and device changes. Without an account, reinstalling the App could incorrectly grant a new free allowance. Your email address is used only for account access and is not used for marketing. We send you only the sign-in codes needed to access your account. A session credential is stored using your device’s secure credential storage.
| Who | What they receive | Where |
|---|---|---|
| Anthropic PBC, a third-party AI provider | The receipt photo or text you submit, along with the names of your expense categories and subcategories and the current date | United States |
| Resend, our email delivery provider, solely for sending sign-in codes | Your email address, used to send you a one-time sign-in code | United States |
| RevenueCat, our subscription provider | An identifier associated with the App installation or your account, along with subscription events such as when a subscription is started, renewed, cancelled, or expires. Your email address and bookkeeping data are never included. | United States |
| Supabase (our hosting and authentication provider) | The usage records described in Section 4. Receipt photos and submitted text pass through our server only in memory during processing and are not stored. | Servers located in Tokyo, Japan |
Anthropic processes the receipt photo or text you submit to extract information such as the amount, date, and merchant. Under Anthropic’s Commercial Terms, content submitted through the API is not used to train Anthropic’s models. Anthropic processes this content only to return the result to us, under its Commercial Terms and data processing terms, and generally deletes it within 30 days, keeping it longer only if it is flagged for a usage policy violation. These terms give your content the same or equal protection as described in this Privacy Policy. You are asked for your consent in the App before any of this content is sent, the consent screen names Anthropic and lists what is sent, and you can withdraw consent at any time in Settings > Privacy.
We never see your payment details. Subscriptions are processed and charged by the applicable app store — Google Play or Apple’s App Store. Your card details and other payment information remain with the app store and are never sent to us or to RevenueCat.
We do not sell your personal data. We share data only with the service providers described in this Privacy Policy, and only as necessary to provide and operate the App.
We are established in the United States. If you are located outside the United States, when you submit a receipt photo or text for AI recognition, that content is transferred to the United States for processing by Anthropic PBC. Before the first such transfer, the App informs you of this transfer through the AI consent screen and asks for your consent. The transfer occurs only when you choose to use AI recognition and submit content for processing.
The usage records described in Section 4 are stored on servers located in Japan and may be accessed by us from the United States.
Delete your account: Go to Settings → About & Support → Delete Account. Deleting your account permanently deletes your account, email address, and the per-request usage records described in Section 4. Limited allowance-related records are retained after account deletion: the one-way, salted hashes described in Section 10, your AI recognition usage count for the current calendar month, and the date you first opened the App. These records are retained only to prevent the free AI recognition allowance or the 30-day free period from being reset or claimed again by deleting and re-creating an account. The current-month usage count is deleted when the relevant calendar month ends. See Section 10 for more information.
Deleting your account does not delete the bookkeeping data stored on your device, because we do not have access to that data. It also does not cancel an active subscription. Subscriptions are managed through your Google Play or Apple account and must be cancelled through the applicable app store.
The App is intended for adults. Our Terms of Service require you to be at least 18 years old to use the App, and the App is not directed to or designed for children. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a child, we will take reasonable steps to delete it.
If we change how we handle your data in a way that materially affects you, we will update this Privacy Policy. If a change affects how your data is processed for AI recognition and requires new consent, we will ask for your consent again within the App rather than relying on consent you previously provided.