AI Disclaimer

最終更新： 2026-10-16

What Bao actually does

FinTracker uses on-device processing and optional online AI for:

Voice entries: on-device speech transcription followed by online parsing of the resulting text.
Receipt scans: on-device image recognition followed by optional online parsing of recognized text.
Bao chat: answering natural-language questions about your money ("how much did I spend on groceries last month?").
Weekly insights: pattern detection across your spending and savings, written up as a short narrative.

Who powers the AI

Online AI requests travel through our Supabase relay to the configured provider. Requests may include voice transcripts, Bao messages, compact financial summaries, or receipt OCR text. Audio, receipt photos, and statement files stay on your device. OpenAI does not train on API inputs by default. FinTracker disables stored OpenAI completions, but default abuse-monitoring logs may still retain content for up to 30 days, subject to OpenAI’s stated exceptions. This is not a zero-data-retention service.

The service supports OpenAI, plus Anthropic and Gemini alternatives for some features. Provider processing can occur outside the EEA. We will update this page before materially changing the data sent or its purposes.

Blog narrations use the open-source Kokoro-82M text-to-speech model (Apache 2.0). The audio you hear was rendered on a laptop, not from a live AI service. No part of you or your data is involved in producing the recording.

What gets sent, and what doesn’t

Voice transactions: speech-to-text runs on your iPhone. Audio is not sent to FinTracker’s AI service. The short transcript and selected category and account names travel through our EU relay to the configured AI provider for parsing.
Bao chat: your question, recent messages, and compact on-device totals for categories, budgets, goals, and streaks are sent for a reply. We do not send the entire saved ledger; text you enter can still contain sensitive details.
Weekly insights: when enabled and enough history exists, a compact summary can be sent automatically once per week and the result cached on your device. You can turn this off in Privacy & data.
Receipt scans: the photo stays on your iPhone. Recognized text is masked for obvious card and bank details before AI parsing, but masking may miss sensitive information. Review every suggestion before saving.
Statement import and rates: CSV and PDF statement files are parsed on-device. Exchange-rate suggestions can contact Frankfurter with a currency pair and date; the suggested rate is editable.
Purchase security and fair-use counters: our server checks an Apple-signed subscription, matching RevenueCat access and an App Attest request proof before paid AI processing. It stores voice, chat, scan and insight counts under a pseudonymous Apple purchase identifier, plus limited app-key and replay-prevention records. Requests also include a random installation identifier. See the Privacy Policy.

What AI is good at, and where it gets things wrong

AI is useful for:

Extracting structured data from your messy spoken or typed input.
Surfacing patterns you might miss in your own spending.
Answering questions in plain language.

AI can and does:

Make mistakes: wrong amounts, wrong categories, wrong dates.
Hallucinate: invent details or claim certainty about things it doesn’t know.
Misinterpret context: especially currency, slang, or shorthand.

Always verify amounts before saving a transaction. Always sanity-check Bao’s answers against your actual records. Bao is a helper, not an authority.

Bao is not a financial advisor

Bao’s suggestions, insights, and chat answers are informational only: not professional advice. We do not assess your suitability for financial products, your tax situation, or your investment risk profile.

For regulated advice. Pensions, investments, mortgages, tax planning. Please speak with a qualified, regulated advisor in your jurisdiction.

You’re in control

Here is what you control, and what never runs without you:

Voice logging runs only when you tap the mic. There is no background listening. Nothing is recorded, transcribed, or sent unless you start a voice entry yourself.
Bao chat runs only when you open it and send a message. Each message is its own choice. Nothing flows to the AI between messages.
The weekly insight is the one AI feature that runs unprompted: once a week, it sends the compact on-device summary described above. Turn it off in Settings → Privacy & data → AI features: with the toggle off, no new insight is generated and nothing is sent for it. An insight generated earlier may stay visible on your device.
Manual tracking works without online AI: transactions, budgets, goals, and statement import can run locally while you have active access. Apple Pay categorization also uses local rules. Receipt AI, voice parsing, Bao chat, and weekly insights require online access and an active trial or subscription. The launch edition is for adults 18 and older under the Terms.

You can use manual tracking without online AI. Voice, receipt AI, and chat need an explicit action; weekly insight can run automatically when enabled and enough history exists.

Data minimization

We send the least data needed to complete each AI task.
Voice audio never leaves your device. Transcription happens on your iPhone.
Chat summaries are generated on-device so we never send your full transaction history.
We do not use request content to train our own models. Review the configured AI provider’s published data controls and retention for its processing.

Future changes

If we add a new AI capability. Say, automatic budget recommendations or a new AI provider. We will update this page and announce the change before it goes live. Material changes that affect what data leaves your device will require your opt-in.