Effective date: October 16, 2026
Service operator and entity responsible for data processing: Phạm Hải Sơn
Address: 528 Huynh Tan Phat Street, Tan Thuan Ward, Ho Chi Minh City, Vietnam
Contact email: support@psonco.com
1. Scope
This policy explains how GoldBuff collects, uses, shares, retains, and deletes data when you use the application or contact support.
GoldBuff is a tool for recording and summarizing personal income and expenses. GoldBuff does not request your bank login credentials, hold funds, or transfer money on your behalf.
We process the data necessary to provide the features you use. For AI content processing and optional usage analytics, we provide information and request your consent before proceeding.
2. Data We Process
| Data category | Information | Purpose |
|---|---|---|
| Account | Email address, account ID, and authentication information | Account sign-in, recovery, and protection |
| Financial records | Amounts, dates, income or expense types, descriptions, categories, book names, and account labels you enter | Storing, searching, editing, and summarizing records |
| AI processing content | Audio recordings, transcripts, text submitted for analysis, and suggested results | Converting your content into suggested transactions |
| Purchases and entitlements | Account IDs, transaction IDs, purchased products, subscription status, entitlement periods, and additional AI credits purchased | Verifying transactions, granting entitlements, restoring purchases, and providing support |
| AI operational metrics | Account and request IDs, models, statuses, processing times, token counts, audio durations, and information used to calculate costs | Managing usage limits and monitoring quality, reliability, and costs |
| Optional usage analytics | Account IDs, usage events, screens, action statuses, durations, app versions, platforms, and languages | Understanding usage and improving the application |
| Support and technical logs | Email addresses, content you submit to support, and technical information generated while providing the service | Handling requests, diagnosing errors, and protecting systems |
Account IDs and pseudonymous identifiers may still be linked to users. We do not consider this data anonymous simply because it does not contain a name or email address.
Please do not enter bank passwords, one-time passwords (OTPs), card security codes, or credentials for other services in your records.
3. Microphone Access and AI Processing
GoldBuff requests microphone permission when you use the recording feature. You may deny or revoke this permission in your device settings.
Before sending content to an AI service, GoldBuff requests your consent to share and process the data. When you consent and use this feature:
- Audio recordings are sent through GoldBuff’s backend to OpenAI for speech recognition.
- Transcripts or text submitted for analysis are sent to OpenAI to suggest transaction amounts, dates, descriptions, and categories.
- Results are returned for you to review, edit, and confirm before saving.
The content sent may contain personal information or financial data that you choose to speak or enter.
You can disable AI processing in Settings to stop using this feature. Declining AI processing or microphone access does not prevent you from entering transactions manually.
GoldBuff does not include audio recordings, transcripts, transaction content, or AI results in usage analytics events. Temporary storage of content for AI processing is explained in Section 7.
4. Service Providers and Data Recipients
We use the following providers as necessary to operate the service:
| Provider | Role and relevant data |
|---|---|
| Supabase | Provides authentication, database, and backend services; processes GoldBuff account data, records, entitlements, temporary AI data, analytics, and operational data |
| OpenAI | Provides speech recognition and content analysis; processes audio recordings, text, and the context needed to generate suggested transactions |
| Apple App Store | Processes payments and manages subscriptions and purchase history on iOS under Apple’s policies |
| RevenueCat | Verifies transactions, synchronizes entitlements, and supports purchase restoration; processes GoldBuff account IDs, purchase information, and necessary technical data |
| Hostinger | Provides email services for account-related communications and support; processes email addresses, message content, and necessary sending and delivery information |
We select and use providers under applicable service terms and data protection provisions. GoldBuff limits the data shared according to the purpose of each service.
We may also disclose data when necessary to comply with legal obligations or lawful requests from competent authorities.
5. Usage Analytics, Advertising, and Payments
Optional Usage Analytics
GoldBuff sends optional usage analytics events only after you enable usage data sharing in the application. You can disable this option in Settings.
These events are limited to information such as screens opened, actions performed, success or failure statuses, durations, and technical information about the application.
If you edit an AI result, we record only the type of field changed, such as the date or category. We do not record the values before and after the change.
We do not include amounts, balances, transaction descriptions, book names, audio recordings, transcripts, email addresses, passwords, or authentication information in analytics events. GoldBuff does not use session replay or automatically capture the content you enter.
These analytics are processed within GoldBuff’s Supabase infrastructure. Disabling analytics stops new collection but does not automatically delete previously collected data. You may request deletion by contacting support or deleting your account in the application.
Metrics necessary to operate AI requests, manage usage limits, and verify purchases are processed when you use the corresponding services, independently of the optional usage analytics setting.
Advertising and Other Analytics Services
The current version does not integrate AdMob advertising or send analytics events to PostHog.
If we add these services, we will update this policy and meet applicable notice and consent requirements before collecting or sharing data through the new services.
Payments
Payments on iOS are processed through the Apple App Store. GoldBuff uses RevenueCat to verify transactions and manage entitlements.
GoldBuff does not directly collect payment card numbers or card security codes used for App Store purchases.
6. Processing Purposes and Your Choices
We process data to:
- Provide the recording, synchronization, and reporting features you use.
- Process AI requests after you give consent.
- Verify purchases and provide entitlements.
- Protect accounts, manage usage limits, and prevent abuse.
- Provide support and resolve issues.
- Improve the application through usage analytics when you allow it.
- Fulfill applicable legal obligations.
Accepting the Terms of Use does not replace separate consent for AI processing or optional usage analytics.
You can withdraw your consent in Settings. Withdrawal stops new processing based on that consent but does not automatically delete data processed previously.
7. Data Retention
| Data type | Retention and handling |
|---|---|
| Account and records | Retained while your account is active to provide the service. Once account deletion succeeds, related data is deleted from GoldBuff’s active systems, except in the retention circumstances explained below |
| Temporary audio on your device | The application performs deletion when processing ends or you cancel the operation. Unexpected app closure or device errors may interrupt deletion |
| Audio on GoldBuff’s backend | Processed to complete the speech recognition request; GoldBuff does not intentionally maintain a long-term archive of audio recordings |
| Temporary transcripts and AI results at GoldBuff | Expire after 24 hours and are removed by scheduled cleanup tasks. Temporary retention supports request retries and helps prevent duplicate processing or usage charges |
| Usage analytics events and AI operational metrics | Have a retention period of 90 days; expired data is removed by scheduled cleanup tasks |
| Aggregated statistics that cannot identify individuals | Have a retention period of 24 months and are removed periodically |
| Entitlement and purchase information at GoldBuff | Retained to verify and provide entitlements while you use the service. Purchase history at Apple and data processed by RevenueCat are subject to each provider’s own procedures and retention periods |
| Support requests | Retained for as long as necessary to resolve requests, address related issues, and fulfill legal obligations |
| Infrastructure and email logs | Subject to the retention periods of the relevant services and the configurations in use. You may contact us for information about data associated with a specific request |
The time when data expires may differ from the time when a scheduled cleanup task finishes deleting it. We monitor cleanup operations to implement this retention policy.
Data at OpenAI
Processing and retention periods depend on the API used:
- For the audio transcription API, OpenAI’s current documentation states that content is not retained as application state or in abuse monitoring content logs.
- For text analysis, GoldBuff uses a configuration that does not store responses for later retrieval through the Responses API. However, content may still be retained in OpenAI’s abuse monitoring logs for up to 30 days under its default policy, or longer when legally required.
Further details are available in OpenAI’s API data policy.
Backups and Required Retention
GoldBuff does not currently operate an independent backup system. Copies or infrastructure logs maintained by providers, if any, are subject to the retention periods and handling procedures of the corresponding services.
Some records may need to be retained to fulfill legal obligations, resolve disputes, or investigate incidents. Such retention is limited to the necessary data, purposes, and periods. It does not automatically apply to all of your personal financial records.
8. Where Data Is Processed
Data is processed on GoldBuff’s infrastructure and by the providers listed in Section 4. Processing or storage servers may be located outside Vietnam or your country of residence.
You may contact support@psonco.com to ask about data processing locations and related safeguards.
9. Data Security
GoldBuff uses HTTPS connections, authentication, and access controls to help restrict unauthorized access to data.
We limit access to data according to operational needs and implement appropriate safeguards. No system can guarantee absolute security.
You are responsible for protecting your device and login credentials. Do not send passwords or OTPs to support.
10. Your Data Rights and Requests
Under applicable law, you may request access to, a copy of, correction of, or deletion of your data; withdraw consent; object to processing; or request restrictions on certain processing activities.
You can edit and delete records directly in the application. For other requests, please email support@psonco.com.
We may request information necessary to verify the account holder before processing a request. We will explain how the request will be handled, the expected timeframe, and the reasons if it cannot be fulfilled in full, in accordance with applicable legal obligations.
11. Account Deletion
You can delete your account at Settings → Delete account, or contact support@psonco.com for assistance.
When account deletion in the application completes successfully, your account and related records on GoldBuff’s systems are deleted and cannot be restored through the application. Analytics data linked to the account is also deleted. Aggregated statistics that cannot identify individuals may continue to be retained as described in Section 7.
This action does not automatically delete purchase history in your Apple account. Data held by providers is handled according to GoldBuff’s scope of control, the providers’ procedures, and applicable retention obligations. We accept related requests through our support email.
Uninstalling the application does not automatically delete your account or server-side data.
Important: Deleting your account does not automatically cancel an App Store subscription. You must manage or cancel your subscription in the Subscriptions section of your Apple account.
12. Age Requirements
GoldBuff is intended for users aged 18 and over and is not specifically designed for children.
If you believe someone below the required age has provided data to GoldBuff, please contact support@psonco.com so we can investigate and take appropriate action.
13. Policy Changes and Contact Information
We may update this policy when our features, providers, or data processing practices change. The effective date is updated at the top of this page.
We will provide appropriate notice of significant changes. If a change requires new consent, we will request it before implementing the relevant processing activity.
Please send any privacy questions or requests to:
PSON Company
528 Huynh Tan Phat Street, Tan Thuan Ward, Ho Chi Minh City, Vietnam
Email: support@psonco.com