VezoroVezoro — Privacy Policy
Effective date: 1 November 2026 Controller: Petar Isaković, trading as PieraLabs (pieralabs.com), Belgrade, Serbia Contact: support@pieralabs.com
Vezoro ("we", "the app") is a household budget app. This policy explains what data we collect, why, who processes it, how long we keep it, and what rights you have.
1. What we collect
Account data. Email address, display name, chosen language, and your avatar choice. If you join a household, the other members can see your display name, email address and avatar.
Content you enter. Expenses, notes, categories, budgets and limits, bills (including optional photos), warranties (including optional photos), shopping list items (including optional photos), savings entries and goals, allowances, and comments or reactions on expenses. In a shared household this content is visible to every member.
Receipt scanning. When you scan a receipt, the image is sent through our server to a third-party processor (OpenAI, see section 4) to read the items and prices. We do not store the receipt image on our servers. The extracted text (merchant, items, prices) is saved as an expense only if you confirm it.
Detailed savings tips. To produce these, our server sends aggregated spending figures from your household (category totals, recurring items) to the same processor. Your email and name are not sent. Tips are generated automatically and are general information, not financial advice.
Technical and usage data.
- A push-notification token for your device (Firebase Cloud Messaging).
- The date of your last activity and an approximate country, derived on our server from your IP address when the app starts. We keep only the two-letter country code, not the IP address.
- If you agree to analytics (asked once at first launch; off by default; can be changed any time in Profile → "Anonymous usage analytics"): screen views, feature events (for example "expense added"), app language and plan type, and crash reports, collected through Google Firebase Analytics and Crashlytics under a pseudonymous identifier. We do not send amounts, names, notes or other content.
Purchases. When paid plans are available, payments are handled by Google Play (and RevenueCat for subscription status). We do not receive your card details.
We do not collect your precise location, contacts, or advertising identifiers.
2. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the app: account, sync between household members, reminders, reports | Performance of a contract (Art. 6(1)(b)) |
| Receipt scanning and detailed savings tips | Performance of a contract, and your choice to use the feature |
| Push notifications, reminder and recap emails (part of the service) | Performance of a contract (Art. 6(1)(b)); you can turn off push in device settings and unsubscribe from recap emails by writing to support@pieralabs.com |
| Analytics and crash reports | Consent (Art. 6(1)(a)); switch off in Profile |
| Last-activity and country data, abuse prevention, usage limits | Legitimate interests (Art. 6(1)(f)): security and fair use |
| Compliance with law | Legal obligation (Art. 6(1)(c)) |
3. What we do not do
We do not sell your data. We do not show advertising and do not use your data for advertising or profiling. We do not use your content to train AI models, and we do not give processors permission to do so.
4. Who processes your data
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions | EU |
| OpenAI | Reading receipt images; generating savings tips | United States |
| Google Firebase (Cloud Messaging, Analytics, Crashlytics) | Push delivery, analytics, crash reports | United States / global |
| Brevo | Sending transactional emails (welcome, password reset, reminders, recap) | France / EU |
| Google Play, RevenueCat | Payments and subscription status (when enabled) | United States / global |
Where data is transferred outside the EU/EEA we rely on the safeguards offered by the provider, such as Standard Contractual Clauses or the EU–US Data Privacy Framework. OpenAI states that, for API use, it does not use submitted data to train its models and may retain it for a limited period for abuse monitoring.
5. How we protect your data
We use technical and organisational measures appropriate to the risk. In particular:
- Data is encrypted in transit (HTTPS/TLS) between the app, our server and our processors.
- Our hosting provider encrypts stored data at rest.
- Each household's data is separated by database access rules (row-level security): you can read and change only data of households you belong to. Photo storage buckets are private.
- Secret keys and API credentials are kept only on the server, never inside the app.
- Server logs record technical identifiers and status, not the amounts or text of your expenses.
- Access to administrative systems is limited to the developer.
No online service can be guaranteed completely secure. If we become aware of a personal data breach that is likely to result in a risk to you, we will notify the competent authority and, where required, you, without undue delay.
6. How long we keep data
- Account and household data: until you delete your account or household.
- Items you delete move to the in-app Trash, where you can restore them or delete them permanently.
- Weekly backup snapshots (Premium): a limited number of the most recent snapshots are kept and rotated.
- When you delete your account, your account and profile are deleted. In a shared household, entries you created may remain available to the remaining members.
- Crash and analytics data: according to Google's retention settings for the project (we configure the shortest practical period).
- Technical logs: kept for a limited period for security and troubleshooting.
7. Your rights
Depending on where you live (EU/EEA, UK, Serbia and elsewhere) you may have the right to access, correct, delete, restrict, or export your data, to object to processing, to withdraw consent, and to lodge a complaint with your data protection authority.
- Correct your name, email and language in the app.
- Export your data from the app (backup file, CSV, Excel, PDF).
- Delete your account in the app (Profile → Delete account), on the web at https://vezoro.app/delete-account/, or by writing to support@pieralabs.com. We respond within 30 days.
- Turn off analytics in Profile, and control notifications in the app and in your device settings.
8. Households
When you create or join a household you choose to share content and your name, email and avatar with its members. Anyone who has the household invite code can request to join; share it only with people you trust. Leaving a household removes your access to it.
9. Children
Vezoro is intended for people aged 16 and over. We do not knowingly collect data from children under 16.
10. Changes
We may update this policy. Material changes will be announced in the app or by email, and the effective date above will change.
11. Contact
Petar Isaković, trading as PieraLabs (pieralabs.com), Belgrade, Serbia — support@pieralabs.com