Privacy policy

Who we are

Brila is made by Muneeb Rafi, an individual developer in Pakistan (“we”, “us”). We are responsible for the information described in this policy (the “controller” under data protection laws such as the GDPR). Contact: muneebrafishakoor@gmail.com.

Information that stays on your iPhone

Everything you enter in Brila (transactions, accounts, categories, budgets, bills, receipt photos and other attachments, presets, payments you log with Siri or Shortcuts (for example after paying with Apple Pay), and your settings) is saved in the app’s storage on your iPhone. We never receive it.

Widgets, Siri, Shortcuts and Control Center read the same data on your iPhone. App lock uses Face ID, Touch ID or your passcode through iOS: the app only learns whether it worked and never sees your face, fingerprint or passcode.

Reminders and bill alerts are scheduled on your iPhone by iOS. They are never sent from a server, and the app doesn’t use push notifications.

Your iPhone’s own iCloud Backup may include the app’s data, depending on your iOS settings. Apple handles that under its own terms.

Backups, exports and imports

When you back up, the app saves a file on your iPhone and, when iCloud Drive is on, in the Brila folder of your own iCloud Drive. With Brila Plus, weekly automatic backups go to the same places (the newest 4 are kept). When you export a spreadsheet (CSV) or share a backup, the file goes wherever you choose in the share sheet. An import reads only the file you pick. We can’t see any of these files. Apple’s terms and privacy policy apply to iCloud.

AI features: voice, typed entry and scan

These features are optional. Before your first use, the app shows what is sent and who processes it, and asks your permission first. Until you agree, the app doesn’t contact our AI server at all, and nothing is sent unless you then use one of the features.

What is sent: the recording (up to 60 seconds), the text you type, or the photos you take or pick, screenshots or PDFs, together with your category names, your main currency, today’s date and a language and region code (the app’s, or for voice the voice language you chose, such as en-US).

Nothing else from the app is added: never your saved balances, accounts or other transactions. But a file is sent exactly as it is, so a screenshot or bank statement sends everything shown on it (such as your name, account numbers, balances and other transactions).

Photos and screenshots are converted on your iPhone before they are sent (a JPEG, at most 1024 pixels on its longest side). This removes the hidden details a photo can carry, such as the place it was taken (GPS). If a photo can’t be converted, it isn’t sent. PDFs are sent as they are.

Where it goes: over an encrypted connection to our server, hosted by Supabase, which passes it to OpenAI. OpenAI reads the amounts, merchants and dates and the result comes back to your iPhone, where you review it before anything is saved. Our server doesn’t store what you sent or the result. Each request is sent with the anonymous AI ID (below), so the limits and the subscription check work; what you sent isn’t stored with it.

OpenAI doesn’t use data sent through its API to train its models (we haven’t opted in to share it). OpenAI keeps API data in abuse-monitoring logs for up to 30 days, unless the law requires longer, and then deletes it.

The anonymous AI ID

The first time you use an AI feature, our server creates a random anonymous ID for your copy of the app so the daily and monthly limits and the subscription check can work. It isn’t linked to your name, email address, phone number or Apple Account, and it’s never used for tracking or advertising.

Under that ID we keep how many AI requests of each kind were made each day and what they cost us (deleted after 35 days), and a log of each request: the feature, the AI model, size counts such as tokens or seconds of audio, how many transactions were found, what the request cost, whether it worked, the time and any error code (deleted after 30 days). Never what you sent or the result.

To check that AI requests come from a Brila Plus subscriber, we also keep the subscription check described under Purchases with the ID, for up to 35 days after the last check.

The ID itself stays on our server while the AI features are offered, together with the dates it was created and last used, and the IP address and device and app type (user agent) of its latest sign-in. Once the ID exists, the app renews that sign-in with our server from time to time while the app is open, even when you don’t use AI.

Like any online service, Supabase also keeps technical logs when the app connects (such as IP address, time and error codes) for security; they are deleted after 7 days.

Delete all data doesn’t remove the ID. Deleting the app removes it from your iPhone: if you install the app again, you get a new ID and the old one is never used again.

Exchange rates

To convert between currencies, the app downloads public tables of daily exchange rates from jsDelivr (cdn.jsdelivr.net) or, if that fails, Cloudflare (currency-api.pages.dev). It gets the latest rates at most once every 6 hours when the app runs.

When you change your main currency, the app also downloads past rates for each date that has transactions, so it can convert your history. These requests show which currency and which dates they are for. Nothing else about you or your data is sent. Like any website, these services see your IP address.

Purchases

Purchases are made through Apple, which handles the payment: we never see your card or payment details. We use RevenueCat to check whether you have Brila Plus. The app contacts RevenueCat each time you open it, even if you never buy anything.

RevenueCat receives a random anonymous ID it creates for your copy of the app, your App Store purchase history, and technical details: the app version, iOS version, iPhone model, preferred languages, App Store country, the identifier Apple gives our apps on your iPhone (the identifier for vendor, not the advertising identifier) and your IP address.

When you use an AI feature, the app also sends this RevenueCat ID with the request, so our server can ask RevenueCat whether you have Brila Plus. The server keeps the answer (whether the plan is active, which plan, whether it is in its free trial, when it ends, and whether it is a test or a real purchase) with the RevenueCat ID and the anonymous AI ID, together with the store, product and first purchase time of the subscription, so one subscription can’t be shared by unlimited devices. This is deleted 35 days after the last check.

Emails to us

If you email us, we receive your email address and what you write. Emails started from Settings (Report a bug, Feature request, Help us improve) also include the app version, iPhone model, iOS version, language, main currency and the app’s install ID (a random ID made on your iPhone; it isn’t the AI ID and isn’t linked to it), plus, only when they help, your App Store country with the currency of its prices and a short code if the microphone didn’t start, so we can help; you can delete them before sending. Our email is hosted by Google (Gmail). We use emails only to answer you, and delete them 2 years after our last message.

Crash reports

Brila has no analytics or crash-reporting tools of its own. If you have turned on Share With App Developers in iOS Settings (Privacy & Security › Analytics & Improvements), Apple shares crash reports and usage statistics with us in a form that doesn’t identify you.

Why we use information

We use the information above only to run the features you choose: reading your AI requests, applying fair daily limits and keeping the service secure, checking your purchases (also before an AI request), converting currencies and answering your emails, and to understand, in totals, how many people subscribe and use each AI feature.

Under the GDPR, our legal bases are providing the service you ask for (performing our agreement with you) and our legitimate interests in keeping the service safe, reliable and affordable (daily limits, security and error logs).

We don’t sell or share personal information (as the California Consumer Privacy Act uses those words), and we don’t use it for advertising, profiling or automated decisions that affect you. Because we don’t track you, we don’t respond differently to Do Not Track signals.

Service providers

Our service providers: Supabase hosts our server (its database is in India; the AI functions may run in the data centre nearest to you) and handles the AI requests, the anonymous ID and the usage records. OpenAI (United States) reads voice, typed text and scans. RevenueCat (United States) checks purchases, for the app and for our server before an AI request.

We only use providers that protect your information at least as well as this policy describes, and they may use it only to provide their service to us.

Others handle some information under their own privacy policies: Apple provides the App Store, iCloud, notifications and the optional crash reports; jsDelivr and Cloudflare serve the public exchange-rate files and see only the requests described above; Google hosts our email (Gmail).

This means your information may be processed outside your country, including in India, the United States and Pakistan (where we are). Where the law requires it, these transfers rely on the providers’ Standard Contractual Clauses or an equivalent safeguard; email us for details.

How long information is kept

On your iPhone: until you delete it, use Delete all data or delete the app. On our server: the daily AI counts 35 days and the AI request log 30 days, never the content; the subscription check (the RevenueCat ID and its answer) 35 days after the last check; the anonymous ID (with the IP address and user agent of its latest sign-in) while the AI features are offered; technical logs 7 days. At OpenAI: up to 30 days. At RevenueCat: as long as needed to provide your purchases. Emails: 2 years after our last message.

Your choices and rights

Settings → Delete all data (the last item in Settings) erases, on this iPhone, everything you entered, your receipt photos and attachments, and the backup copies the app keeps there. It keeps your language, your purchase, your answer to the AI notice and the anonymous AI ID. Temporary copies made while you used the app (such as a voice recording, a picked PDF or an exported file) stay in the app’s cache until iOS clears it. Deleting the app removes all of this from your iPhone.

Backup files in iCloud Drive or the Files app stay until you delete them there (Files › iCloud Drive › Brila).

To stop AI, don’t use voice, typed AI entry or scan: no AI request is sent otherwise. Turn reminders off in the app, or notifications off in iOS Settings.

Depending on where you live (for example in the EU, the UK or California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to complain to your local data protection authority. We won’t treat you differently for using these rights.

For any privacy request, email muneebrafishakoor@gmail.com. We reply within 30 days. Because the server records are tied only to a random ID, not to your name or email address, we may not be able to find them from your email alone; the usage records are deleted automatically within 35 days anyway.

Children

Brila isn’t directed to children under 13 (or the minimum age in your country), and we don’t knowingly collect information from them. If you think a child has sent us information, email us and we’ll delete it.

Security

Your data on the iPhone is protected by iOS, and by app lock if you turn it on. Everything the app sends travels over encrypted connections (HTTPS). Our server keeps no content, and its database can only be reached by the server itself.

Changes to this policy

This policy is effective from 18 October 2026. If it changes, we’ll update the date at the top and, for significant changes, tell you in the app.

Contact

Questions about privacy: muneebrafishakoor@gmail.com (Muneeb Rafi, Pakistan).