Privacy Policy

Effective from 12 October 2026

This is an English translation provided for convenience. The Vietnamese version (Chính sách quyền riêng tư) is the original text; if the two versions differ, the Vietnamese version prevails.

Tivelis is a personal finance app on the web (tivelis.com), Android, iOS and Telegram. This policy explains what data we collect, what we use it for, who we share it with, how long we keep it and what rights you have. We process personal data in accordance with Vietnamese law, including Decree No. 13/2023/ND-CP on personal data protection (Nghị định 13/2023/NĐ-CP).

Privacy contact: [email protected].

1. Data we collect

Account information

Username, display name and password (stored only as a one-way hash; we cannot read your password).
If you sign in with Google: your email address and Google account identifier.
If you link Telegram: your chat ID and Telegram name, so the bot can send and receive messages for you.

Financial data you enter

Income and expense transactions, wallets, budgets, recurring transactions, debts, assets, goals, categories and notes.
Receipt or document photos you attach to debts or assets.
Sentences you type into the chat box or send to the Telegram bot to record transactions.

We do not connect to your bank accounts, e-wallets or cards, and we do not collect card numbers or bank passwords.

Technical data

The device token used to receive push notifications (Firebase Cloud Messaging), if you allow notifications.
Server logs: IP address, time, request path and error code, used to operate the service, prevent abuse and fix bugs.

The app shows no advertising, does not use advertising identifiers and does not sell your data.

2. What we use data for

Providing features: storing and displaying your income and expense records, reports, debts, assets and goals; syncing between the web, your phone and Telegram.
Sending the notifications you have turned on: entry reminders, debt due dates, budget overruns, asset changes and account notices.
AI features: understanding the sentences you type to create transactions, suggesting categories, analyzing spending and making suggestions for goals.
Security, fraud prevention, troubleshooting and improving the accuracy of the sentence reader.

3. Sharing with third parties

We share only the data that is necessary with the following service providers, in order to operate Tivelis:

AI model providers: Google (Gemini), Anthropic (Claude) and OpenAI, through Tivelis's servers: the text of the entries you type, lists of transactions and categories, or aggregated spending and goal figures when you use AI features. These providers process the data only to return results to you and do not use your data for advertising. We do not send passwords, email addresses or receipt photos to AI.
Asking before using AI: the phone app sends data to AI providers only after you tap "Allow" in the consent dialog. You can turn this on or off at any time in Settings → "Allow AI features". When it is off, the app can still record entries with a reader that does not use AI, and we also do not use AI for your account on the web and Telegram.
Google: Google sign-in and Firebase Cloud Messaging for push notifications.
Apple: the push notification service on iPhone.
Telegram: only if you link the bot; messages between you and the bot pass through Telegram.
Cloudflare and our hosting providers: transmitting, protecting and storing data.

Stock, gold and cryptocurrency prices and logos are fetched from public sources; these requests do not contain your personal information. We provide data to government authorities only when required by law.

Debt-share links

When you choose to share a debt as a link (tivelis.com/n/…), anyone with the link can see the names you entered for yourself and the other person, the original amount, the amount paid, the remaining balance, the due date, and the date and amount of each payment. The debt's note is shown only if you turn on "Include note"; notes on individual payments are never shown. You can turn the link off or create a new one at any time in the app; links expire automatically after 60 days, link pages are not indexed by search engines, and deleting the debt also deletes its link. When you share an image instead, the image is created on your phone and does not pass through Tivelis's servers. The tivelis.com website keeps access logs (IP address, browser information, and the page path with the link code removed) for security and abuse prevention; these logs are capped at a small size and overwritten automatically.

4. Storage and security

Data is transmitted over HTTPS and stored on servers we manage. Receipt photos can only be opened when signed in to the account that owns them.
Account data is kept for as long as you use the service and is deleted when you delete your account.
Server logs are kept for up to about 30 days.
System backups may still contain deleted data until they are overwritten according to the backup cycle.

5. Your rights

View and edit your data directly in the app.
Download a copy of your data in Settings on the web version.
Turn off each type of notification and unlink Telegram at any time.
Delete your entire account and data: see the account deletion instructions.
Turn off the use of AI directly in the app (Settings → "Allow AI features").
Withdraw your consent, object to processing or request restriction of processing by emailing us. We respond within 15 working days.

6. Children

Tivelis is not intended for children under 13, and we do not knowingly collect children's data. If you know that a child has created an account, please tell us so we can delete it.

7. Changes to this policy

When we make significant changes, we will update the effective date at the top of this page and notify you in the app.

8. Contact

Email: [email protected]