Privacy Policy

Stewardly AI (“Stewardly”, “we”, “us”, or “our”) is a personal finance app that helps you track bills, loans, and subscriptions using AI-powered document scanning. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Stewardly mobile application and related services.

Stewardly AI is developed and operated by Lee Patrick Glenn Villarasa, based in Cebu, Philippines. By using Stewardly, you agree to the practices described in this policy.

1. What data we collect

We collect only what we need to provide the app's features:

Data you provide directly

• Email address— for account creation, login, and occasional product updates. You can unsubscribe from marketing emails at any time.
• Financial data— bill amounts, due dates, loan balances, subscription costs, and expense records you enter or scan into the app. This data is created by you, not sourced from banks or financial institutions.
• Photos and videos— images of bills, receipts, or loan documents you take for AI scanning. These are processed to extract financial details and are not shared with third parties for advertising.
• Audio data— voice recordings when you use the voice input feature to log expenses or bills. Processed for text extraction only.

Data collected automatically

• User ID— a unique identifier for your account, used to sync data across your devices.
• Product interaction data— how you use the app (features used, screens visited, actions taken). Used to improve the product, not to build advertising profiles.
• Crash and performance data— diagnostic information if the app crashes or experiences errors, so we can fix bugs and improve stability.

2. What we do NOT collect

• We do not connect to your bank accounts or financial institutions.
• We do not access your contacts, location, or browsing history.
• We do not use your data for cross-app tracking or targeted advertising.
• We do not sell, rent, or share your personal data with data brokers or advertisers.

3. Why we collect your data

• To provide the service — store your bills, track due dates, send reminders, and power the AI scanning features.
• To improve the app — understand how features are used so we can make Stewardly better.
• To communicate with you — send account-related notifications and occasional product updates (you can opt out).
• To fix bugs — diagnose crashes and performance issues.
• To comply with legal obligations — respond to lawful requests from authorities when required.

4. How we store and protect your data

• Encryption at rest — your data is encrypted using AES-256 when stored on our servers.
• Encryption in transit — all data transmitted between your device and our servers is protected with TLS 1.3.
• Offline-first architecture — your financial data is stored locally on your device first. It syncs to our secure cloud servers when you are connected to the internet.
• Access controls — only authorized personnel can access production systems, and access is logged.
• Regular security reviews — we regularly review our security practices and infrastructure.

While no system is 100% secure, we take commercially reasonable measures to protect your data. If we become aware of a data breach that affects your personal information, we will notify you in accordance with applicable law.

5. Third-party services

We use the following third-party services to operate Stewardly:

• OpenAI (GPT-4o)— powers our AI bill scanning and chat features. When you scan a bill or use the AI chat, the image or text is sent to OpenAI's servers for processing. OpenAI's API data usage policy states that API inputs and outputs are not used to train their models. See OpenAI's Privacy Policy.
• Supabase— provides our backend database and authentication services. Your account data and synced financial records are stored on Supabase's infrastructure.
• Apple (App Store)— handles app distribution and in-app purchases/subscriptions. Apple processes payment information directly; we do not see or store your credit card details.

We do not share your financial data with any third party for marketing, advertising, or data brokerage purposes.

6. Your rights

Regardless of where you live, you have the following rights regarding your data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we permanently delete your account and all associated data.
• Export — export your data in a portable format from within the app.
• Withdraw consent — withdraw your consent to data processing at any time (this may affect your ability to use certain features).
• Object — object to processing of your data for specific purposes.

How to request data deletion

You can delete your account and all associated data at any time by going to Profile → Account Settings → Delete Account in the app. Alternatively, email us at hello@stewardlyai.com with the subject line “Delete My Account” and we will process your request within 30 days.

For Philippine residents (RA 10173)

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to file a complaint with the National Privacy Commission, and to receive damages for unauthorized processing of your personal data.

For EU/EEA residents (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is your consent (which you can withdraw) and our legitimate interest in providing and improving the service.

For California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell your personal information.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete all your personal and financial data within 30 days, except where we are required to retain certain records by law (e.g., for tax or legal compliance purposes).

Crash and performance diagnostic data is retained for up to 90 days and then automatically deleted.

8. Children's privacy

Stewardly is rated 4+ on the App Store and is designed for general audiences. However, we do not knowingly collect personal data from children under the age of 13. If we become aware that we have collected data from a child under 13, we will delete it immediately. If you believe a child under 13 has provided us with personal data, please contact us at hello@stewardlyai.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The “Last updated” date at the top of this page reflects the most recent revision.

10. Contact us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your data is handled, contact us: