Your information. Your choices.

1. About this policy

VULT is the budgeting service available through getvult.club, app.getvult.club and the VULT apps. In this policy, “we”, “us” and “our” refer to the VULT service operator. Contact us at [email protected] for privacy questions, a copy of this policy in another accessible form, or information about the operator.

This policy explains our handling of personal information. It is not a request for blanket consent to unrelated uses. Where a feature needs consent or a separate collection notice, that notice applies alongside this policy. Nothing here limits rights you have under applicable privacy law.

2. Information involved in using VULT

• Account and setup: email address, display name, account identifiers, sign-in/session records, age or birthday information supplied during setup, language, currency and preferences.
• Budget records: transactions, descriptions, amounts, dates, accounts and balances, budget groups and line items, income, goals, debts, recurring money and property details you enter.
• Receipts and statements: selected images or files, recognised text, merchant details, items, amounts, categories and the corrections you make.
• Conversations and feedback: household messages, purchase-linked comments, Finance Manager questions and answers, remembered preferences, public feature requests and private support messages.
• Membership: subscription status, plan, purchase identifiers and billing-provider confirmations. Payment providers collect the payment details needed for checkout; VULT does not directly store your complete card number.
• Technical information: installation and session identifiers, platform, app version, timestamps, permitted interaction events, network information and logs needed to deliver and protect services.

Receipts, transaction descriptions and questions can reveal sensitive circumstances, including health information. Avoid including sensitive details, tax file numbers, passwords, authentication codes or other people’s information unless necessary and you have authority to provide it. Do not assume that a free-text field automatically removes every identifier.

3. How information is collected and used

Information comes from what you enter, select, upload or share; from your use of the app; from people you choose to share a budget with; and from sign-in, billing and infrastructure providers. Automated processing can also produce classifications, summaries, estimates and other information about your records.

• Provide budgeting, transaction history, receipt processing, statement import, reports, goals, debts, reminders and app settings.
• Authenticate users, confirm membership and sync or share the records needed for the selected feature.
• Answer requested Finance Manager questions and provide the other AI-assisted features described below.
• Handle support, privacy requests, account deletion, billing queries and service communications.
• Protect accounts, enforce usage limits, investigate faults or abuse and meet applicable legal obligations.
• Understand app usage through the limited analytics described in this policy.

You can read the public website and use its public calculators without a VULT account. Account-based features and membership require identification. If you do not provide information needed for a particular feature, that feature may not work; you can choose manual entry instead of a cloud-assisted scan. Ask us whether a general enquiry can be handled anonymously or under a pseudonym.

4. Device storage, sync and shared budgets

The working budget is stored and calculated on your device. Local-first does not mean offline-only: signing in and using sync, household sharing, support or cloud-assisted tools involves online processing. A synced copy and saved onboarding progress can be associated with your account.

An accepted household invitation gives participants access to the shared budget and its conversations. Share only with people you trust and check which budget you are using before entering private information. Other participants may see, copy or export shared content. Leaving a household, clearing your own device or deleting your account cannot recall copies someone else has already made.

Public feedback submissions may be visible after moderation; private support messages are not intended for the public feedback board. Do not put private financial details in a public request.

5. AI-assisted processing

Finance Manager

Finance Manager is an AI feature, not a human adviser. When you ask a question, VULT’s server processes the request and provides selected budget context to OpenAI. This can include your current budget period, current-month totals, six months of cash flow, account balances, budget and line-item labels, goals, debts, recurring money, up to 12 recent activity descriptions, conversation context and a selected purchase when you ask about it.

The reduced budget context is designed to leave out account numbers, notes, receipt images and raw receipt-item text. Some identifiers in names are filtered, but information you put in a question or label may still identify you or another person. Do not send secrets or unnecessary sensitive information.

A private Manager thread retains the latest 60 messages and up to 12 remembered preferences, goals, routines or constraints. You can view Manager memory and use Start a fresh thread to clear the private conversation and memory. Private memories are not included in household replies; questions and replies sent through @manager are part of that household conversation.

The allowance is 30 successful replies per local day. Usage records enforce that allowance separately from conversation history; clearing a thread does not reset it. Proposed expense or income entries must be reviewed and saved by you before they are added.

Other assisted features

Cloud receipt processing can send the selected receipt image, recognised text, parser draft and budget options. Statement processing can send selected file content, extracted rows and categorisation context. Property lookup can use an address you type and online sources. Daily briefs and Financial Score narratives use the budget information needed to produce the requested explanation. Do not treat a property estimate as a valuation or Financial Score as a credit-bureau score.

Provider handling and accuracy

AI outputs may be inaccurate, incomplete or inferred rather than supplied by you. Review them before saving or acting on them, and contact us to correct personal information in an output. VULT’s current OpenAI requests disable response storage, but this is not a zero-retention guarantee. OpenAI’s API data controls describe default abuse-monitoring retention of up to 30 days, with longer retention in the legal and safety circumstances described there. OpenAI states that API data is not used for model training by default unless the API customer opts in. These provider rules are separate from VULT’s own conversation storage.

6. Receipt scans during onboarding

You can choose a cloud receipt scan during setup before creating an account or buying a membership. That path sends the image and budget options for processing. VULT stores the processed result privately; the onboarding workflow does not store the original image in VULT’s result storage. Provider processing and retention are described above.

A random scan token lets the app retrieve the result. Hashed token, installation and network identifiers support retrieval and abuse prevention. Current limits are 2 scan starts per device, 6 per network per day and 200 globally per day. A shared limit can temporarily prevent a scan even when your individual limit has not been reached.

Temporary results expire after 7 days and cannot then be retrieved through the normal status request. Physical cleanup happens when subsequent scan starts remove expired results, so expiry is not a promise that every stored copy is erased at exactly 7 days. A signed-in setup draft can retain the information needed to resume an unfinished scan. Saved transactions become ordinary budget records.

7. Analytics, browser storage and device permissions

Where app analytics is enabled, VULT sends installation/session identifiers, platform, app version, event names, timestamps and a limited set of properties such as screen, feature, setup stage and result status. The analytics payload is designed not to contain account identifiers, transaction amounts or user-authored financial text. Installation identifiers are not the same as your account identity, but should not be treated as a promise of absolute anonymity.

You can disable product analytics in the app’s settings. That does not disable network processing needed for sign-in, payments, security or a feature you request. Infrastructure providers may process IP addresses and technical logs when you connect.

The website and app use browser or device storage for functions such as preferences, sign-in sessions, local budget records and motion settings. Clearing that storage can remove local data or sign you out. The current product has no advertising network or cross-app advertising profile. External checkout, app-store and provider websites have their own storage and privacy practices.

Camera, photo, notification and biometric features use the permissions or controls supplied by your operating system where supported. You can change these in device settings; restricting a permission may disable the associated feature. VULT’s property lookup uses an address you enter rather than requiring device location access.

8. Who receives information

Information may also be disclosed to people you choose to share with, people authorised to provide support, or where required or authorised by law, a valid legal process or a necessary response to a security incident. We do not sell your budget or conversation content to advertisers or data brokers. A provider’s own notice describes its separate responsibilities; it does not replace VULT’s responsibilities for information we handle.

9. Overseas processing

VULT uses international providers. Information may be processed outside Australia, including in the United States; for example, Resend’s published policy describes processing there. Other locations depend on the relevant provider, hosting configuration and support arrangements. The linked provider notices describe their international operations. Contact us if you need current information about a particular feature’s processing location.

We do not promise that all information remains in Australia or that an Australian account setting controls every provider’s processing location. Where applicable law requires safeguards or reasonable steps for overseas disclosure, those obligations continue to apply. Using VULT is not a waiver of your privacy rights.

10. Retention and deletion

• Local records: remain on your device until removed through the app or device/browser storage controls. Uninstalling or clearing one device does not automatically remove cloud copies, exports or data on another device.
• Account and cloud budgets: kept to provide the account, sync and sharing features, subject to your deletion request and any lawful retention needs.
• Private Manager: the active thread holds the latest 60 messages and up to 12 memory items. Start a fresh thread clears that private history and memory; the daily usage counter is separate. Household messages are separate shared records.
• Temporary onboarding results: expire after 7 days, with later physical cleanup as explained above. A transaction you save or a setup draft associated with your account has a separate lifecycle.
• Support, billing, security and analytics records: retention depends on the reason for the record, resolving a request or dispute, abuse prevention, and applicable legal obligations. Payment providers and app stores maintain their own transaction records.

You can use the in-app account deletion control or contact us through account deletion. We may need to verify ownership using proportionate information. Deletion is not a promise of instant erasure from backups, provider records or copies held by other people. Where information is no longer needed and no lawful reason for keeping it remains, we take reasonable steps to delete or de-identify it; retained information remains subject to applicable privacy obligations. Ask us about a specific record if you need a clearer answer.

11. Security and incidents

VULT uses protected server functions, account-based access controls and encrypted network connections for current cloud services. Device passcodes and supported biometrics can help protect local access. These measures do not make the service risk-free or guarantee that every device, account or provider will remain secure.

Keep your device, email account and sign-in details secure. Tell us promptly at [email protected] if you suspect unauthorised access or disclosure. We will assess and respond to reported incidents and make notifications to affected people or regulators where applicable law requires them. A technical fault or a deletion request should not require you to email a password, passcode or one-time code.

12. Access, correction and choices

You can review and edit many records in VULT and export supported data from Profile. You may also ask [email protected] for access to personal information we hold, a correction, or deletion. Describe the information and the outcome you want. We may ask for the minimum information reasonably needed to verify you or an authorised representative. Do not send identity documents unless we explain why they are necessary and how to provide them safely.

We will assess requests and respond within a reasonable time, subject to applicable legal requirements. If access or correction cannot be provided, we will explain the reason where permitted and the available complaint options. A request concerning information kept only on your device may require you to use the app’s controls. Other people’s information and legal restrictions may affect what can be supplied.

You can decline optional uploads, choose manual entry, change available sharing or analytics settings, revoke device permissions, clear Manager memory or close your account. Turning a feature off prevents future use through that feature; it does not necessarily erase information already processed. Use the deletion or correction route for existing records.

13. Privacy concerns and complaints

Email [email protected] with the subject “Privacy complaint”, a description of what happened and the outcome you are seeking. Include relevant dates and your account email where needed, but avoid unnecessary financial documents. We will review the concern, seek clarification if needed and respond with our findings and available next steps.

If you remain dissatisfied, you can consider the Office of the Australian Information Commissioner’s complaint process where it has jurisdiction. The OAIC generally expects you to first complain to the organisation and allow 30 days for a response. This does not create a shorter limit on your rights or prevent you from seeking other available remedies.

14. Age, updates and contact

VULT is intended for people aged 18 or older. Do not create an account or submit personal financial information if you are under 18. If you believe a child has provided information, contact us so the situation can be assessed.

We update this policy when features or information-handling practices change. The date at the top identifies this version. Material changes will be brought to users’ attention through an appropriate channel; any consent required for a new use will be sought separately. A policy update does not retrospectively authorise an unrelated use of your information.

Contact: [email protected]. Related information: Terms of use, Security and Account deletion.