Triage: AI & Your Data
Effective: June 14, 2026 · RoxyKovu LLC
This page explains, in plain language, how Triage uses AI and what happens to your data. It supplements the Privacy Policy.
How Triage uses AI
Triage uses AI to categorize transactions, clean up messy merchant names, summarize your month, flag unusual charges, and answer questions about your money. By default, this runs entirely on your device.
On-device by default
On-device AI (Apple Foundation Models or a local model you install) never sends your data anywhere. Cloud AI is optional, off by default, and runs only if you connect your own provider.
What we send, and what we protect
- Cloud AI is optional and off by default. On-device AI never leaves your device.
- For categorizing and cleaning up transactions, Triage sends transaction text: merchant or payee, amount, date, category, and the last 4 digits of an account.
- For the AI assistant (chat), Triage also sends a working summary of your finances so it can answer: account names, balances and APRs, total cash and debt, income and spending by category, your top merchants, recent transactions, and promotional balances.
- Before anything is sent, Triage removes full account numbers, card numbers, routing numbers, Social Security numbers, and IBANs.
- Data goes to the provider you choose, using your own API key. That provider's terms and privacy policy govern your data, and RoxyKovu does not control them.
- Some providers may store or train on what they receive, especially free tiers. Choose your provider accordingly.
- Redaction is best effort. RoxyKovu cannot guarantee it removes every identifier or control what the provider does with the data.
- You can turn cloud AI off and remove your key at any time.
Provider notes
Provider data practices change; verify on each provider's site. As of this writing:
- OpenAI, Anthropic, Mistral, Groq (paid API): do not train on API data by default; short or zero retention.
- Google Gemini (free / AI Studio tier): may use submitted data to improve products and allow human review. The paid API does not.
- DeepSeek: stores data on servers outside the U.S. with no stated retention limit; treat as higher risk.
- OpenRouter: routes to many providers, so the guarantee depends on the model you pick and your OpenRouter account settings (training opt-out). Confirm your settings.
Your choice and responsibility
You choose whether to enable cloud AI, which provider to use, and which model. You connect with your own API key, and your use is also subject to that provider's terms. Review them before enabling.
Accuracy
AI output can be wrong. It is informational only and is not financial, tax, legal, or investment advice. Verify before acting.
Questions? Email support@roxykovu.com.