Triage Privacy Policy
Effective: June 7, 2026 · RoxyKovu LLC
Triage is built to keep your money data on your device. Your accounts, balances, and transactions are stored locally in an encrypted database. RoxyKovu LLC does not receive, store, or have access to your financial data. There is no Triage account and no Triage server.
What stays on your device
Everything you enter or import (accounts, balances, transactions, budgets, promotional balances, and rules) is stored only on this device.
When your information may leave your device
By default, nothing you enter or import leaves your device. Your information can leave the device or become visible only in these situations:
- Optional cloud AI (off by default): if you turn it on and connect a third-party provider with your own API key, Triage sends redacted transaction text (merchant or payee, amount, date, category, and last 4 digits; full account, card, routing, Social Security, and IBAN numbers are removed first) to the provider you chose, under that provider's terms.
- Optional iCloud sync (off by default): if you turn it on, your data syncs through your own iCloud using Apple's CloudKit. The sensitive money fields are end-to-end encrypted, so neither Apple nor RoxyKovu can read them.
- Your device and its backups: your data lives on this device, so anyone with access to your unlocked device or your device backup can see it. App Lock (Face ID or Touch ID with idle locking) helps protect it.
- Exporting or sharing: if you export your data or use a share feature, you control where it goes and these protections no longer apply.
- Purchases: Apple processes your purchase; RoxyKovu never receives your card or payment details.
- Connecting a provider or installing a model: signing in to a provider or downloading an on-device model sends only connection information to that service, never your financial data.
RoxyKovu operates no server and keeps no copy of your data, so in none of these cases does your financial data reach RoxyKovu.
On-device AI
Triage's on-device AI runs locally using Apple's Foundation Models or a local model you choose to install. When it runs on device, prompts and responses never leave your device.
Optional cloud AI
Triage includes an optional cloud AI mode that is off by default. If you turn it on and connect a third-party AI provider with your own API key, Triage sends transaction text to that provider to process your request.
What is sent: merchant or payee name, amount, date, category, and last 4 digits only.
What is removed first: full account numbers, full card numbers, routing numbers, Social Security numbers, and IBANs are redacted before any data leaves your device.
The provider you choose processes this data under its own terms and privacy policy, which RoxyKovu does not control. Some providers, especially free tiers, may retain or train on submitted data. Redaction is best effort and not guaranteed. You can disable cloud AI and remove your key at any time.
iCloud sync (optional)
If you enable iCloud sync, Triage uses Apple's CloudKit with end-to-end encryption to sync between your own devices. Apple and RoxyKovu cannot read the synced money fields.
Payments
Purchases are handled by Apple through the App Store. RoxyKovu never sees or stores your card or payment details.
No tracking
Triage contains no analytics, telemetry, advertising, or third-party tracking SDKs. RoxyKovu does not sell or share your personal information and does not use it for cross-context behavioral advertising.
How your information is protected
Your data is stored in an encrypted database on your device. Any API keys you add are kept in the device Keychain, separate from the app's database. If you enable iCloud sync, sensitive fields are end-to-end encrypted in transit and at rest. You can require Face ID or Touch ID to open the app. No security measure is perfect, but because RoxyKovu keeps no copy of your data, there is no central store for RoxyKovu to lose.
Your rights and choices
Because your data stays on your device and RoxyKovu never receives it, you are in control: you can view, edit, export, or erase your data in the app at any time, and deleting the app removes it. RoxyKovu cannot access, correct, or delete your data for you, because it never has it.
California residents: RoxyKovu does not sell or share your personal information. Because RoxyKovu collects no personal information from you, there is generally nothing to disclose, delete, or stop selling under the CCPA.
EEA, UK, and Switzerland: data you keep in Triage stays on your device under your control, so RoxyKovu is not the controller of it. If you enable cloud AI, you direct your own data to a provider you select using your own key; that provider, which may be in the United States, processes it under its own terms, not RoxyKovu's. You can disable cloud AI at any time. Contact us at support@roxykovu.com, and you may complain to your local data-protection authority.
Retention and deletion
Because your data lives on your device, you control it. Use the in-app reset options to erase data, or delete the app to remove it. Any cloud AI requests are governed by your chosen provider's retention policy.
Children
Triage is not directed to children under 13 and does not knowingly collect data from them.
Changes and contact
We may update this policy; material changes will be noted in the app or on our website. Questions? Email support@roxykovu.com.