Privacy Policy

Vaultline is a personal money-tracking and rewards app. It is not a bank, does not connect to real bank accounts, does not move real money, and does not process payments. Every balance, transaction, debt, goal and purchase in Vaultline is a record you enter yourself.

• Account info — email address and sign-in method (email, Google, or Apple).
• Records you enter — accounts, transactions, split payments, savings goals, debts, subscriptions, assets, purchases and notes.
• Images you upload — receipt photos, online order confirmations, hunt/scan proof photos and barcodes you choose to capture.
• Location data — only when you enable Location Time or Find & Scan check-ins, and only while those features run.
• Rewards activity — CayPoints events, offer matches, spins, game scores, streaks and challenge progress.
• Device & usage data — basic technical logs used for security and anti-abuse (e.g. daily earning limits).

Vaultline uses a lot of AI. When you scan a receipt, verify a hunt photo, detect a barcode, parse an order number, or ask the AI to categorize something, the image or text you provide is sent to a third-party AI model (such as Google Gemini) for processing.

• Receipt and product photos are analyzed by AI vision models to extract merchant names, totals, line items and barcodes.
• AI output is used to pre-fill your records and to match offers — a human (you) can always edit the result.
• AI verification is used to approve, hold, or flag reward claims for review. You may see a pending state while this happens.
• We do not use your financial records to train AI models.
• Only the content needed for the feature (the image or text you submit) is sent to the model — not your whole account.

If you do not want AI processing, use manual entry instead of the scan features — every AI feature has a manual alternative.

• Store and display your personal records back to you.
• Calculate balances, forecasts, net worth, and your Financial Score.
• Run the CayPoints rewards system: matching offers, holding pending points for verification, enforcing daily limits, and preventing abuse.
• Verify scans and check-ins with AI and location checks.
• Keep the service secure (rate limits, fraud flags, associate/admin review of proof photos).

Your records are private by default and protected by row-level security — other members cannot see them. Proof photos you submit for Find & Scan or Scan & Earn may be reviewed by the Vaultline owner and authorized associates solely to approve or deny the related reward. We do not sell your data to anyone.

Your records stay until you delete them or delete your account. You can clear individual records at any time inside the app. Daily reset routines clear transient caches only — your records are never reset.

Access is authenticated, data is scoped per-user in the database, and admin tools are gated behind additional codes. No method is 100% secure, but we design Vaultline so only your eyes see what's in your account — including optional balance masking and auto-lock (Private-Eyes) features.

If we change this policy, the "Last updated" date above will change and significant changes will be called out in the app.