Privacy policy.

When you join the waitlist

We collect your email address and, if you provide it, your first name. We use these to send Ipon launch updates.

We also save the referral source supplied in the page address (utm_source or ref) and the referring page address provided by your browser, if available. This helps us understand how people found Ipon. The source is limited to 40 characters and the referring address to 200 characters.

The waitlist is stored in Supabase. The public form can submit a signup but cannot retrieve the list. We keep your signup for launch communications until you ask to be removed or we no longer need it for that purpose. To leave the waitlist or request deletion, email support@iponapp.com.

Information used by the app

• Email address: for account sign-in.
• Transactions: amounts, dates, names, categories, and notes, so you can track and organize your money.
• Credit card metadata: bank name, nickname, last four digits, credit limit, statement date, and due date, for bill tracking. Ipon does not need your full card number.
• Bill or statement photos: only when you choose to scan one. The image is sent for text extraction; Ipon does not store the original photo in its database.
• App preferences and records: templates, settings, and subscription entitlement information needed to provide your features.

What we don’t collect

Ipon does not collect bank credentials, connect to bank accounts, or collect full card numbers, location, contacts, or advertising identifiers. The app has no analytics SDK or advertising SDK. We do not sell your data or share it with advertisers.

Where your information is stored

App records and the waitlist are stored using Supabase’s PostgreSQL database, hosted in Singapore (ap-southeast-1). Account records use row-level security to restrict access to the corresponding account. The app also keeps data on your device so everyday tracking can work offline.

Cloudflare Pages hosts this website. Requests to the website and Supabase necessarily include technical information, such as an IP address, for delivery and security. We do not add advertising trackers or analytics scripts to this site, and its fonts are hosted here rather than loaded from Google Fonts.

Optional cloud AI

For the public launch, we plan to use Google Gemini through its paid API service for Pro cloud AI features. When you choose an AI feature, the text, image, or relevant financial context needed for that request is sent to the provider for processing. Cloud AI requires an internet connection.

Under Google’s paid-service terms, submitted prompts and responses are not used to improve Google’s products. Google may retain information for purposes described in its terms, including abuse monitoring and legal obligations. Processing may take place outside Singapore. See Google’s Gemini API terms for details.

Quick Fill and pasted statement text can use the free offline parser without sending that input to a cloud AI provider. Cloud AI usage is included within the Pro subscription allowance; subscribers do not pay a separate per-scan fee. The allowance will be confirmed before launch.

Backups and account deletion

You can export a backup at any time from Settings. Exported files are under your control, so keep them somewhere you trust.

To delete your account in the app, go to Settings → Danger zone → Delete account. Deletion is permanent and removes your account records, including transactions, cards, templates, and settings. Files you previously exported are not deleted from your own storage.

If you have difficulty accessing the app, contact support@iponapp.com for help with your request. Deleting an app account and leaving the website waitlist are separate requests.

Contact and policy updates

For privacy questions, correction requests, or deletion help, email support@iponapp.com. We may need to verify that a request concerns your own account.

We may update this policy as Ipon develops. Changes will appear on this page with a revised effective date.