Privacy Policy
Last updated: October 22, 2026
This policy covers two things: the Volora app you install on your phone, and this website. The first part is the app policy - the same text you can read inside the app. The second part, numbered separately, covers the website.
The Volora app
1. Who is responsible for your data
The controller of the personal data described in this policy is Kozma E. Imre, a private individual based in Romania (postal address: [to be added before launch]; email: support@voloramoney.com), who provides Volora. For anything about your data, including exercising your rights, write to support@voloramoney.com. No data protection officer has been appointed, because the law does not require one for an app like Volora. Most of what you put into Volora never reaches us at all: your financial records stay on your device, or in your own Google Drive for shared spaces and backups, and we have no way to see them.
2. What Volora is designed to protect
Volora is a personal finance workspace. The app can contain wallets, balances, transactions, budgets, goals, projects, imported files, shared-space activity, preferences, and support messages you choose to send. Because this information is sensitive, the product is designed around local storage, explicit sync, and clear controls.
3. Information you add to the app
You decide what finance records to enter, import, edit, share, or delete. Volora uses that information to show balances, budgets, insights, reports, search results, reminders, and other product features on your device and in spaces you participate in.
4. Local storage and backups
Volora stores your financial records on your device by default. If you enable backup, restore, sync, file import, or cloud features, the selected provider may process the files or account access needed for that feature. Those providers operate under their own privacy policies and account settings.
5. Your account and sign-in
You can sign in with Google or continue as a guest. If you sign in with Google, your name, email address and sign-in tokens are stored on your device, so Volora can show who you are and connect to your Google Drive when you use it. What we do create on our server, for everyone who agrees to these terms, guests included, is an anonymous identifier. It holds a record of what you agreed to: which version of the Terms of Service you accepted, and each choice you make about crash reports, performance reports and usage analytics — when, where in the app, and the app version, platform and language you used. That record never contains your name, email address, a device identifier or any of your financial data. We keep it because the law requires us to be able to show that you gave your consent, and because we need to be able to show which terms you accepted if that is ever disputed. The same identifier is how a free trial or a subscription follows you to a new device (see sections 10 and 11). If you are signed in with Google, this identifier is linked to your Google account without our server keeping your email address, name or profile picture: it keeps only a one-way code computed from your Google account number, which cannot be turned back into your account but lets the same identifier be found again on your next device. Because we hold neither your name nor your email address, we cannot find you by either: when you contact us, quote the Support ID shown under Settings → About, or the order number on your store receipt. Your sign-in tokens are not kept on our servers. We process this data to provide the app you asked for and to meet that legal obligation. Volora is not intended for anyone under 16, and we do not knowingly process data about children.
6. Google Drive
Shared spaces, and personal backups if you make them, are stored in your own Google Drive. When you connect Drive, Volora asks Google for permission to access files in your Drive, and uses it only to create, read, update and delete the Volora folder and the files it manages for you. That data travels only between your device and your Google Drive; it never passes through our servers, and we cannot see it. Volora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Drive data for advertising, do not sell it, and do not use it to train AI models. You can remove Volora's access at any time in your Google Account settings.
7. Crash and performance reports (only if you say yes)
If you agree, Volora sends a report when the app crashes and measures slow screens, so we can find and fix problems. A crash report contains the type of error, the code path it happened in, your app version, operating system version, device model, and language — never the error message itself, because an error message can quote something you typed. These reports are off until you choose, and they are sent only with your consent. We ask together with usage analytics, and you can choose crash reports without usage analytics. You can turn them on or off at any time in Settings → Analytics & Privacy, and the app works the same either way.
8. Usage analytics (only if you say yes)
Which features you use, and diagnostics about background jobs, are collected only if you explicitly agree. We ask once, after you have actually used the app, and every choice is offered equally — nothing is pre-ticked. Declining costs you nothing: every feature stays available, and we will not lock you out, nag you, or ask again because a policy changed. You can change your mind in either direction at any time in Settings → Analytics & Privacy; withdrawing consent does not affect what was collected before.
9. What we never collect, at any setting
No amount, wallet name, category, note, counterparty, imported row, or any other content of your financial records is ever sent as analytics or diagnostics, whatever you have turned on. We use no advertising identifiers. Crash data and usage analytics are deliberately kept unlinked, so your crash reports cannot be assembled into a picture of your behaviour. Diagnostic data is processed on our behalf by Google Firebase and kept for 90 days. The only way your own words reach us is when you deliberately write to support — you see and edit that message before it is sent.
10. Subscriptions and payments
Volora offers an optional paid subscription. Purchases are handled entirely by the App Store or Google Play, so your card details never reach us and we cannot see them. What we do keep, linked to your account, is which plan you bought, when it starts, renews, or expires, and the transaction identifiers the store gives us so that renewals, restores, and refunds land on the right account. We need this to give you what you paid for, so it is not something you can switch off while keeping a subscription. We also keep a short record of whether each purchase actually went through — your account identifier, the plan, and whether it succeeded or failed — for 30 days. That record is how we can tell that someone paid and did not receive their subscription. It never contains receipts, payment tokens, or your email address, and it is not affected by your analytics settings, because it is not analytics: we cannot deliver a paid subscription while refusing to record whether delivery worked. None of your financial records are involved at any point.
11. Free trials
The free trial is one per device. To enforce that without asking who you are, we store a scrambled, one-way fingerprint of the device rather than the device identifier itself. It cannot be reversed, and it cannot be used to recognise you anywhere else. It is deleted automatically after a set period. We do this on our legitimate interest in not having a single device claim an unlimited number of free trials. If you would rather not, you can subscribe directly without starting a trial.
12. Shared spaces
When you join or invite someone to a shared space, people in that space may see or change information according to their role and permissions. Review members before sharing sensitive records and remove access when it is no longer needed.
13. Who processes data for us, and where
Google acts as our processor through Firebase: Crashlytics and Performance Monitoring for crash and performance reports, Google Analytics for Firebase for usage analytics, and Firebase Authentication, Cloud Firestore and Cloud Functions for trials, subscriptions and the record of what you agreed to. Subscription records and that record are stored in Google's Frankfurt region. Some processing, including crash reports and analytics, can take place outside the EU, in particular in the United States; those transfers are protected by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses in Google's data processing terms. Apple, Google Play, and Google Sign-In act as independent controllers for the purchases and sign-ins they handle, under their own privacy policies. Support emails are handled by our email provider. We do not sell your data or share it with advertisers.
14. How long we keep data
Financial records: on your device, or in your Google Drive, until you delete them — we never hold them. Crash and performance reports: 90 days. Usage analytics: no longer than 14 months. Subscription and trial records: as long as you have an account; they are deleted when you delete your account. Records of whether a purchase went through: 30 days. The record of what you agreed to (section 5): 3 years from the latest of your last recorded choice, your last use of the app, and the deletion of your account. It is kept after you delete your account, because it is the evidence we would need if a claim about your consent or these terms were ever made; 3 years is the general limitation period for such claims under Romanian law. The free-trial device fingerprint: about 30 days after the trial starts; if you delete your account sooner, it is unlinked from your account straight away. Support emails: until your request is resolved, and then no longer than 2 years, in case you follow up.
15. Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent at any time without affecting processing that happened before. You can object in particular to the free-trial fingerprint, which relies on our legitimate interest (section 11). When you withdraw a consent, we record the withdrawal as a new entry instead of erasing the earlier one, and if you ask us to delete your data, we keep the record of what you agreed to for the period in section 14, because we may need it to defend a legal claim. Most of your data is on your device, where you control it directly; for anything we hold, write to support@voloramoney.com and we will reply within one month. We do not make decisions about you based solely on automated processing. If you think we have handled your data unlawfully, you can complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the country where you live or work.
16. Security controls
Volora includes controls such as app lock and amount blur to reduce exposure on your device. These controls help protect casual viewing, but they do not replace device security, strong account protection, careful backups, or trusted sharing decisions.
17. Account deletion and data removal
You can delete local records, reset settings, remove shared access, or request account-related help through support. Deleting the app, deleting cloud backups, and removing third-party provider access may need to be completed separately depending on where you enabled storage or sync.
18. Legal requests and safety
We may preserve or disclose limited information if required by law, to protect rights and safety, to investigate abuse, or to operate support and security workflows. We aim to request only what is necessary for the specific purpose.
19. Changes to this policy
We may update this policy when Volora, the law, our providers, or our security practices change. The date shown with this policy marks the current version. If a change affects how your data is used in a significant way, we will tell you in the app before it takes effect, and where a change needs your consent we will ask for it rather than assume it.
20. Contact
Questions, privacy requests, and account help can be sent to support@voloramoney.com. Include enough context for us to understand the request without adding unnecessary financial details.
This website
1. What this website collects
This section covers voloramoney.com, not the app. The website is a marketing and support site: you do not sign in here, it does not hold your finance data, and it has no access to anything inside the app. It collects what a website needs to run - request logs used for security, fraud prevention and rate limiting - plus whatever you choose to send us through a form.
2. Third-party processors
To operate and improve our site, we share data with selected third-party providers. Please see our List of Third-Party Processors for detailed information on the services we use, their location, and their privacy practices.
3. Cookies
We use strictly necessary cookies for essential functionality like security, fraud prevention, and rate limiting. These cannot be disabled. With your explicit consent, we also use analytics cookies to aggregate anonymous data about how visitors interact with the site. For a full list of third-party cookies and our analytics providers, please refer to our List of Third-Party Processors.