Privacy Policy

Data We Store

We store the data you provide directly: your email, name, phone number (optional), receipt photos & voice recordings you send to be logged, store and product photos you attach to a transaction, a store location you confirm on a map for a transaction, as well as transactions, categories, assets, savings goals, and other financial notes you enter through chat or the web dashboard. We also automatically log your chat history with the Dompi AI assistant, basic technical signals (when you log in, device type) for security & service improvement, and a usage record of each AI request (which model handled it and how much processing it took — not an extra copy of what you wrote) so we can keep the service affordable.

How We Use Your Data

Your financial data is used to provide logging, spending pattern analysis, budgeting, and relevant recommendations for you, as part of improving Dompi's services and features going forward. Beyond running your personal account, we may also use your data in a few specific, separate ways described below — each of which you can review and control on its own.

Community Insight ("Our Money Stories")

After you agree to this policy at sign-up, spending data from your personal workspace is combined with other users' data to show community insights in the Feed, e.g. "your Food spending this month is 23% below the average in Semarang." Business workspaces are never included. To protect everyone's privacy, this feature follows strict rules regardless of how much data we hold: we never show a single individual shop's transaction amount publicly; comparisons involving a specific merchant are limited to large, nationwide retail chains (small local shops are only ever described generically); and an insight only appears once enough distinct users in a city/category have contributed — below that, nothing is shown at all. Community Insight and Community Price Sharing (below) together form one setting, "Community Contribution", in Settings. Community features are available only to users who contribute; if you stop contributing, you lose access to them, but budgeting, tracking, reports, and every other core feature keep working normally. Contributors on the free plan can see community prices in the Feed and a limited number of chat answers per month that include store names, photos, and locations; beyond that limit, chat answers still show prices but keep store details for Premium. Premium removes the monthly limit. Your contribution setting works the same way on every plan.

Community Price Sharing

Community Price Sharing is part of Community Contribution. In most countries it is on for personal workspaces once you agree to this policy at sign-up, as stated next to the checkbox you tick yourself. In some regions, including the European Union, the United Kingdom, and Switzerland, it stays off until you turn it on in Settings, and community features may not be available in every country yet. It helps users find where everyday products are cheapest in their city. From itemized receipts in your personal workspace, the following details are combined with other users' data: product name, unit price, store name, store city and country, and the week of purchase. Item details can come from a receipt photo or from a chat message that names a single product and its price (for example "dates 1 kg 45 riyal at Store X"). By default only purchases up to a limit are included (equivalent to about IDR 10,000,000, converted to your currency); you can change the limit, include all receipt transactions, exclude any single transaction from its edit menu, or stop contributing in Settings > Community Contribution. Setting a limit or excluding transactions does not affect your access to community features. Business workspaces are never included.

We never share your name, email, account details, exact purchase time, balances, or anything that identifies you, and transactions synced from your bank or email without item details are not included. These rules are enforced in our database, not just in what the app displays: a store is only included once at least 3 different users have reported it in the last 30 days; each user counts once per store and product; accounts that are unverified, very new, or show suspicious activity (such as unusually many receipts per day or duplicated receipts across accounts) are left out; implausible prices are filtered out; the stored community summary contains no user or transaction identifiers; and at most three of the cheapest and three of the most-purchased stores are shown, for the product size most commonly bought, with a price range and an approximate number of reports. The most expensive stores are never listed. Unlike the spending comparisons in Community Insight above, this feature may name smaller local stores, because it shows shelf prices rather than how much anyone spent. Prices are user-reported and may be out of date. Only users who share can view community prices, with a daily question limit.

For accounts created before 17 September 2026, sharing starts 7 days after we notify you in the app. If you stop sharing, your data is left out from the next community update (within about 6 hours). We keep a record of your sharing choices and which policy version applied.

Store Photos & Store Locations

After you log a purchase, Dompi may ask once per store whether you want to add the store's location or a photo of the store. Nothing is added automatically: you choose the location yourself by moving a pin on a map and confirming it, and you take or choose the photo yourself. You can change or remove both at any time from the transaction's edit menu. Dompi does not track your location in the background and only reads your device location when you open the map.

Receipt photos are always private and are never shown to other users. The exact location you confirm is stored on your own transaction and is never shown to anyone else. When you take part in Community Contribution, other users can see: a store location calculated from the locations reported by at least 3 different users for the same store (never a single person's pin); and store or product photos you attached, shown only next to that store's community prices when someone asks about them in chat. Photos where a person is the main subject or a face is clearly recognizable are kept private automatically. If you stop sharing, exclude a transaction, or delete a photo, it is no longer shown. To determine the city of a location, the coordinates are sent to OpenStreetMap's geocoding service (Nominatim). Photos are compressed and stored in a private storage bucket and are shown to others only through short-lived links.

Third-Party Collaboration & Advertising

We may work with brand partners to show offers or vouchers that are relevant to you, based on aggregated and anonymized spending categories (for example, "users who spend on coffee in Semarang"). We — not the partner — decide who sees an offer, and this happens inside the app. We also may produce aggregated market research or statistics as a product for other businesses, researchers, or partners offering financial products (like savings or insurance) relevant to your general financial profile. In every case, your personal data — anything that could identify you individually — is never shared with these partners without your separate, explicit consent. This participation is optional and can be turned off anytime in Settings, without affecting your access to Dompi's core features.

Service Providers We Work With

To run certain features, some data is processed through service providers bound by confidentiality obligations: AI model providers (to understand & reply to chats, transcribe voice, read receipt photos, and read the transaction notifications you choose to sync), email providers (for notifications & account verification), public stock/gold price data providers (to calculate your net worth), and a public currency exchange-rate source (the open-source currency API by fawazahmed0, used to convert transactions you log in another currency), OpenStreetMap's Nominatim service (to find the city of a store location you confirm; only the coordinates are sent) and CARTO map tiles (to display the map when you choose a store location; your device loads the map images directly). For price and exchange-rate data, only market rates are fetched — none of your personal or financial data is sent to those providers. We choose providers with adequate privacy & security policies, but use of their services is also subject to their own policies. This is separate from, and does not involve, the brand/advertising partners described above.

Gmail Data (Transaction Sync)

If you connect a Gmail account, Dompi requests read-only access to find transaction receipts and bank or e-wallet notifications and turn them into transactions in your own workspace. We only process emails for this user-facing feature: email content is sent to our AI provider (Anthropic) solely to extract transaction details, is not used to train AI models, is not used for advertising, is not sold, and is never read by humans except when you ask us to for support, when needed for security, or when required by law. Transactions created from Gmail are never included in community insights or community price sharing. Your Google access token is encrypted at rest, and disconnecting Gmail or deleting your account revokes Dompi's access at Google.

Dompi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Notification Data (Smart Sync, Android)

On Android, you can turn on Smart Sync to log transactions automatically from the notifications of banking, e-wallet, card, or messaging apps. This only works after you read an in-app explanation, agree to it, and grant Dompi "notification access" in your Android settings. You choose which apps Dompi watches, and you can add keywords so that only matching notifications are read (for example, only SMS messages from your bank).

From the apps you choose, Dompi sends only notifications that contain an amount to our servers, together with the app name and the time the notification appeared. Dompi reads them to extract the transaction details (amount, currency, merchant, and the account used) and create a transaction in your workspace. The first time a new notification format appears, its text may be processed by our AI model providers; after that, notifications with the same format are read by our own code. Notification text is not used to train AI models, not used for advertising, and not sold. One-time passcodes and verification codes are filtered out on your device and never sent. Notifications that turn out not to be a transaction are discarded without keeping their text.

After a transaction is logged, Dompi may send you a notification asking what it was for or whether you have a receipt to photograph. Dompi does not ask for or track your location when you open these notifications. Instead, a store's location may be estimated from the store name in the notification or the address printed on a receipt you photograph, by looking up that store name or address (never your name, account, or device location) on OpenStreetMap. Estimates from store names alone stay private to you; community store locations only use precise points confirmed by several different users. Those community store locations (a store name and the store's combined location, never an individual user's point, name, or account) may be checked against Google Places to confirm the store exists there; Dompi keeps only Google's place reference and the result of that check.

From apps you have not chosen, Dompi does not send or store any notification content. Your device only remembers the names of apps that displayed an amount, so the app can suggest them when you pick apps to watch; this list stays on your device. Like other transactions you log, transactions created from notifications (and any receipt you add to them) can contribute to anonymous, aggregated community insights such as average prices per city, unless you turn community insights off in Settings or exclude a transaction from its edit menu. They are never shown as individual posts in the Feed. You can turn Smart Sync off in Settings or revoke notification access in Android settings at any time, and deleting your account deletes the stored notification records with it.

Location When You Log a Purchase

If you allow it, Dompi saves your device's location when you log a purchase through chat, voice, or manual entry while the app is open, so it can show where you shop and the cheapest prices nearby. Dompi asks once, the first time you log a purchase, and you can turn it off anytime in Settings > Privacy. Your location is never collected in the background, when you merely open the app, or when you open a notification. It is not saved for online purchases, bills, transfers, purchases you log more than about 30 minutes after they happened, or when one entry mixes several different stores. Your individual locations are never shown to other users; places you log from often, such as home or work, are never used as store locations for the community.

Referral Program & Payout Details

Premium members in Indonesia can invite friends with a personal code. When someone signs up with your code, we record that the code was used and whether that person later starts a paid subscription, so we can grant their Premium period and calculate your reward. As the inviter, you see only how many people joined and your reward balance — never the names, contact details, or financial data of the people you invited, and they don't see yours.

To receive rewards you can add payout details: the payout method (an e-wallet or a bank), the account or registered phone number, and the account holder's name. This is optional and used for one purpose only — sending you the rewards you've earned. It is never used for advertising or community insight, and never shared with brand or advertising partners. Access is restricted to the Dompi team member who processes the transfer; the details are shared with a bank or e-wallet provider only as needed to complete that transfer. In the app, only the last four digits are shown.

Rewards are held for 14 days after your friend's first payment, and cancelled if that payment is refunded. Records of rewards already paid may be kept after you delete your account where tax or financial record-keeping law requires it.

Security

Passwords are stored encrypted (hashed), not as plain text, and we can never see your actual password. Dashboard access uses secure sessions that expire automatically. Even so, no system is 100% immune to risk — if you suspect your account has been accessed by someone else, change your password immediately and contact us.

Data Sharing Within a Workspace

If you're invited to a shared workspace (e.g. a business workspace or a couple's workspace), the transactions, categories, and financial notes you log in that workspace can be viewed by other members according to the role assigned by the owner. Workspace owners & admins can see more than staff/viewers. Before accepting an invitation to someone else's workspace, make sure you genuinely know & trust that workspace's owner — data you've entered into a shared workspace is no longer fully under your own control alone, but also that of the workspace owner.

Feed Feature (Sharing Financial Stories)

The Feed ("Our Money Stories Today") shows recent expense transactions from users who take part in Community Contribution, to other Dompi users. Each post shows a masked version of the account name (for example "H*****i"), the city in your profile, the description you wrote when logging it, the amount, the category, and an approximate time. Only expense transactions from personal workspaces are shown, within your Community Contribution limit; income, business workspaces, transactions logged automatically from Gmail or bank and e-wallet notifications, and transactions you exclude from their edit menu are never shown. Posts where you added a store photo or location get a small label and show only the day, not the exact time. Other users can react with a love; you may then receive a notification showing their masked name and city. You can stop appearing in the Feed by turning off Community Contribution in Settings. If you copy, screenshot, or share Feed content outside the app, that is outside Dompi's control.

Notifications & Broadcast Messages

We may send notifications via push notification or email related to your account activity (e.g. budget alerts) as well as general info/announcements from the Dompi team. You can adjust how often Dompi proactively chats with you via the Settings page, and can revoke push notification permission via your browser/device settings at any time.

Data Retention & Deletion

Your data is stored for as long as your account is active. If you delete a workspace, all transactions, categories, and notes in that workspace are permanently deleted and cannot be recovered — make sure you're certain before deleting. You can delete your entire account yourself in Settings > Delete account; this permanently deletes your account, the workspaces you own and their data, and revokes Dompi's access to any connected Gmail account at Google, together with any payout details you saved for the referral program. We only keep data longer where the law requires it.

Future Product Directions

We may explore, in the future: (a) alternative credit-worthiness scoring based on your financial data, potentially for use by third-party lending partners; and/or (b) embedded third-party financial products (such as savings or PayLater) inside the app. Neither of these is active in the current version of Dompi. Before either is turned on, we will notify you explicitly and ask for separate consent, and will comply with applicable financial services regulations.

Minors

Dompi is intended for users aged 17 and above, or who already have the legal authority to manage their own finances under applicable law. We do not knowingly collect data from minors without parental/guardian consent.

Policy Changes

We may update this policy from time to time as Dompi's features evolve. Significant changes — especially any new purpose for using your data — will be communicated via in-app notification before they take effect.

Your Rights

You have the right to access, correct, or request a copy of your data, and request your data be deleted at any time via Contact Us. You can also withdraw your participation in Community Insight and Third-Party Collaboration at any time from Settings, without losing access to Dompi's core budgeting and tracking features.

Responsible Party & Contact

Dompi is developed by Much. Nur Aziz Hanafi ("the Developer"), who is currently the responsible party for this service. For any questions or concerns about this Privacy Policy, contact hanafifreedom@gmail.com.