Privacy
& terms.

Privacy Policy

Effective date: 1 November 2026

1. Who we are and scope

Zovix Limited (“Zovix”, “we”, “us”) provides the Dolly iOS application, dolly.zovix.ai and related support and waitlist services (the “Services”). Zovix Limited is responsible for personal information handled through the Services.

Dolly is offered only in the countries and regions where it is currently available on the App Store, subject to App Store availability and applicable local law. Dolly is not currently offered in the European Union (EU), Iceland, Norway, the United Kingdom, mainland China, Russia or Belarus.

2. Dolly’s data design

• Dolly does not connect to your bank account or request bank-login credentials.
• Your ledger is stored on your device and is not synced to Dolly's servers. If you enable iCloud Backup, an encrypted backup is stored in your private iCloud container.
• When an AI feature runs—whether you start it or it runs automatically, such as Pro tap categorisation—the content described in §3 is transmitted for processing.
• Dolly does not display third-party advertising. Zovix does not sell personal information or share it for cross-context behavioural advertising.
• Apple processes App Store payments. Zovix and its subscription provider receive purchase and entitlement information, not your full card number.

3. Information we process

Local ledger. Depending on your use, this may contain merchant, amount, date, category, currency, payment method, receipt images, statement lines, notes, rules and settings. Zovix does not receive the complete ledger merely because you create or edit it.

AI requests. Dolly sends content to Google Gemini (Vertex AI), our AI service provider, in the following situations: (1) when you scan a receipt, the receipt image; (2) when you import a statement, the statement content; (3) when Pro AI categorisation is active, including during a Pro trial, and an eligible in-store Apple Pay transaction triggers the Dolly shortcut, the merchant name, amount and currency of that transaction. This transmission occurs automatically when the shortcut runs; you do not make a separate AI request for it; (4) for AI Financial Insights, your total spending and number of transactions for the period; the names, spending totals and shares of total spending for up to the three highest-spending categories; the amount and category of your largest single transaction; and the names of up to three recurring merchants, together with the number of transactions and total spent at each; (5) when you use Ask Wallet, the text of your question, the transaction details needed to answer it—including date, merchant name, amount, currency and category—relevant aggregated statistics, and recent conversation context. Content sent to the AI processing provider is not accompanied by your Dolly account identifier. If you import a statement from the getting-started screen, all of its lines are added directly to the ledger; you can edit or delete them afterwards. Statements imported any other way are added only after you review and select their lines. Zovix does not use AI request content for advertising or to train its own models. If Google’s automated safety classifiers flag a prompt for suspected abuse, Google may log that prompt for up to 90 days solely to determine whether its Acceptable Use Policy or Prohibited Use Policy has been violated. Prompts that are not flagged are not logged for this purpose.

Accounts and security. We process sign-in identifiers, email or provider identifiers, security signals, app/OS version, plan and entitlement status, quota counters and server access/security logs. Server access and security logs kept by Google and Cloudflare may include your device’s IP address, request time and requested path. For requests made by the App, we use these logs only for security, debugging, abuse prevention and operating the Services. We do not use them to analyse user behaviour, for marketing or for tracking.

Sign in with Google. When you choose to sign in with Google, the sign-in process is handled by components provided by Google. Any Google password you enter on the Google sign-in screen is processed by Google; Dolly does not receive it. Google processes information collected during sign-in under its Privacy Policy. Depending on your settings and use, this information may include your Google Account information and information relating to your device, application, coarse location and sign-in security.

After sign-in, the Google sign-in component provides the Dolly app with an ID token and an access token. The app passes these tokens to Firebase Authentication to create or sign in to your Dolly account. The Firebase Authentication user record may store your email address, a Google-provided account identifier, and the display name and profile photo URL associated with your Google Account. See Section 4 for how we use this information. Signing in with Google also creates the trial-eligibility record described in Section 3.

You can review or remove Dolly’s access at any time in your Google Account settings. Removing access does not delete account data already stored by Dolly. To delete your Dolly account and its data, use Delete Account in the app.

Sign in with Apple. If you choose Sign in with Apple, Apple may provide your name the first time you authorize Dolly. Dolly stores that name in your Firebase Authentication user record only if no name is already stored there. Dolly does not copy the Apple-provided name to any other record or use it to display your name in the app. The name stored in Firebase Authentication is deleted as part of a successful deletion of your Dolly account.

Purchases. Apple and RevenueCat may provide product identifier, purchase token, entitlement status, storefront and related technical information used to validate access and provide support.

Diagnostics. Crash reporting may process app and operating-system version, crash stack, timestamps and technical identifiers so we can identify and repair faults. You can turn optional improvement reporting off in the App under More → Improve Dolly.

Trial eligibility. When you sign in with Apple or Google, we create a pseudonymised trial-eligibility record. It stores a keyed hash derived from the sign-in provider identifier, the date of the first trial, an expiry date and a key version. We use this record only to determine eligibility for one-time trial offers and to prevent repeated trial use. It does not contain your email address, your Dolly account identifier, transactions, receipts, statements or any other ledger data. Because it is pseudonymised rather than anonymous, we treat it as personal information. Signing in with an email address and password does not create this record.

Account deletion audit record. When you request account deletion, we create an audit record containing your account identifier (UID), the date the request started and the status of the deletion, including whether any step failed. We use it to complete and verify the deletion, investigate failed steps, keep a compliance audit trail and resolve deletion-related disputes.

Website, waitlist and support. We process email, selected language, consent record, request information, messages and attachments to operate the waitlist, prevent abuse, determine offer eligibility and respond. Do not send unnecessary financial information to support.

Exchange rates. When Dolly needs reference exchange rates, the app requests them directly from a third-party exchange-rate data service. The request contains the three-letter code of the base currency you select. It does not include your Dolly account identifier, transactions, receipts, statements or any other ledger data. As with any internet request, that service receives your device’s IP address and the time of the request.

Announcements. To show Dolly news and announcements in the App, the App periodically requests a public announcements file from dolly.zovix.ai, which is hosted by Cloudflare. The request does not include your Dolly account identifier, transactions, merchants, amounts or any other ledger data. As with any internet request, Cloudflare receives your device’s IP address and the time of the request, which may be recorded in the security and operational logs described in this Section.

Encrypted iCloud backup. If you create a backup password and enable backup, an encrypted copy of eligible ledger data is stored in your private iCloud container. Receipt images are not included. Zovix does not receive the backup password and cannot recover the backup if that password is lost. Your use of iCloud is also subject to Apple’s terms.

4. Why we process information

We process information to provide requested features; authenticate accounts and validate purchases; enforce allowances and security; respond to support, privacy and security requests; maintain reliability; send requested waitlist/product messages; comply with law and enforce the Terms; and improve features where a lawful meaningful choice is provided.

5. Service providers and disclosures

Zovix requires service providers to process information only for the contracted purpose, to protect it using appropriate safeguards and not to use Dolly information for their own advertising. We disclose information to an authority only where required or permitted by applicable law.

6. International processing

Cloud and email service providers may process information outside your state, province or country. Those locations include the locations where Google, Apple, RevenueCat, Cloudflare, Mailchimp, ExchangeRate-API (AYR Tech (Pty) Ltd) and their respective subprocessors operate. Privacy laws in those locations may differ. Where applicable law requires it, Zovix uses notice, consent, contractual protections, transfer assessments or another recognised safeguard. By choosing an AI feature after the App’s disclosure, you request the processing needed to provide that feature.

7. Retention

8. Security

We use safeguards appropriate to the sensitivity of the information, including encrypted local storage, encrypted network transport, authentication and access controls. No storage or transmission method is completely secure. Protect your device, account credentials and backup password.

9. Your choices and rights

You can use App controls to review, edit, export or delete local records; change optional improvement reporting; and unsubscribe from marketing email. Deleting your account in the App also clears the ledger records available in the App on that device. To remove Dolly's remaining local app data from a device, remove Dolly from that device. You may request access to, correction of, a copy of, or deletion of eligible server-held information, or withdraw consent where consent is the applicable basis, by emailing [email protected]. We may verify your identity before acting. We aim to respond within 30 days, or within another period required by local law.

Deleting the App does not cancel a subscription and may not delete server account, purchase, consent or support records. To close an account and request deletion of eligible server-held information, contact [email protected]. After an account-deletion request, we retain the limited deletion audit record described in Section 7 for up to 12 months from the date of the request. Deleting your account does not immediately delete the pseudonymised trial-eligibility record described in Section 7. We retain it only for the period stated there, to administer one-time trial offers and prevent repeated trial use. Some information may be retained where law requires it or where necessary for security, fraud prevention or a legal claim. Depending on where you live, you may also complain to your local privacy regulator.

10. Children, changes and contact

Dolly is intended for people aged 18 or older. We may update this Policy and will give additional notice or obtain consent for material changes where required. Contact the Privacy and Data Protection Officer at [email protected]; security reports may be sent to [email protected].

Terms of Service

Effective date: 31 October 2026

1. Agreement, eligibility and availability

These Terms govern Dolly and related Services. You must be at least 18 and legally able to contract. Dolly is offered only in the countries and regions where it is currently available on the App Store, subject to App Store availability and applicable local law. Dolly is not currently offered in the European Union (EU), Iceland, Norway, the United Kingdom, mainland China, Taiwan, Russia or Belarus. Localization files do not make Dolly available in every country associated with a language. Nothing excludes mandatory rights.

2. License and acceptable use

Zovix grants a personal, limited, non-exclusive, non-transferable, revocable license to use Dolly on Apple devices you own or control. Do not interfere with security or quotas, access another account, submit content without authority, reverse engineer except where law permits, overload the Services, evade purchase controls or use Dolly for unlawful, fraudulent or sanctioned activity.

3. Your content and responsibilities

You retain rights in your content and permit processing only as needed to provide, secure and support the Services. Review extracted/generated results, check statement transactions in your ledger, keep source records needed for legal or tax purposes, protect your account and backup password, and obtain authority before submitting another person’s information.

4. Plans, pricing and allowances

Prices above are Dolly’s United States prices. Apple may display an equivalent local price, currency and applicable tax for your storefront, and the purchase screen controls the amount charged. Annual plans include an annual-payment discount; the saving is not described as a fixed percentage across all markets. Feature allowances reset monthly and do not roll over. Add-ons are available only with Pro; their purchase screen identifies the quantity and any applicable expiry or carry-over rule before you confirm payment.

5. Trials, subscriptions, cancellation and refunds

Eligible new users may start a 7-day free trial of a Dolly Pro subscription through the App Store. A valid payment method is required. Unless canceled at least 24 hours before the trial ends, the subscription renews automatically at the price and billing period shown at purchase.

Separately, Dolly may grant certain accounts temporary Pro access that is not a subscription. This access does not require payment details, ends automatically, does not renew, and does not result in any charge.

Your records remain after a trial, subscription, or temporary Pro access ends. Unless you have an active subscription or temporary Pro access, paid AI features are unavailable or limited.

Paid subscriptions and add-ons are purchased through Apple. Subscriptions renew for the selected period until cancelled. Apple shows the price and billing period before purchase and charges the payment method associated with your Apple Account. You can manage or cancel a subscription in Apple account settings; cancellation takes effect at the end of the current paid period. Deleting Dolly does not cancel a subscription. Refund requests are handled under Apple’s App Store process and applicable mandatory consumer law.

6. AI and financial-information disclaimer

Dolly provides record-entry assistance, AI Financial Insights and informational summaries. It is not a bank, accountant, tax preparer, investment adviser, financial planner, credit service or fiduciary and does not provide financial, investment, legal, tax or accounting advice. AI, OCR, classification, exchange-rate data and statement parsing can be incomplete, delayed or incorrect. Review original records and obtain qualified advice where appropriate.

7. Third-party services and Apple Pay

Dolly depends on providers described in the Privacy Policy. Eligible physical-store Apple Pay capture requires a compatible device, supported payment method, one-time Shortcuts setup and permissions. Payments made inside an app or on a website do not trigger this feature. Device, merchant, network, Apple or Shortcuts behaviour may also prevent a transaction from being recorded. Go and Pro may classify unfamiliar merchants differently.

8. Intellectual property and service changes

Zovix or its licensors own the Services, software, design, brand and documentation. We may change or suspend a feature for security, legal, platform or operational reasons and give reasonable notice where practicable and lawful. Access may be suspended for material breach, fraud, security risk, quota evasion, unlawful use or where required by Apple or law.

9. Disclaimers and liability

To the maximum extent permitted by law, Services are provided “as available” without a promise of uninterrupted or error-free operation, complete extraction, a particular financial outcome or professional suitability. Nothing limits mandatory statutory rights or liability that cannot lawfully be limited.

Subject to that rule, Zovix is not liable for indirect, incidental, special or consequential loss, lost profits or loss caused by reliance on an unreviewed AI/extraction result, where exclusion is lawful. Aggregate liability for paid Services is limited to the greater of amounts paid for Dolly in the previous 12 months or US$100, except where law requires otherwise.

10. Export controls and economic sanctions

You may not access, export, transfer or use Dolly in violation of applicable export-control, trade-control or economic-sanctions laws. You represent that you are not subject to applicable blocking sanctions and are not located in or acting for a territory where the Services are prohibited. Zovix may restrict access where reasonably necessary for compliance.

11. Governing law, disputes and changes

Contact [email protected] before formal proceedings and the parties will try in good faith to resolve the dispute for 30 days unless urgent relief, a deadline or law requires earlier action. Hong Kong law governs and Hong Kong courts have non-exclusive jurisdiction, without removing mandatory consumer protections or forum rights. We may update these Terms with the notice and agreement required by law. Translations are provided for convenience. To the extent permitted by applicable law, the English version prevails in the event of an ambiguity or inconsistency. This does not limit any mandatory rights under applicable law.

12. Contact

Legal: [email protected] · Support: [email protected]

Contact

Product help: [email protected]
Privacy requests: [email protected]
Legal notices: [email protected]