Privacy policy

• Account Your email address and password (to sign in and to recover it). The password is stored encrypted; nobody, us included, can read it.
• The financial data you enter Transactions (name, amount, date, category), accounts and cards, recurring rules, installment purchases and savings balances. We never connect to your bank: the only data that exists is what you type or what you bring in yourself (see “Reconciling your statement”).

We don't collect location, contacts, advertising data or tracking identifiers. The app has no third-party analytics and no ads.

Your data is stored in our database (Supabase, on AWS infrastructure in the U.S.), encrypted in transit and isolated per user: each account can only read and write its own records. A local copy is also kept on your device so the app works offline.

If you use quick capture (typing a sentence like “uber to the airport 320”), that sentence and a summary of your spending patterns (the names, categories and accounts you use) are sent to Anthropic's API (Claude) to classify the expense automatically. Anthropic does not use data sent through the API to train its models. You can skip this feature and enter everything by hand.

If you use reconciliation, you pick a PDF of your card statement and that file is sent to Anthropic's API (Claude) to read the charges and compare them against what you already recorded. The PDF is not stored: it is processed and discarded.

All that remains is the result you see on screen, the transactions you choose to add, and a few notes about your bank's format (how it lays out its columns) so the next read comes out better. This is a feature you start: without reconciling, no statement ever leaves your phone.

Nobody. We don't sell or share your data with third parties. The only providers that process it so the app can work are Supabase (database and authentication) and Anthropic (quick capture and reconciliation only, as described above).

In the app: Settings → Account → Delete account. This permanently deletes your account and all of your data from the server (transactions, accounts, net worth, everything), with no extra steps and no need to contact support. Signing out also removes the local copy from the device.

We keep your data for as long as your account exists. When you delete it, the data is removed from the database immediately.

If this policy changes, we'll update this page and the date above.