Privacy Policy

Account Information

• Email address and password (encrypted)
• Name and profile information
• Currency preferences

Financial Data

• Expense and income records (encrypted)
• Category and tag information
• Shared expense data (with your consent)

Receipt & bank statement imports

• Receipt photos you upload for AI import
• Bank statement PDFs or images you upload for transaction import
• Sensitive banking identifiers (e.g. IBAN, account numbers, postal addresses) are redacted before storage and before AI processing where technically possible

Service Provision

• Process and store your financial data securely
• Calculate balances and settlements
• Provide AI-powered insights (with your consent)

Communication

• Send important service updates
• Provide customer support
• Share product updates (opt-in)

AI document import

When you use receipt scan or bank statement import, we process the document to extract amounts, dates, merchants, and categories so you can review and confirm entries before they are saved.

• Nothing is booked automatically — you review and select what to import
• AI import uses a shared credit allowance on your plan
• We do not use your uploaded documents to train third-party AI models

AI document processing

Receipt and bank statement images may be processed by reputable AI providers for text extraction. We send redacted/sanitized document images where possible, not your full unredacted bank PDF.

File storage

Uploaded receipt images and bank statements are stored in secure private storage. Access uses short-lived signed URLs — not permanent public links.

Hosting & database

Application hosting and encrypted database services within the EU/EEA where available.

Encryption

All your data is encrypted using industry-standard AES-256 encryption. Your financial information is encrypted both in transit and at rest, ensuring maximum protection.

Access Control

We implement strict access controls and regularly audit who has access to your data. Our team members only access your data when necessary for providing support, and all access is logged and monitored.

Infrastructure Security

Our servers are hosted on secure, SOC 2 compliant infrastructure with regular security updates and monitoring. We use multiple layers of security to protect your data.

Right to Access

You can access all your data at any time through your account settings or by contacting us. We'll provide you with a complete copy of your data in a machine-readable format.

Right to Deletion

You can delete your account and all associated data at any time. This includes all financial records, shared expense data, and personal information. Deletion is permanent and cannot be undone.

Right to Portability

You can export your data in standard formats (CSV, JSON) to use with other services. We make it easy to take your data with you if you decide to switch platforms.

Right to Control AI Training

You can choose whether to participate in AI model training. If you opt out, your data will not be used for improving our AI features, even in anonymized form.