Security and Privacy

Your transaction history, merchants, budgets, bank accounts, and investment holdings are stored in an encrypted database on your device only. They aren't stored on our servers. They stay on your phone, tied to your account, for as long as the app is installed.

When your phone captures a notification from an app you chose to track, the text of that notification is sent once, over an encrypted connection, to our backend. Our backend passes it to Google's AI service (the Gemini API) to work out the merchant, amount, and category, then returns the result to your device to store.

To help recognise transfers between your own accounts, the notification is sent together with the names of your bank accounts, the last four digits of their account numbers, and your own name as you entered it. When you ask for suggestions of which apps to track, the names of the apps installed on your phone are sent the same way.

We don't write the notification text to our database or to our logs, and we keep nothing from it afterward. Google's AI service processes it under Google's own terms. If you track your Messages app, texts that aren't about money also reach this step and are discarded. To avoid that, track only your banking apps.

One-time passwords, PINs, and verification codes are filtered out on your phone and are never sent to us.

These are the only things tied to your account on our servers, for as long as your account exists:

• Your account identity: your name, email, and Google account ID.
• Your subscription status and billing state (Free or Pro, renewal date).
• Usage counts only: how many banks, apps, and transactions you have, as numbers, not the financial content behind them.

You sign in with Google Sign-In, which never shares your Google password with us. It only confirms who you are.

Deleting your account removes your identity, subscription, and usage counts from our servers immediately and permanently. Every server-side table tied to your account is deleted in the same operation, with no retention window.

Your on-device transaction data is separate, since it was never sent to us to begin with. Deleting your account from this website can't reach into your phone to erase it. Use Delete Account inside the app to wipe that local copy too, or uninstall the app.