Where your data lives
Short version: your ledger lives on your phone. Things leave the device only when a feature cannot work without it, and this page lists every one of those cases.
On your phone, and nowhere else
- Every transaction, account, category, budget, savings pocket and debt.
- Your card routing rules: the last four digits you mapped to an account, and the keywords you wrote. These are never uploaded, to any server, ever. They are also lost if you uninstall, which is the price of that promise.
- Your chat history with the assistant.
- The names of the cards seen by Apple Pay capture.
The app works offline for all of it. No login is required to keep a ledger.
What reaches our servers
| What | Why | Where |
|---|---|---|
| Profile: name, country, currency, preferences, avatar | So your setup survives a reinstall or a new phone | Firebase (Google) |
| Your question to the assistant, your name, and the transactions in the range you asked about | To answer the question | Our Cloud Function, then OpenAI |
| A receipt photo | To read amount, merchant and date from it | Our Cloud Function, then OpenAI, as an image |
| The text of a bank SMS or a payment notification, on Android with capture enabled | To turn it into a transaction | Our Cloud Function, then OpenAI |
| The text of a voice note, never the audio | To turn it into a transaction | Our Cloud Function, then OpenAI |
| Aggregate amounts and movements of a shared fund | So your partner sees the same fund | Firebase, visible to that person only |
| Your whole ledger | Only if you enable cloud sync or cloud backup, a Pro feature | Firebase |
| Subscription status | To know whether you are Pro | RevenueCat |
| Crash reports and anonymous usage events | To find bugs before you have to report them | Firebase Crashlytics and Analytics |
We do not sell your data, and there is no advertising profile built from your transactions.
About voice
The speech recognition is done by your operating system, Apple on iPhone and Google on Android. The audio does not come to us. What travels is the resulting text, which is what gets turned into a transaction.
About SMS on Android
This one deserves being explicit, because "the app reads my SMS" sounds alarming.
- It only happens on Android, only with Pro, and only after you grant the permission and turn the feature on.
- You choose a whitelist of senders. Messages from anyone not on that list are never read.
- Only messages from those senders are processed, and their text is sent for extraction. Nothing else in your inbox is touched.
- You can revoke the permission at any time in system settings, and the feature stops.
The same applies to the payment notification listener used for Google Pay: it filters to wallet and payment apps, and access is granted by hand in Android settings.
About the shared space with your partner
The Couples module shares a common fund, not your finances. What the other person can see is: the fund's aggregate amounts, the movements of that fund, and the name and avatar you had when you joined.
Your accounts, your balances and your personal transactions are never shared. When you contribute to the fund from one of your accounts, which account it came from stays entirely on your phone.
About the Colombian tax module
Answering the questions in the tax module is a private calculation on your device. Nothing is sent.
The only exception is if, after answering, you explicitly accept being contacted: then your name, your email, your phone if you linked WhatsApp, and your country are sent so the accounting team can reach out. Without that consent, your answers never leave the phone.
Deleting everything
- Uninstall removes the local ledger. We cannot recover it, because we never had it.
- Settings, Delete my account removes your account and the data associated with it on our side. Remember to cancel your subscription in the App Store or Google Play first, since deleting the account does not stop the billing.
The permissions we ask for, and what for
| Permission | Used for |
|---|---|
| Camera | Photographing receipts |
| Microphone and speech recognition | Voice notes |
| Notifications | Reminders and export progress |
| SMS, Android only | Bank message capture, Pro |
| Notification access, Android only | Google Pay and payment app capture, Pro |
| Photo library | Attaching an existing receipt image |
| Tracking, iPhone | Only for advertising, and you can decline with no loss of features |
Full legal text lives in the privacy policy.