Privacy

We never ask for your bank password, your online-banking login or any other bank credential, and we never connect to your bank. Money data enters only as a file your bank already lets you export: CSV, XLSX or PDF.

We never ask for an IBAN or a card number, and the product has no field that would hold one.

Your group, its members and their roles; the accounts you add, each identified by an opaque id and the label you give it; the transactions, tags, forecasts and investment positions you create or import.

• We store no IBAN and no card number, not even the last four digits. A write that carries one is rejected server-side, on every path: forms, statement import, receipt reading and the agent tools.
• When a statement has an account-number column, the column is dropped while the file is read. We keep the column header and the institution, never the value.
• Each member sees only the accounts shared with them. No other group can see your data.

A statement file or a receipt photo is read once to propose transactions. The raw file is discarded after extraction; only the rows you confirm are kept.

A group can choose to keep the original files with the retention setting in Settings › Group. Turning that setting off deletes the files that were kept.

We use a small set of processors, each for one job:

• WorkOS — sign-in and account security.
• Stripe — subscriptions and invoices. Card details go to Stripe and never reach us.
• Convex — the database that holds your group’s data.
• Vercel — hosting of the web app.
• Groq — the AI model that reads an uploaded receipt and proposes the transaction.
• The ECB rates feed — the European Central Bank’s published exchange rates, used to convert foreign-currency amounts. Nothing about you is sent to it.

We do not sell your data and we do not use it for advertising.

The public pages of this site load scripts only from our own domain and from the origins listed here. Each listed origin has an owner who answers for it and a purpose.

You can access, export and delete your data yourself, without writing to us. Removing a member from a group frees their seat; it does not delete their data.

• Settings › Account: Export my data and Delete my data, for your own records.
• Settings › Group: the group owner exports or deletes the whole group.

An export never contains rows you cannot see in the app.

Questions about this policy or a request about your data go to our support address.