Privacy Policy

1. Your ledger data never touches our servers

Every expense you record — amount, category, merchant, date, description — is stored locally on your device and synced directly from your browser to your own Google Drive, inside a hidden, app-specific storage area (Google's drive.appdata scope). That area is not visible in your regular Drive file list, is not shared with any other app, and — just as importantly — this app cannot see or touch any other file in your Drive. Your ledger content is never sent to, processed by, or stored on our own servers.

2. What we do collect

When you sign in with Google, we receive and store your Google account's stable identifier, email address, display name, and profile picture URL, plus an encrypted copy of a Google refresh token. That token exists for one purpose: exchanging it for a short-lived access token when your browser needs to talk to your Google Drive. We are technically capable of using that token to read your app-data folder ourselves, but we do not — the only thing our server does with it is mint a temporary access token and hand it back to your browser, which then talks to Google Drive directly. The refresh token cannot be used to access anything in your Drive outside this app's own hidden folder.

3. Voice and text processing

When you record a voice entry, the audio is sent to Groq (speech-to-text) to produce a text transcript. Whatever text results — spoken or typed — is then sent to Cerebras to be turned into a structured expense entry (amount, category, etc.). Neither call includes your name, email, or any other account information — only the text or audio needed to answer that one request.

Groq's Zero Data Retention setting is enabled on our account, meaning Groq does not retain your audio or its transcript beyond processing the request. Cerebras states, in its own published documentation, that it does not retain inference prompts, requests, or responses — no user-generated content is stored. We rely on each provider's own published policy for these claims and will update this section if either provider's terms change.

4. Cookies and tracking

We set one cookie: a signed, httpOnly session cookie that keeps you logged in for up to 30 days. It carries no advertising or tracking purpose. We do not run any analytics, advertising, or third-party tracking scripts of any kind — nothing on this app reports your usage to us or to anyone else beyond the minimal server logs described below.

5. Logs

Server logs record which user made a request, which AI model was used, how long it took, and whether it succeeded — never the actual content of what you said, typed, or recorded.

6. How long we keep things, and how to delete your data

We keep your account record (profile fields and encrypted refresh token) for as long as you use the app. You can revoke our access at any time from your Google Account's "Third-party apps & services" settings — doing so immediately invalidates our stored refresh token. Your ledger data is unaffected either way, since it already lives on your device and in your own Drive, not with us. To request deletion of the account record we hold, email xt263994263@gmail.com.

7. Children

This app is not directed at children, and we do not knowingly collect information from anyone under 13.

8. Changes to this policy

If we change what we collect or how we use it, we'll update this page and its "Last updated" date.

9. Contact

Questions about this policy: xt263994263@gmail.com.