Privacy policy
Updated: 2026-09-23
What this app stores
The financial records you enter: accounts, transactions, categories, tags, budgets and settings. If you sign in with Google, we also store the identifier, email address, name and avatar link that Google gives us — nothing else from your Google account. If you create an account with email, we store the address and your password — only as a one-way hash that nobody, including us, can turn back into the password.
You enter transactions yourself, dictate them, or import a file you downloaded. We never ask for your bank password.
Where it is stored
In a PostgreSQL database hosted by Supabase in the European Union (Frankfurt). The app and the assistant connector read and write it directly; your device keeps only the sign-in session, not a copy of your records.
Row-level security means every row is readable and writable only by the account that created it. Nobody else — including other users of the app — can reach your rows.
Who else is involved
- Google — sign-in only. Google learns that you signed in to this app; it does not receive your financial data.
- Supabase — hosts the database and the sign-in service, and sends account emails: address confirmation and password reset.
- Vercel — hosts the site itself.
- Your browser — voice input uses the browser's own speech recognition. In some browsers the audio is processed on the vendor's servers. That is the browser's behaviour, not ours; the recognised text and the amounts stay on your device.
- DeepSeek — AI parsing, only while you are signed in. See «AI parsing» below.
- Anthropic — only if you connect Budget Tracker by Smart Money to Claude yourself. See «Claude, ChatGPT and Codex connector» below.
- OpenAI — only if you connect Budget Tracker by Smart Money to ChatGPT or Codex yourself. See the same section below.
- PostHog — usage statistics on the shared service, stored in the EU. See «Usage statistics» below.
- Polar — subscription payments, as the merchant of record. Your card details and billing address are entered on Polar's checkout and stay with Polar; we receive only your subscription status and billing period.
AI parsing
This is the only feature where the content of your records goes somewhere other than your own account. It runs automatically in quick add whenever you are signed in; there is no separate switch for it. Dictation is sent as soon as you stop speaking — you press nothing, and the parsed entries arrive as a finished list. A line you typed yourself is sent when you press «Add». Signed out, quick add falls back to parsing on your device, and nothing is sent anywhere. The full manual entry form never uses it.
Two things can be sent to the external model (DeepSeek), and nothing else. The first is the text you dictated or typed yourself — dictation at the moment you stop speaking, a typed line when you press «Add». The second is the descriptions of statement rows on the import screen — only if you press «Categories via AI» there, and without the amounts, dates or balances that go with them. Card and account numbers, national ID numbers, phone numbers and email addresses are stripped out before sending; the server checks again and refuses if anything remains. Your transaction history, balances and reports are never sent, and neither is the statement file itself — PDF is read on your device.
The model does not decide amounts or dates. It splits the text into separate phrases; the amounts, dates and accounts in them are read by the same code that works offline. It does suggest a category, but only from the list of categories in your app — anything else is discarded, and a category you have corrected yourself always wins. Nothing is saved automatically: you see the proposed list and confirm it yourself.
Claude, ChatGPT and Codex connector
Budget Tracker by Smart Money can be connected to Claude, the assistant made by Anthropic, and to ChatGPT and Codex, made by OpenAI. All of them use the same connector. Nothing is shared until you add it in the assistant yourself and press «Allow access» on the Budget Tracker by Smart Money consent screen. It works only on the shared service, with an active subscription or trial.
When the assistant calls the connector, it reads what the request needs — accounts and balances, transactions, categories, tags, deposit terms — from the same database the app uses, under your account and the same row-level security. It can add transactions, accounts, deposit interest and transactions from bank notification text you give it, and edit or delete transactions, accounts, categories, tags and budgets.It cannot move money or reach your bank.
The connector receives only the parameters of each call, such as a phrase to record or a date range, and never your conversation with the assistant. It keeps no copy of those calls: what you add is saved as ordinary records, exactly as if you had typed them in the app. Usage statistics record only which tool was called, without its parameters or result. Technical error messages may appear in the hosting logs at Vercel for as long as Vercel keeps them. What the connector returns becomes part of your conversation, and Anthropic or OpenAI handles it under its own privacy policy.
To stop access, remove the connector in the settings of Claude, ChatGPT or Codex. To have the permission revoked on our side as well, write to the address below.
Usage statistics
On the shared service (smart-money.ink) we use PostHog, with data stored in the EU, to understand how the product is used: which pages are opened, which site or campaign link brought a visitor, and events such as «signed in», «started a trial», «added a transaction» (with its source — form, voice, import — and type), «an assistant called a connector tool» (with the tool's name) or a step on the connector authorization screen (opened, signed in, allowed, declined). Events never contain amounts, merchants, notes, account or category names, text you typed or dictated, or file contents. Automatic capture of clicks and page text and session recording are turned off.
No cookies or stored identifiers are used for this. Before you sign in, visits are anonymous and are not linked between page loads. After you sign in, events are linked to your internal account identifier — not your email address or name — so we can see, for example, whether people who start a trial keep using the app. Page addresses are cut down before sending: everything after «?» or «#» is removed except campaign tags, and record identifiers in paths are replaced. PostHog uses the IP address to estimate country and city and does not store the address itself.
You can turn statistics off in Settings → Usage statistics; the choice is remembered in that browser. To have the statistics linked to your account deleted, write to the address below.
Security
All traffic is encrypted with TLS. The database is encrypted at rest. Every account with access to the servers is protected with two-factor authentication. If a security incident affects your personal data, we will tell you within 72 hours of confirming it.
What we do not do
No advertising. No ad networks, no tracking cookies, nothing that follows you to other sites. No selling or sharing of your data, anonymised or otherwise. There is no business model here that depends on knowing what you eat or where you travel.
Your data is yours
Export everything to JSON or CSV at any moment, from Settings. The Delete data button in Settings erases your records both in this browser and on the server at once. To have the account itself closed, write to the address below: the account with all its data is deleted within 30 days.
We keep your data for as long as your account exists. Requests to access, correct or delete your data are answered within 30 days.
Children
The app is not intended for children under 16.
Changes
If this policy changes in a way that matters, the date changes with it, and we will send you the previous wording on request.
Contact
Questions and deletion requests: support@smart-money.ink