Privacy & how your data is handled

We treat your data — especially your medical and financial data — as private by default. Here's what we collect, where it lives, and who has access.

What we store

• Account info — your name, email, and password hash
• Expenses — what you've logged: provider, amount, date, category, description, family member, payment source
• Receipts and supporting documents — every file you upload
• Connected accounts — for Plaid users, the read-only access token + balance + transaction history
• Subscription status — whether you're on Free, Premium, or a Tax Bundle purchase

What we don't store

• Your bank password (Plaid handles that — we never see it)
• Your full bank account number or routing number
• Your Social Security Number
• Your full credit card number (Stripe handles that — we never see it)

Where it lives

• Database: Supabase (managed Postgres on AWS, in the US)
• Receipt files: Supabase Storage (also in the US)
• Bank connections: Plaid (US, SOC 2 compliant)
• Payments: Stripe (US, PCI-compliant)

All connections to and from these services run over HTTPS/TLS.

Who can see your data

• You can see all of your data, anytime, anywhere you're logged in
• No third parties — we don't sell, share, or rent your data

What we use AI for

• Receipt scanning (Premium) — your receipt image goes to Anthropic's Claude API to extract structured data, then we delete the API copy. The receipt itself stays in your storage.
• Transaction classification — bank transactions are sent to Anthropic to classify as medical or non-medical.

The AI provider does not retain your data for training, per our agreement with them.

Cookies and tracking

We use a small number of essential cookies for sign-in and session management. Optional analytics (PostHog) help us understand how the app is used in aggregate — you can opt out in your browser if you prefer.

Data export

You can export your full ledger to CSV at any time from the account menu (Export Data). Receipt downloads are part of the Tax Documents export.

Account deletion

If you want your data permanently deleted, see "Deleting your account or exporting your data."

Questions

Privacy questions go to the Help & Support menu. We answer every one.

Updated on: 05/06/2026