Privacy Policy

Account data. Your email address and sign-in credentials, held in AWS Cognito. If you sign in with a social provider we receive your name and email from that provider.

Financial data from earlier versions. If you previously linked a bank through Plaid, we receive read-only balances, transactions, and investment holdings for the accounts you choose. The Plaid access token is stored server-side (encrypted at rest in DynamoDB) and never reaches your browser or device. We can never move money.

Payment data. Subscriptions are processed by Stripe. Your card number never touches our servers — we store only your subscription status and Stripe customer reference.

Health data from earlier versions. Health figures you enter in the web app (heart rate, steps, calories, weight) are kept in your browser’s local storage on your device, separated by account. If you enable “Share health with the website” in the iPhone companion, it sends a health summary to our authenticated backend so the website can display your Apple readings. Sharing is off by default and can be turned off in the companion app.

Camera. The optional camera pass-through renders entirely on your device. Live transcript is a separate opt-in feature: it analyzes short microphone segments and periodic camera frames on your device, then saves transcript text and timestamps in this browser. New sessions do not save camera snapshots. It does not upload your audio or images or retain raw audio or video. If you choose to scan a receipt or nutrition label, the selected image is processed on your device by the OCR reader and is not uploaded to our servers.

Usage data. We use Amazon CloudWatch RUM for page-view and performance analytics, which sets cookies in your browser.

Voice recordings are stored in this browser’s local database, separated by account. Meal and purchase logs also stay in this browser. These local entries are not automatically copied to another device. Clearing browser storage removes them.

Live transcript text and timestamps are stored locally, separated by account. Older sessions may still include snapshots saved by earlier versions. You can export the text or delete an entire session from Live transcript. The feature downloads public AI model files from Hugging Face; those downloads disclose ordinary connection information to the model host, but no captured audio, images or transcript text is sent to it. Clearing browser storage removes saved transcripts and may remove cached models.

To provide your local transcript and account services, operate your subscription, keep the Service reliable and secure, and respond when you contact us. We do not sell your personal data, and we do not use your financial data for advertising.

Only the processors the Service is built on: AWS (hosting, sign-in, storage, analytics), Plaid (bank connections), and Stripe (payments), each under their own privacy terms. We disclose data beyond that only if the law requires it.

Account and subscription records are kept while your account exists. Plaid access tokens are deleted immediately when you unlink a bank. Locally stored health figures and settings stay on your device until you clear them or delete your account.

You can delete your data at any time. Unlinking a bank in the app deletes the stored access token right away. To delete your account and everything tied to it, send a request through the support page from the email on your account, and we will delete your account records, subscription linkage, and any stored tokens within 30 days.

The site uses cookies for analytics (CloudWatch RUM) and your browser’s local storage for sign-in tokens and your dashboard preferences. Blocking cookies keeps the marketing site fully usable; local storage is required for staying signed in.

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children.

We’ll update this page as the Service evolves; material changes get a new “last updated” date. Questions? The support page reaches a human.