Privacy Policy
Last updated 2026-08-31
Money Leak Finder reads and classifies your statements entirely on your device. There is one exception, and only if you ask for it: the optional AI deep-dive sends anonymised, aggregated figures for analysis. This page says exactly what that means.
No account, no sign-up
You do not create an account and you do not sign in. We never ask for your name, email address, phone number or date of birth. Because there is no account, there is nothing for us to link any activity to.
Your original statements never leave your device
Statements you open are read, parsed and classified inside the app, and the results are stored on your device only. The statement file, the raw transaction lines, your memos, account and card numbers, exact transaction dates and balances are never transmitted — not for AI analysis, not for anything else.
No analytics, no tracking, no advertising
There is no analytics SDK, no tracking, no advertising and no third-party component watching how you use the app. We cannot see how you use it. The only data we ever receive is what an AI deep-dive sends, and only when you start one — described below.
What the AI deep-dive sends, and to whom
Only when you have agreed on the consent screen and started a report yourself, your device sends figures it has already computed: the months covered, the week of the month a payment fell in, the category, a generalised merchant name with branch and area removed, amounts and counts, whether a charge recurs, and the period totals. Those go to our relay server, which verifies your subscription with Apple's signature, and then to the OpenAI API, which writes the report. Nothing is sent on a schedule or in the background, and no other recipient exists. We remove branch and area names from merchant names before sending, but that rule cannot be perfect and, rarely, an unusual place name may remain. You can withdraw consent at any time in Settings; withdrawing stops new reports and deletes nothing.
Reports are stored on your device
A finished report is written to this device's local storage and nowhere else. Our server does not keep the figures you sent, the request, the prompt or the finished text, and does not write them to its logs. Reports stay readable after a subscription ends, they are included in the encrypted backup you export yourself, and they are removed when you delete data on this device.
The business space is kept separate
The app has exactly two analysis spaces, personal and business, and they are stored separately on your device — transactions, categories, reports, AI consent and the figures you enter are never shared between them. Deleting one space leaves the other untouched. For the business space the AI deep dive goes further than the personal one: merchant, supplier and customer names are not sent at all, and neither is your trade name, which stays on this device so you can tell the spaces apart. What goes out is category totals, monthly money in and out, the industry keyword you picked from a list, and the balance figures you entered yourself. Figures you did not enter are sent as "not entered", never as zero.
Original statements are not kept
Once a statement has been analyzed, its raw text is discarded. Only the transaction facts you keep are stored on your device.
Bank and card accounts are never connected
The app never asks for your bank or card login and never contacts a financial institution. You choose a file yourself; nothing is ever fetched on your behalf.
Backups belong to you
You can export an encrypted backup file. It is encrypted with a password you choose and saved where you choose. It is never uploaded to us. If you forget the password, the backup cannot be recovered — not by anyone, including us.
Payment is handled by Apple
The optional subscriptions are auto-renewing in-app purchases billed by Apple, in two tiers — personal analysis and business analysis. The app never sees or stores your card number, billing address or Apple ID. To confirm which tier is active, our server receives a signed receipt from Apple and keeps only a salted hash of its transaction id together with a monthly usage counter. That hash cannot be traced back to you or to what you spent.
Deleting your data
You can erase your data at any time in Settings, choosing which space to clear: the personal one or the business one. Everything in the chosen space goes — transactions, rules, categories, its consent record and every saved AI report — and the other space is left untouched. Deleting the app removes both. Because we hold no copy, deletion is immediate and final.
About this website
This website is served by a hosting provider that may keep standard access logs, such as IP address and page requested, for security and reliability. Those logs are part of ordinary web hosting and are not linked to any analysis. The app itself makes no network request at all, with the single exception of an AI deep-dive you start yourself.
Changes to this policy
If this policy changes, the date at the top of this page is updated, and material changes are described in the app's release notes.
Contact
Questions about this policy can be sent to jamkankr@gmail.com.