Security & trust

App Spender never connects to your bank and never asks for credentials of any kind. You upload a file; we read it once; it goes.

• Your bank statement is deleted immediately after the scan, automatically, every time.
• We extract recurring app and subscription insights only: app name, date, amount and recurrence pattern.
• Balances, salary, transfers and general spending are ignored and never stored.
• No account is required, for your first scan or any after it.
• You can delete your extracted results and all session data at any time, from inside the chat.
• You can delete anything sensitive before uploading. We read the date, description and amount, so removing everything else produces the same result. Delete those lines rather than blacking them out: a black box drawn over a PDF covers the words on screen without removing the text underneath, and we would still read it.

What we'd tell you if it went wrong

If we ever had a security incident affecting your data, you would hear it from us directly and promptly, along with what happened and what we did about it. That's the standard POPIA sets, and it's the one we hold ourselves to.

You control what stays. That is the whole model.