Privacy Policy
Last Updated: September 2026
Privacy First
Your financial data is stored locally on your computer. We don't have access to your transactions, budgets, or financial history. When you use AI features, data is processed and discarded rather than stored — the exceptions are Mobile Capture: a capture waiting to reach your desktop, and the account names your phone shows, both described below.
Our Privacy Commitment
SenticMoney is built with privacy as the foundation. Your complete financial database stays on your device. We never have access to your full financial history.
What Data We DON'T Store
- Your financial transactions
- Your bank account information
- Your spending patterns or history
- Your budget data
- Your receipt images (except briefly, when Mobile Capture relays one from your phone — see below)
- Any personally identifiable financial information
What Data We DO Collect
Subscription Information: When you subscribe to Standard, we collect your email address for account management and payment information through our payment processors.
Security Information: When you activate or verify a license, our licensing server may record the requesting IP address for abuse prevention and troubleshooting. This is tied to your license, not your financial data, and is removed when you delete your account.
Website Analytics: When you visit our website, we collect anonymous usage data to understand how people use our site. This includes page views, browser type, and general geographic region.
Desktop App Usage Counter: The SenticMoney desktop app sends an anonymous signal when it opens, once when you add your first transaction, and once when you finish your one free import, so we can count how many installs are active. Each signal contains only a random install identifier (not tied to your name, email, license, or device), the event type, the app version, and your platform (Windows or Mac) — no financial data, and we don't log your IP address with it. This counter is on by default; you can switch it off at any time in the app under Profile → Privacy.
Support Correspondence: If you contact us for support, we keep a record of our correspondence to help resolve your issue.
How AI Features Work
Standard subscribers have access to five AI-powered features, each with different data handling:
- SenticMoney Genie: When you ask questions about your finances, a snapshot of your financial data is sent to our cloud proxy for processing by the AI (Google Gemini 3.1 Pro, or a backup when Gemini is down): totals by month and category, budgets, bills, income and goals, and a limited set of transactions (recent ones, your largest this year, and ones you have tagged or noted, up to 180 days back) with their date, description, amount and category and any tags or notes, plus the items on recent receipts and bills. Your full database, your Private Information fields and your name are never sent.
- Bank Format Detection: When you use "Analyze with AI" during bank statement import, the column header names and the first ten rows of your CSV or Excel file are sent, values included, so the AI can identify your bank's format. Any balance or account-number column in those rows goes with them. Rows after the first ten are never sent.
- Bank Statement PDF Import: When you import a bank statement as a PDF, the pages are converted to images and sent to our cloud proxy for processing by Google Gemini 3.5 Flash, which reads the transactions off the page. Because the AI reads the statement itself, these images contain what is printed on it — including transactions, account numbers, and balances. The extracted transactions are returned to you, and the images are processed in real time and discarded, like all AI requests described below.
- Receipt & Bill Scanning: Images you upload for AI-powered parsing are sent to our cloud proxy for processing. The extracted text is returned to you and the image is discarded.
- Mobile Capture: When you snap a receipt or bill on your phone, the image is uploaded to our relay server and held there, keyed to your licence, until your desktop app collects it. It is deleted from the relay immediately once your desktop confirms it has the image. If a capture is never collected — for example because the desktop app is not opened again — it is purged in normal operation within about seven days. Images are re-encoded on upload, so EXIF metadata, including any GPS location recorded by your phone, is not retained. Uploads travel over HTTPS with TLS encryption.
- Mobile Capture account list: So your phone can offer your accounts when you capture, your desktop app sends our relay the names of your accounts and the default account, if you set one. Only the names — no balances, account numbers, or transactions. Nothing is sent until you open Mobile Capture on your desktop. Each update replaces the last. The list is deleted when you choose Forget phone (Profile → Mobile Capture), when your licence ends, or after 30 days without an update from your desktop. The account you pick for a capture travels with that image and is deleted with it. We don't write your account names to our logs. Tip: give accounts a nickname rather than a full account number.
Important: All AI requests are routed through our cloud proxy server (not directly to Google). We do NOT store the financial context sent for AI processing — it is processed in real time and discarded. The exceptions are Mobile Capture above: a receipt image sent from your phone is held on our relay until your desktop app collects it, then deleted, and the account names your phone shows are kept as described. We cannot access your historical transactions or build a profile of your spending.
Free or Standard, the rule is the same: your financial data leaves your computer only when you use an AI feature or phone capture. Three other signals leave your computer, and none of them carries financial data:
- Update check (both tiers): the app asks our server for the newest version, sending only whether you are on Windows or Mac. On Standard it also reports the app version and platform with your license key.
- License check (Standard): about once a day, the app sends your license key and a machine identifier to our licensing server to confirm your license. The Free tier has no license check.
- Anonymous app-open counter (both tiers): described above under Desktop App Usage Counter. It is on by default; turn it off in one click under Profile → Privacy.
On the Free tier the only AI feature is Analyze with AI on your one free bank-statement import: if you use it, the first ten rows of that CSV or Excel file are sent as described under Bank Format Detection.
Third-Party Services
Payment Processing (Stripe & PayPal): We use Stripe and PayPal to process subscription payments. They collect and process payment information according to their own privacy policies. We never see your full credit card number.
AI Processing (Google Gemini): AI requests are processed through Google's Gemini API. Google's data usage policies apply to this processing. We use their API in a way that does not allow training on your data.
Backup AI (Anthropic Claude and OpenAI GPT): Used only when Gemini fails. A Genie question or AI Insights analysis then goes to Anthropic's Claude, and if that also fails, to OpenAI's GPT. Receipt, bill and statement reading, import format reading and files you attach to the Genie use Gemini only. Anthropic's and OpenAI's data usage policies apply to that processing.
Hosting (Render): Our subscription and AI services are hosted on Render. They provide secure infrastructure but do not have access to your financial data.
Your Data Rights
- Data Ownership: You own all your financial data. It's stored on your device.
- Data Portability: You can export your data anytime to CSV, Excel, or PDF.
- Data Deletion: Uninstalling SenticMoney does not delete your financial data — it stays on your computer until you delete it yourself. To remove everything, delete the SenticMoney data folder:
%LOCALAPPDATA%\SenticMoneyon Windows, or~/Library/Application Support/SenticMoneyon macOS (Mac users should also delete~/Library/Logs/SenticMoney). - Account Deletion: Contact us to delete your subscription account, associated email, and any associated license records (including activation and verification logs) from our servers.
Security
Local Data: Since your data is stored locally, you're responsible for securing your computer. We recommend:
- Using password protection in the app (username dropdown → Profile)
- Keeping regular backups on external drives or secure cloud storage
- Using standard computer security practices
Data in Transit: When using AI features, all data is transmitted over HTTPS with TLS encryption.
Children's Privacy
SenticMoney is not intended for children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We'll update this policy if our privacy practices change. The "Last Updated" date at the top shows when changes were made. Continued use of SenticMoney after changes means you accept the updated policy.
Contact Us
If you have questions about this privacy policy, contact us at:
E-Comm Solutions LLC
Email: contact@senticmoney.com