Privacy Policy

What we store

Only what the app needs to work. We do not buy, sell, or enrich your data with outside sources.

• Your account: email address, display name, time zone, currency, and — if you upload one — a profile photo.
• Your financial records: the transactions, budget rules, goals, categories, credit cards and savings goal you enter yourself.
• Your conversations with the AI assistant, and the messages you write in a shared Household’s chat, with any photo or video you attach.
• Your settings: notification preferences, the day you chose for the monthly summary email, and your theme.
• If you add a card during your free trial, a record of what you agreed to: the plan, the price, the date and time of your first charge and the exact sentence you accepted, with the moment you accepted it. It is included in your data download and deleted with your account.
• Your feedback about Clarity, only if you choose to give it: your thumbs up or thumbs down, any comment you add, and whether you dismissed the question. Only the Clarity team reads it, to decide what to improve. It is included in your data download and deleted with your account.
• The country and approximate city your account was created from, derived from your connection by our hosting provider at signup. The IP address itself is not stored, and we do not track your location afterwards.
• Technical records needed to run the service: sign-in sessions, push notification subscriptions for the devices you enable, and server error logs.

What we do NOT store

Clarity does not connect to your bank. There is no bank login, no account number, and no card number anywhere in the product — you type in your own figures.

We never see your password. Passwords are hashed by our authentication provider; the same is true for passkeys, where the private key never leaves your device.

Artificial intelligence

When you use the AI features (the chat, the analysis, the tax estimate), we send a summary of your figures to our AI provider, Groq, to generate the wording. That summary contains amounts, category names and dates. It does not contain your email address or your name.

The AI never calculates your money. Every figure it repeats is computed on our servers first; the model only writes the sentence around it. If our AI provider is unavailable, the feature says so — it does not guess.

Who else touches your data

We use a small number of providers, each for one job:

• Supabase — database and authentication (data stored in the United States).
• Vercel — hosting of the application.
• Stripe — payments. Card details go directly to Stripe; we never see or store them.
• Resend — sending the emails described below.
• Groq — generating the wording of AI features.
• Sentry — error reports, so a failure gets fixed instead of going unnoticed. We send the error message, the page it happened on and the environment. We never send your identity, your email or your figures.

Emails we send

Account emails: confirming your address and resetting your password. These are required to run the service and cannot be turned off while you have an account.

Billing emails: a confirmation when you add a card during your trial or start a paid subscription, reminders before your first charge after a trial, and a notice each time a payment does not go through. They are part of your subscription and cannot be turned off while it is active.

The monthly summary: one email a month with your closed month in review. It is on by default and you can change the day or turn it off at any time — from Account, or with the unsubscribe link in every one of those emails.

We do not send marketing emails and we do not share your address with anyone for that purpose.

How your data is protected

Every table holding your information is protected by row-level security, enforced by the database itself: a query returns a row only if the session asking is entitled to it — you, or, for a shared Household, the people in that Household. Data is encrypted at rest by our database provider and in transit over HTTPS.

Changes to your financial records are recorded in an audit trail that you can read and no one can alter.

Shared Households

A Household is a second, separate book that you choose to share with specific people you invite by email. It exists only if you create one; if you never do, nothing in this section applies to you and your data is yours alone.

Inside a Household, everyone in it can see and edit everything in that book — transactions, budget rules, goals and categories — and can see who entered each item. Your own personal book is never part of it and no one else can see it, ever.

Only the person who created the Household can invite or remove people, or close it. An invitation can be accepted only from the email address it was sent to.

If you leave a Household, or are removed from it, you stop seeing its book immediately — but what you entered while you were in it stays in that book, because it is part of a shared record other people are still relying on. If you want it gone, delete those entries before you leave.

If the Household is closed, its shared book is deleted for everyone, immediately and permanently. Personal books are not affected.

Your rights

You can delete your account at any time from Account → Delete account. Deletion removes your personal data from our systems; anonymous aggregates that cannot identify you may remain in backups until those backups rotate out.

If you were in a shared Household, the entries you added to its book stay with that book, and the record of what changed stays in its audit trail with your name replaced. Delete those entries before you leave if you do not want them to remain.

You can ask us for a copy of your data, ask us to correct it, or ask what we hold, by writing to support@alphaledgerco.com. We answer within 30 days.

You can also download a complete copy yourself, at any time, from Account → Export your data → Everything (JSON): your profile and settings, your transactions, budget rules, goals, categories, credit cards and savings goal, your conversations with the AI assistant, the messages you wrote in a Household chat (not other people’s) and your feedback. Photos and videos are not inside the file. The security log of who changed what is not in it either, because it can include other people’s actions: ask us for it by email.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you these rights explicitly, including the right to complain to your local data protection authority. If you are in Canada, PIPEDA applies and you may complain to the Office of the Privacy Commissioner of Canada.

Where your data lives

AlphaLedgerCo is registered in Canada. Our database and hosting providers store data on servers in the United States. By using Clarity you agree to that transfer.

Changes and contact

If we change this policy in a way that affects you, we will say so in the app before the change takes effect.

Questions about privacy: support@alphaledgerco.com.