Official Policy Documentation
Effective date: Sept. 25, 2026
Privacy Policy
This policy explains our local-first storage model, opt-in AI processing consent, and how you retain total ownership of your financial records.
1. Data Ownership & Storage Architecture
- Local-First Ledger: Transactions, budgets, debts, and savings are stored locally on your device in an encrypted database using AES-256 encryption.
- No Bank Login: ClearSpend never requests, accesses, or stores your bank credentials or account passwords.
- Signed-in monthly budgets sync automatically between your devices. Transaction cloud backup is separate and runs only when you enable it. Guest budgets stay on this device.
2. Data We Process
- Account profile: Firebase user ID, email address, device platform, and anonymous app installation identifiers.
- Financial entries: Ledger amounts (tracked as integer minor units), timestamps, category tags, merchant names, and notes.
- Receipt and voice captures: Processed via server-side AI OCR or speech-to-text inference solely to draft pending transaction records.
- Clio AI: Processed only with explicit user consent. Data is never used to train third-party foundation models.
3. Third-Party Subprocessors & Partners
- Firebase (Google LLC): Account authentication and push messaging; budget sync is stored on Clear Spend's server.
- RevenueCat (RevenueCat, Inc.): In-app purchase verification, entitlement status, and subscription lifecycle management.
- Google AdMob: Server-side verified rewarded ads (Google Mobile Ads SDK) for earning optional AI credits.
- OpenAI API: With your in-app consent, Clio sends your budget message, prior session turns, and the spending summary you approved for AI responses.
4. Data Retention & Erasure
- Processed receipt images and audio recordings are purged from temporary processing storage promptly after draft generation.
- Clio budget session messages and approved spending summaries are removed when you close the session or by the hourly cleanup after its 24-hour expiry. Empty session records are deleted after 90 days.
- Users may export all data in XLSX format or trigger complete local and cloud erasure at any time via the Danger Zone.
5. Legal Operator & Age Restrictions
- ClearSpend is developed and operated by Omar Mahmoud.
- ClearSpend is intended for adults aged 18 and older. We do not knowingly collect personal data from minors.
- For privacy inquiries or data rights requests, contact omar.mahmoud1@yahoo.com.
Need further assistance or wish to exercise data rights?
Contact our support and data team directly at: omar.mahmoud1@yahoo.com.