🔒 Privacy & Security

Your statements and results live in a folder on your computer. To read a statement, the app sends it to our AI provider. Here is exactly what that means — including what leaves your device.

What stays on your device

• The PDFs you drop, and the app's own copy of each, are kept in the local folder you chose.

• Your rules, categories, account nicknames, household profile, action items, and generated reports are all files in that same folder.

What is sent to the AI

• When you add a statement, the app sends the whole PDF to Anthropic, our AI provider. That includes everything printed on it — your name, address, account number and every transaction — and the AI also sees an image of each page. Before your first statement is sent, the app asks you to confirm this.

• The AI pulls the transactions and the summary totals out of the statement. When you ask for a report, the app sends a summary of your transactions, filtered first to remove the names and account numbers it can recognize.

• Brokerage statements, files over 3.3 MB and password-protected PDFs are turned away before anything is sent.

• The AI does not choose your categories, and it does not decide whether a statement reconciles. Both happen on your device — by rules you can inspect and by arithmetic against the statement's own printed totals.

What our AI provider keeps

• Anthropic keeps what we send for 30 days and may access it for safety and security purposes. If its automated safety systems flag something, it can be kept for up to 2 years.

• Anthropic does not use it to train its models.

• We have asked Anthropic not to keep this data at all. Until that is granted, 30 days is the accurate number.

What we keep on our servers

• We do not store your statements, your transactions, or your reports.

• We do keep an account record, so the app knows who you are and what you have paid for: your sign-in name and email (managed by Clerk), a Stripe customer reference and your subscription status, your trial dates, and counts of how many statements and reports you have run.

• The endpoint that passes your statement to the AI does not log or store it.

Cookies and tracking

• The app uses cookies to sign you in and keep you signed in, and Stripe sets its own when you go through checkout.

• There is no analytics, advertising, or tracking code in the app.

When you report a problem

• Bug and statement reports attach recent error and diagnostic lines. They go through the filter described below, and filenames are replaced with aliases (file-1.pdf).

• A "statement didn't load correctly" report attaches only four facts about the statement: the detected issuer, the statement type, the page count, and the transaction count. No filename, no account details, no transaction text.

• When you send a problem report, the app runs it through a filter that removes account numbers, Social Security numbers, phone numbers, email addresses and account-holder names it can recognize.

• The filter is pattern-based, and that sets its limits. It is designed to catch the identifiers above — not to guarantee that no personal detail ever survives. A name written into free-form description text, with nothing marking it as a name, can pass through. Person-to-person services (Zelle, Venmo, Cash App, Apple Cash) are tokenized; payment prefixes such as PayPal are deliberately left alone, because rewriting them would mangle merchant names — so a person's name appearing after one of those can survive. It can't always tell a name from a heading, so it sometimes removes a heading along with the names.

Deleting your data

• Delete your local folder and the app's copies on your device go with it — statements, cached analyses, rules, reports.

• Your account and billing records are on our servers and are not in that folder. To have them deleted, email support@statementlock.com.

• The full Privacy Policy has the legal detail.