Privacy Policy
Last updated: 2 September 2026
هذه ترجمة للنسخة الإنجليزية. عند اختلاف النصين، النسخة الإنجليزية هي المعتمدة.
Stmnt reads your bank statements on your iPhone. It is built so your finances stay on your phone: there is no account to create, and the results are saved on your device rather than on our servers.
The short version
- No account and no sign-up. We do not ask for your name, email, or login.
- Your statements, transactions, reports, and settings are stored only on your device.
- We do not sell your data, show you ads, or use third-party advertising or analytics trackers.
- To read a statement, we send it to an AI provider. For a scanned or photographed PDF that means the file itself, so everything on those pages goes with it. It is used to give you your transactions, never to advertise to you.
What stays on your device
When you upload a statement, Stmnt pulls out the transactions and saves the results in the app's private storage on your phone. That covers your transactions, saved reports, category corrections, cached exchange rates and your settings. None of it leaves your phone except through the optional features below, and you can erase all of it whenever you want.
What gets sent out, and why
A few features have to send something out to work. Each one sends only what it needs:
- Reading your statements with AI. Statements you upload are sent to our AI provider, OpenRouter, so it can pull out the transactions. If the text can be read straight from the PDF, only that text is sent. If it cannot, which is the case for a scanned or photographed statement, the PDF file itself is sent. That means everything printed on those pages goes with it, including details the app does not use. Smart tips and chart building send a summary of your transactions instead, never the file. Every request goes through our own server first, so the AI provider never learns who you are or what device you are on. Your data is used to give you your results. It is not used to build an advertising profile.
- Converting currencies. The app asks a public rates service for published exchange rates. It sends currency codes and nothing else. Your transactions stay where they are.
- Subscriptions. Purchases go through Apple, and RevenueCat keeps track of whether your subscription is active. It sees that status and a random ID that is not tied to you personally, which is what unlocks Pro and restores your purchase on a new phone. Apple handles the payment, so we never see your card details.
- Notifications. If you turn notifications on, OneSignal handles a push token for your device so reminders can reach you, such as a note that your trial is about to end. You can turn them off in iOS Settings at any time.
- Sharing a report. A report you share is encrypted on your phone first, then stored in that encrypted form on Supabase so the person you sent it to can open it. The key that unlocks it travels inside the link you send and never reaches us. Nothing is shared unless you start it.
- Using Pro on more than one device. Pairing a device stores a random ID for it, plus the device name you see in iOS Settings, on our Supabase server so your subscription is recognized there. No statements or transactions are involved. Removing a device in Manage Devices deletes that record.
- iCloud backup. If you turn backup on, a copy of your data goes into your own private iCloud container, controlled by your Apple ID. We cannot reach it.
What we never do
- We do not require or store accounts, names, emails, or passwords for using the app.
- We do not sell or rent your data to anyone.
- We do not include advertising SDKs or cross-app tracking, and we do not use the advertising identifier (IDFA).
Third-party services
The services that may process data on our behalf are: OpenRouter, the AI provider used for extraction and insights; a public exchange-rate service for currency conversion; Apple and RevenueCat for in-app purchases; OneSignal for push notifications, which also receives basic device information such as the device model alongside the push token; Supabase, which hosts our own server for optional encrypted sharing and for recognising paired devices; and Apple iCloud for optional backup. Each processes only the limited data described above and under its own privacy terms.
Keeping and deleting your data
Your data lives on your phone, so deleting it is up to you. Remove statements and reports inside the app, or delete the app to take its local data with it. A shared report can be reset or removed from the app. An iCloud backup can be deleted in your device's iCloud settings. If you would rather we deleted something we hold for sharing, email us using the details below.
Here is how long we keep the little that does reach our server. A statement sent for AI reading is used to give you your transactions and is not kept afterwards. An encrypted shared report stays until you remove it or ask us to delete it. A paired-device record stays until you remove the device or the subscription ends. None of it is readable to us as your finances, because shared reports are encrypted on your phone with a key our server never sees.
Children
Stmnt is meant for adults managing their own money. It is not aimed at children under 13.
Changes to this policy
If this policy changes, we will update the date at the top of this page. Carrying on using the app after a change means you accept the new version.
Contact
Questions about privacy? Email contact@7mxd.me or visit our support page.