Legal
Privacy Policy
This page explains what data PoundTrack collects, how it is used, and who it is shared with — including when you use the WhatsApp bot.
Who this applies to
PoundTrack is a private personal and family finance tracker. There is no public sign-up — accounts are created by invitation only, for a known, closed group of users.
What we collect
Account information: your email address, used to sign in.
Financial data: the transactions you or your household enter — amounts, categories, descriptions and dates.
WhatsApp data, only if you link a phone number: your phone number, and the content of messages you send to the PoundTrack bot to log a transaction (for example, "Spent £45 at Tesco").
How we process it
A WhatsApp message you send to the bot is sent to the Anthropic API (Claude) for the sole purpose of extracting a structured transaction from it — the category, amount and description. It is not used to train any model.
Account data and transactions are stored in our Supabase (Postgres) database, protected by row-level security so each person or household can only ever see their own records.
What we don't do
We do not sell your data. We do not use it for advertising. We do not share it with any third party beyond the infrastructure providers strictly needed to run the service: Supabase (database and authentication), Anthropic (message parsing) and the WhatsApp Business Platform (Meta), when you choose to use WhatsApp.
Retention
Your data is kept for as long as your account is active. A pending WhatsApp verification code that is never confirmed expires automatically after 10 minutes.
Questions or data deletion
For any question about this policy, or to request that your data be deleted, contact taboxdev@gmail.com.