Privacy Policy

PoundTrack is a private personal and family finance tracker. There is no public sign-up — accounts are created by invitation only, for a known, closed group of users.

Account information: your email address, used to sign in.

Financial data: the transactions you or your household enter — amounts, categories, descriptions and dates.

WhatsApp data, only if you link a phone number: your phone number, and the content of messages you send to the PoundTrack bot to log a transaction (for example, "Spent £45 at Tesco").

WhatsApp learning diagnostics: when a verified user's request cannot be understood or supported, PoundTrack may retain a short-lived event containing the failure stage and technical outcome. This diagnostic event does not contain the message text, phone number, amount or webhook payload.

When daily WhatsApp memory is enabled, PoundTrack stores your verified text requests, delivered bot replies and references to the financial items discussed, to understand follow-up messages and quoted replies. This operational memory is separate from optional learning examples and is not used for model training.

If administrator email alerts are enabled, the failure stage, reason, language, confidence and a grouped occurrence count are sent through Resend. Alerts may also include one event's random diagnostic ID, time, classified action, outcome, parser and model versions, message length and processing time. Alert emails do not contain message text, phone numbers, profile IDs or financial values.

A WhatsApp message you send to the bot is sent to the Anthropic API (Claude) for the sole purpose of extracting a structured transaction from it — the category, amount and description. It is not used to train any model.

Account data and transactions are stored in our Supabase (Postgres) database, protected by row-level security so each person or household can only ever see their own records.

If you explicitly consent to WhatsApp learning examples through WhatsApp or enable them in Profile, only requests we cannot understand or complete may also be kept in a private review queue for up to 15 days. Obvious credentials, phone numbers, email addresses, URLs and long account references are removed first, but names, dates and financial details may remain. Only authorised PoundTrack staff can review this queue internally. Private examples are not disclosed to other users or externally. Reviews create synthetic test examples; your private message is never added to the source-code repository or used to change the bot automatically.

We do not sell your data. We do not use it for advertising. We do not expose private learning examples to other users. Service providers process data as needed to run the product: Supabase (database and authentication), Anthropic (message parsing), the WhatsApp Business Platform (Meta), when you choose to use WhatsApp, and Resend (administrator email alerts, when enabled).

Your data is kept for as long as your account is active. A pending WhatsApp verification code that is never confirmed expires automatically after 10 minutes.

Daily WhatsApp memory is available only during the calendar day in Europe/London, from 00:00 until the following midnight. Earlier days are excluded from interpretation even if cleanup is delayed. Expired operational text is removed from the active database by a scheduled cleanup job; infrastructure backups and messaging providers may retain their own copies under their retention policies. Enabling memory does not recover earlier chats.

WhatsApp learning diagnostics and opted-in private examples expire after 15 days. Learning examples are off by default, and not replying to the WhatsApp invitation leaves them off. You can change your choice in Profile or through the explicit WhatsApp consent commands. Declining through WhatsApp or turning the setting off in Profile immediately deletes queued examples and prevents new ones from being stored. After an approved synthetic test is exported, the original message text is removed from the active review queue; only the synthetic test is kept for future evaluation. Routine infrastructure backups may retain deleted data until their normal backup-retention period ends.

For any question about this policy, or to request that your data be deleted, contact taboxdev@gmail.com.