Security
A concise view of the controls that protect your account and private records.
Last updated: September 29, 2026
At a glance
- No bank credentials or card login required.
- Private files and records are tied to your account.
- File checks happen before automated extraction.
- Report a concern without sending private financial documents.
No bank connection
ExpenseLense builds a private spending picture from the receipts, statements, emails, and purchases you choose to add. It does not connect to bank accounts, cards, payroll systems, or accounting APIs on your behalf.
Account and data access
ExpenseLense requires authenticated access and scopes records, files, recurring charges, email history, and Insight context to your account. Other users cannot browse your records through the app. Source downloads require an ownership check and use short-lived links. Authorized service operations and the providers listed in Privacy can process data to run the service; this is not end-to-end encryption.
Processing safety
Uploads are limited and validated before processing. Uploaded and emailed files must pass Cloudmersive malware checks before extraction; processing stops if a required check is unavailable or inconclusive. Files are also checked for size and supported format. Images are decoded and re-encoded; PDFs receive structural validation and are retained unchanged. Previously saved files are checked when reprocessed, not certified retroactively. No scan can guarantee that a file is harmless. User files, text, email headers, filenames, merchant names, and amounts are treated as untrusted data when sent to AI services.
Your records, on every plan
Viewing and downloading saved source files and viewing, editing, exporting, and deleting saved records do not require a paid plan. Limits apply to automated processing, reprocessing, and Insight usage.
Saved files, export, and deletion
Saved receipt and statement files stay available for review and reprocessing. PDFs are retained unchanged; receipt images may be resized and re-encoded for safe processing, so keep your own originals where required.
You can export records and source lists from Account privacy, and delete ExpenseLense data there on any plan. Product-data deletion removes records first and performs file cleanup in the background. It does not close your sign-in account or cancel billing.
Monitoring and providers
We use established providers with clear boundaries: Clerk handles sign-in and identity, Supabase stores your account-scoped records and private files, Cloudmersive checks file contents for malware, OpenAI receives extraction and Insight input only as needed, Resend handles inbound email, Vercel hosts the app, Stripe handles billing, and Sentry receives minimized, scrubbed error diagnostics. Private financial fields are not used for unrelated analytics.
What security does not promise
Malware checks and automated extraction can fail or be unavailable. A passed check is not a guarantee that a file is harmless, and extracted details are not certified financial records. We do not claim independent security certification, perfect availability, or zero risk. Keep source copies and check important amounts before relying on an export.
Report a security issue
Email aiacobe@icloud.com with the subject Security. Describe the issue without attaching receipts, passwords, credentials, or full card numbers. No public service can guarantee perfect security, but we investigate credible reports and improve controls as the product changes. Test only accounts and data you own. Do not access other users’ data, disrupt the service, or publish sensitive details in a public issue.