Privacy

Updated November 3, 2026

Exocash keeps your ledger sealed with a key only you hold. We do not sell data, show ads, or run analytics or tracking of any kind.

What we keep

• Your email address, to create your account and send sign-in codes.
• Your ledger, encrypted on your device before it is uploaded. Accounts, transactions, budgets, bills, investments and chats are sealed with a key made on your device and wrapped by your password and your recovery key. Our database stores only that sealed copy and cannot read it.
• AI provider keys you add, sealed the same way, so a new device gets them back when you sign in.

What stays on your device

• Receipt photos and documents you scan are read on the device. Only the entries you approve are added to your ledger.
• Voice questions are turned into text by Apple's speech recognition on iPhone, or by your browser on the web. Exocash keeps only the text you send.

Services that handle data for us

A few service providers help us run Exocash: hosting, the database that keeps your account and sealed ledger, email delivery for sign-in codes, payments, and AI models for Exocash AI. Each one handles only what it needs to provide its service to us. Card details go straight to our payment provider and never reach Exocash; we keep only whether your Plus plan is active. On iPhone, Plus is bought through the App Store: Apple handles the payment, and we keep only which App Store subscription belongs to your account, to check that it is active.

The AI Assistant

When you ask the Assistant something, your question and the parts of your ledger it needs leave your device, unencrypted, to answer it. Where they go depends on the provider you choose in Settings › AI Agent.

• Exocash AI (built in, no key needed): your question goes through our server to our AI model provider: free models without Plus, and a faster paid model with Plus. Our server adds our key and passes the answer back; it does not store or log what you asked. We keep only a count of how many questions your account asked today, to apply the daily limit. The free models are run by providers that may keep or learn from what they receive, so without Plus do not use Exocash AI for anything you would not share.
• Your own provider (with Plus): your question goes from your device straight to that provider, with your own key, under its privacy terms. Exocash does not receive or store those requests.

Nothing is sent until you ask the Assistant something. With Plus, Settings › AI Agent also lets you limit what it may read, such as amounts and descriptions, or turn it off.

Your choices

• Export your ledger at any time from Settings › Data.
• Delete your account from Settings › Account. Your sign-in and your sealed ledger are removed at once.
• Turn off the Assistant, and remove any provider key, from Settings › AI Agent.

Children

Exocash is not directed at children under 13 and we do not knowingly collect their data.

Changes and contact

If this policy changes, the date above changes with it. Questions or requests: [email protected].