Privacy Policy

Privacy Policy — AI Money

Effective date: October 16, 2026

This Privacy Policy describes how CuentaTe (“we,” “us,” or “our”), represented by Daniela Maria Cardona, collects, uses, shares, and protects your information when you use our mobile application, AI Money (the “App”). CuentaTe acts as the data controller of your personal data.

AI Money is a personal finance tracking and organization tool (a personal ledger), not a wallet or payment service: the App never moves money or executes transactions. When you see the word “logged,” it means the entry was recorded in your ledger, not that a payment was “made.”

We are committed to protecting your privacy. By using the App, you agree to the collection and use of information in accordance with this policy and, where the law requires it, we ask for your explicit consent before enabling sensitive features.

1. Information We Collect

To provide a personalized financial experience, seamless authentication, and AI-powered features, we collect specific types of data.

A. Information You Provide to Us

• Account Information: you can use the App anonymously or create an account. When you register or sign in via email/password, Google, Apple, or Facebook, we collect your name and email address to create and manage your account. Authentication is handled through Firebase Authentication (Google).
• Profile & Preferences: we store preferences in our cloud database, such as your financial goals, country, default currency, AI preferences, avatar (emoji or photo), language, and timezone.
• Custom Categories: the names and icons of your custom categories may be stored in the cloud to stay consistent across devices when you have AI Money Cloud or the WhatsApp integration enabled (see Section 7).
• Financial Data & AI Queries: your detailed transaction ledger, debts, and loans are stored locally on your device by default and are never sent to our servers. When you actively use our AI assistant (Denis), the App sends, together with your question, the context needed to answer it: your name, the movements related to your question, and a summary of your accounts, balances, debts, savings, budgets, upcoming payments and subscriptions and, if you use them, your shared fund and your investments. It goes to our AI providers (see Section 3) only to produce the answer, and we do not store it on our servers.
• Summary for your AI assistant (optional, Elite plan): if you connect your own AI assistant, such as Claude or ChatGPT, we keep a summary of your finances on our servers for it to read, even if cloud backup is turned off. Section 3 explains what it contains and how to limit it.
• Phone Number (WhatsApp): if you opt to link your account with our WhatsApp assistant, we store your phone number in our cloud so messages you send the bot can be routed to your account.
• Taxes Lead Data (Colombia): only if you expressly authorize it (see Section 6), we store your name, phone, email, and country so our accounting team can contact you.
• Communications and Feedback: when you contact us for support, feedback, or suggestions, we may collect your name, email, and the contents of your message or attachments, solely to respond to you and improve the App.

B. Information Collected Automatically

• Device Identifiers: we collect device IDs (such as your phone’s Advertising ID) for advertising, measurement and analytics services. They are received by Google (AdMob and Firebase) and Meta, which use them to attribute an install of the App to the campaign that brought it and to measure whether their ads work.
• Usage Data: screens viewed, taps, and events, to understand usage and improve the experience (Firebase Analytics).
• Diagnostics & Crashes: we collect crash data, non-fatal errors, and performance data to improve stability (Firebase Crashlytics). These reports do not include your transactions.
• Coarse Location: your IP address may be used to estimate your general location (city/country) for analytics and advertising. We do not collect precise GPS location.
• Camera and Photo Library: with your permission, you may capture or upload images of receipts to log expenses (see Section 3).
• Microphone and Voice: with your permission, you may dictate expenses or talk to the assistant (see Section 3).

C. Automatic Transaction Capture (optional, only with your permission)

The App offers features that detect financial movements to save you manual entry. All are off by default and require you to grant explicit operating-system permissions; you can revoke them at any time in your device or App settings:

• Bank SMS (Android only): if you enable it and grant the RECEIVE_SMS/READ_SMS permissions, the App reads your banks’ SMS messages and sends the message content to our AI service (Anthropic, or OpenAI as a backup) to extract the transaction. Only the resulting structured transaction is saved.
• Bank and payment notifications (Android only): if you enable the notification listener (BIND_NOTIFICATION_LISTENER_SERVICE), we read notifications from your banking and Google Pay apps and send their text to our AI service (Anthropic, or OpenAI as a backup) for the same purpose.
• Apple Pay / Google Pay: via iOS Shortcuts or the Android notification listener, payment alerts are processed in the background and their content is sent to our AI service (Anthropic, or OpenAI as a backup) to extract the transaction.

Be aware that in these features the text of the SMS, notification, or payment alert —which may include amounts, merchants, and partial account details— leaves your device to our backend and our AI service (Anthropic, or OpenAI as a backup) solely to extract the transaction. We do not store the original message: only the structured transaction (amount, category, title, date).

2. How We Use Your Information

• Functionality & Authentication: verify your identity, manage your account, and sync your preferences across devices.
• AI Features: generate financial insights from the data you provide or the captures you authorize.
• Multi-Device Sync (Optional): if you enable AI Money Cloud (Pro), keep your transactions and categories synchronized.
• Subscriptions: manage your AI Money Pro plan and entitlements.
• Advertising and measurement: display ads that allow us to offer the App for free, and measure how our campaigns perform so we know which ads work and which don’t.
• Analytics & Improvement: analyze usage trends, fix crashes, and improve performance.
• Taxes (Colombia): if you authorize it, connect you with our accounting team.
• Communications about your account: keep you informed about your subscription (a failed payment, a change of plan, backups about to expire) and, if you accept, send you offers and news about AI Money.

Communications we send you

We may write to you at the email address of your account and, if you linked it, on WhatsApp. There are two kinds of message and they work differently.

Service messages are about your own account and are part of our relationship with you: a failed payment, a change to your subscription, backups about to expire, or a security notice. You cannot opt out of these while your account is active, because without them you could lose access or data without knowing why.

Offers and news are optional: promotions, discounts, new features and tips for using AI Money. You can stop them whenever you want by replying to any message and asking us to stop, or by writing to servicios@cuentate.com. We confirm and stop writing to you. We never sell, rent or share your email address or phone number with third parties for their own marketing.

3. AI Processing of Receipts, Voice, Messages, and Documents

Which AI providers we use. The App’s AI features run on Anthropic (Claude) as our main provider, with OpenAI as a backup: if Claude does not answer or returns a result we cannot use, the same request goes to OpenAI so the feature keeps working. OpenAI also handles, on its own:

• The voice notes and photos you send the WhatsApp assistant: OpenAI transcribes the audio (Whisper) and reads the images.
• Web search in the assistant chat (Pro), and the WhatsApp assistant’s agent mode (Pro and Elite), which handles requests that go beyond logging a movement.
• All AI features in App versions earlier than 5.3.0 (iPhone and Android) and 2.3.0 (Mac). Updating the App moves them to Anthropic.

We send each provider only what the feature needs, and never your account identifier, your email or your phone number. Nothing is sent unless you use the feature.

Receipts: when you capture or upload a receipt photo, the image is encoded and sent, via our Cloud Function, to Anthropic (Claude), or to OpenAI as a backup, to extract amounts, dates, and merchant. We do not perform on-device OCR.

Voice: your operating system’s speech recognizer (Apple on iOS, Google on Android) converts your voice into text; then only the text —not the audio— is sent to Anthropic (Claude), or to OpenAI as a backup. That recognition is performed by your OS under Apple’s or Google’s privacy practices, which may process the audio on their servers.

WhatsApp assistant: the messages you send the assistant are processed, through our servers, by Anthropic (Claude), or by OpenAI as a backup, to work out what you want to record and to reply to you. Each message goes together with the names of your categories and, if you chose accounts for WhatsApp in the app, the nickname, name, type and currency of each one (never balances or account numbers), so the transaction lands where it belongs. Your voice notes are transcribed by OpenAI (Whisper) and the resulting text follows that same path. Receipt photos you send it are read by OpenAI (vision). We do not store your messages, audio or images: only the extracted transaction (amount, category, title and date).

Questions about your finances on WhatsApp: if you ask the WhatsApp assistant how your money is doing (for example, “how much did I spend this month?”), to answer you we send the AI provider your question together with data that is already on our servers, never data that exists only on your phone. If you have Pro or Elite with AI Money Cloud turned on, that is a summary of your finances that the App keeps up to date in the cloud for this purpose (for example, balances, savings, debts, budgets, this month’s income and spending, upcoming payments and recent movements); it is deleted if you turn off AI Money Cloud or unlink WhatsApp, unless you have an AI assistant connected (see below). Otherwise, it is only the movements you logged through WhatsApp this month and last month (title, category, amount and currency).

Importing statements and files: when you import your bank statement or a file from another app (PDF, CSV or Excel), the file is read entirely on your phone and is never uploaded to any server. For two specific tasks we send our AI provider (Anthropic, or OpenAI as a backup), through our Cloud Function, only:

• The column headers and up to 5 sample cells per column, so it can recognize the structure of the file (which column is the date, the amount, the description). Those sample cells are real examples from your file and may include a date, a description or an amount from those first rows.
• The list of distinct merchant names (for example “SUPERMARKET X”), so it can suggest a category for each movement. That list travels with no amounts, no dates, no balances and no account number, and merchants the App already knows how to classify are never sent at all.

We never send the whole file, your balances or your transaction history. One exception, always with your permission: if your statement cannot be read on your phone, we offer to send its full text (including amounts and balances) to our AI provider (Anthropic, or OpenAI as a backup) as a last resort. This happens only under your AI consent (the in-app notice explains it) or when you tap “let AI read the statement” yourself; none of that text is stored on our servers. Everything else (interpreting rows, pairing transfers, detecting duplicates and saving to your ledger) happens 100% on your device.

You can say no. AI categorization of merchants is optional and has its own switch on the import screen: turn it off and the App uses only its local dictionary, and you categorize the rest by hand. When migrating from another app it is off by default. Before you use this feature for the first time we show you a notice where you can accept or decline this sharing.

What Anthropic and OpenAI do with this data: they process it on our behalf, solely to generate the requested response or extract the requested transaction. Under their terms for business customers, neither of them uses it to train their models. Anthropic deletes it from its systems within 30 days, and OpenAI keeps it for up to 30 days to detect abuse; they may keep it longer only when the law requires it or, in Anthropic’s case, when its systems flag a request as a possible violation of its usage policy (up to 2 years).

AI assistants you connect (optional, Elite plan): you can connect your own AI assistant, such as Claude or ChatGPT, to AI Money to ask it about your finances or have it log movements for you. You approve each connection with a one-time code from the App, you can have up to 5 assistants connected, and you can disconnect any of them at any time in Settings › AI assistants. While at least one is connected, we keep a summary of your finances on our servers so that your assistant can read it, even if cloud backup is turned off: balances, savings, debts, budgets, shared funds, this month’s income and spending, upcoming payments, your investments (platforms, positions and contribution plan), your latest 20 movements (date, title, amount and category) and the list of your accounts. The summary never includes your full transaction list, your payment details (such as a CLABE or a Pix key) or anything from a section of the App you have hidden.

You decide what it sees: if you turn off “Let your assistant see your numbers” in Settings › AI assistants, only the names of your accounts go up, with no figures, and your assistant can only log movements.

Who processes what you ask: what you ask your assistant, and the parts of the summary it reads to answer you, are processed by that assistant’s provider (Anthropic for Claude, OpenAI for ChatGPT) under its own terms and privacy policy. That provider does not work for us: it is the assistant you chose. The commitment above that Anthropic and OpenAI do not train their models with your data covers only the AI features of the App, not the assistant you connect, even if it is Claude or ChatGPT: whether your conversations are used to train models depends on your own settings with that provider.

What your assistant sends us: the movements it logs reach our servers and are added to your App just like those from the WhatsApp assistant. Its other requests (for example, creating a budget or a goal, moving money or deleting a movement) wait on our servers for up to 7 days until the App applies them or you confirm them: when you open the App, it applies on its own those that only create something, with an option to undo, and asks for your confirmation for anything that moves money or deletes. For each connection we keep the assistant’s name, the address it returns to after you approve it, when it was last used and its access keys, stored only as a fingerprint (hash), never in plain text. When you disconnect your last assistant, the summary is deleted from our servers.

4. Third-Party Service Providers

We do not sell your personal data. We share data with trusted third-party providers required for the App’s operation:

• Anthropic — AI service (main provider): Anthropic, PBC (Claude) answers your questions in the AI assistant and the WhatsApp assistant, reads your receipts, the text you dictate and your bank alerts, and recognizes the columns and merchants of the files you import, always on our behalf. It processes data mainly in the United States. Anthropic Privacy Policy
• OpenAI — AI service (backup and specific functions): takes over the App’s AI features when Anthropic does not answer, and handles on its own the transcription of your WhatsApp voice notes, the photos you send over WhatsApp, web search in the chat, the WhatsApp assistant’s agent mode, and all AI features in App versions earlier than 5.3.0 (Mac: 2.3.0). OpenAI Privacy Policy
• Google / Firebase — cloud infrastructure: authentication (Firebase Auth), profile and (where enabled) transaction storage (Firestore), server logic (Cloud Functions), analytics (Firebase Analytics), and crash diagnostics (Firebase Crashlytics). Google Privacy Policy
• RevenueCat — subscription management: manages your AI Money Pro subscription; receives an account identifier to link your subscription to your profile. RevenueCat Privacy Policy
• Google AdMob — advertising: displays ads and may use device identifiers and coarse location. On iOS, we will ask for your permission via Apple’s App Tracking Transparency (ATT) prompt before any cross-app tracking. Google AdMob & Privacy
• Meta (WhatsApp) — messaging: delivers our optional WhatsApp assistant; messages you send it pass through Meta’s infrastructure. WhatsApp Privacy Policy
• Meta Platforms — advertising and measurement: we measure how our Facebook and Instagram campaigns perform using the Meta SDK, which already ships inside the App because it is the same one that powers Facebook sign-in. Meta receives your phone’s Advertising ID and a handful of events: that you completed registration, that you started a free trial, that you purchased AI Money Pro (with the price and currency the store actually charged you) and which automatic capture you turned on (for example, SMS or WhatsApp). It never receives your transactions, balances, categories, accounts or the content of your messages. On iOS, Apple additionally sends us aggregated attribution reports (SKAdNetwork) that do not identify you. You can limit this from your device’s advertising settings and, on iOS, by declining the ATT prompt. Meta Privacy Policy
• Amazon Web Services (AWS): hosts the public exchange-rate table the App queries. These queries do not include personal data. AWS Privacy
• Apple iCloud (iOS only): hosts the backups you initiate of your local data, under your control and Apple’s privacy practices. Apple Privacy
• Your AI assistant’s provider (only if you connect one): Anthropic, if you connect Claude, or OpenAI, if you connect ChatGPT. It reads the summary described in section 3 when you ask it something and sends us the movements and requests you ask it for. It acts under its own terms, not on our behalf: it is the assistant you chose. Anthropic Privacy Policy · OpenAI Privacy Policy

5. Couples Space (shared fund)

If you create or join a Couples Space, the App creates a shared common fund with the other person. In that shared space we store only: aggregated amounts and the movements of the common fund (who contributed, amount, currency, date, and title), together with your name and avatar, mirrored when you join.

We never share your accounts, balances, or your personal transactions. The source account of a contribution stays 100% local on your device and is never visible to the other person.

6. Colombia Taxes, reminders and Habeas Data

The Taxes section (available to users in Colombia or with COP currency) can help you find out whether you must file income tax and avoid missing the deadline. The «should I file this year?» guide and your deadline calculation are processed on your device and are not sent to our servers.

Each-season reminder (optional, with your authorization): if you turn on the «Notify me each season» switch, you will see and accept an explicit authorization. Only then do we store, in a restricted record, your name, phone (if you linked WhatsApp), email and country, together with the evidence of your authorization (the exact text you accepted, its version, language and date), so we can message you when the next season opens. This switch is off by default: if you don’t turn it on, we store none of this data.

Checking for someone else: if you check a third party’s deadline, that calculation is ephemeral and 100% on your device; we do not store their ID number, the date, or any of that person’s data.

Habeas Data (Law 1581 of 2012): you may access, update, rectify and delete your data, and revoke your authorization at any time —by turning off the switch or emailing servicios@cuentate.com—. Upon revocation we stop contacting you; we keep proof that the authorization existed while it was in force, as the law requires. If in the future we offer to have an accountant from our team contact you, that will likewise require your express authorization.

7. Data Storage and Retention

AI Money is local-first: by default your transaction ledger lives on your device and is never sent to our servers. You can enable cloud storage explicitly. The table below shows where each type of data resides based on your plan and integrations:

Your situation	Categories	Transactions (manual / in-app)	Transactions via WhatsApp bot
Free, no WhatsApp linked	Local only	Local only	—
Free, WhatsApp linked	Local + cloud	Local only	Cloud (written by the bot)
Pro, AI Money Cloud OFF	Local only	Local only	Cloud (written by the bot, if WhatsApp linked)
Pro, AI Money Cloud ON	Local + cloud	Local + cloud	Cloud (written by the bot, if WhatsApp linked)

AI Money Cloud (Pro)

Pro subscribers can enable AI Money Cloud, an optional service that backs up and syncs your transactions and categories across devices. It is off by default; you can toggle it in Profile → Data → AI Money Cloud.

WhatsApp Integration

When you link your number, we store in the cloud your number (international format), a linked flag, your custom categories to classify messages and, if you choose accounts for WhatsApp in the app, the nickname, name, type and currency of each one (never balances or account numbers). Messages you send the assistant (text, audio transcriptions, and images) are processed in real time; we do not store the raw messages, audio, or images: only the structured transaction, tagged with the source whatsapp.

Retention Windows

• Local data: retained on your device until you delete it or uninstall the App.
• AI Money Cloud (Pro active): retained while your subscription is active.
• AI Money Cloud after Pro ends: your cloud copy is preserved for 6 months as a grace period; then non-WhatsApp transactions are removed automatically. Bot-created transactions are preserved while your account is active and your number stays linked.
• If you disable AI Money Cloud manually: your copy is preserved for 30 days and then removed; you can re-enable within that window to cancel removal.
• iCloud backup (iOS): governed by Apple’s practices; we never read your iCloud.
• WhatsApp data: if you unlink, your number is removed from your profile; bot transactions remain as historical records.
• Summary for your AI assistant: kept while you have at least one assistant connected; deleted when you disconnect the last one or delete your account.
• Pending requests from your AI assistant: up to 7 days.
• AI assistant connection data: kept while the connection exists.
• Movements your assistant logs: like those from the WhatsApp assistant, they remain in your history while your account is active.
• Taxes lead: retained for the duration of the advisory season or until you revoke your authorization.
• Diagnostics and analytics: retained in aggregate per Firebase retention policies.
• Account deletion: you may request deletion of your account and all cloud data from Profile → Account. Local data is removed by uninstalling the App.

8. International Data Transfers

CuentaTe operates from Colombia, but our providers (Anthropic, OpenAI, Google/Firebase, RevenueCat, Meta, AWS, and Apple) process and store data primarily in the United States and other countries. If you connect an AI assistant, its provider (Anthropic for Claude, OpenAI for ChatGPT) processes what you ask it, and the summary it reads, in the United States and other countries, under its own terms. By using the App and the features that send data to these providers, you understand that your information may be transferred outside your country of residence. Where required by law (e.g., the EU GDPR), these transfers rely on mechanisms such as Standard Contractual Clauses or other appropriate safeguards.

9. Security

We use commercially acceptable means to protect your information. All communication between the App and our servers or third-party services is encrypted using SSL/TLS. Cloud data is protected by security rules restricting reads and writes to the authenticated owner. No method of transmission over the internet is 100% secure.

10. Children’s Privacy

The App is not intended for children under 13 (or the minimum age your jurisdiction requires, e.g., 16 in parts of the EU). We do not knowingly collect data from children. If we discover that a child has provided us personal data, we will delete it immediately.

11. Your Data Rights (GDPR / CCPA / Habeas Data)

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you and learn how we process it.
• Request correction or update of inaccurate data.
• Request deletion of your account and cloud-stored data.
• Revoke consents granted (AI, automatic captures, Taxes, advertising).
• Opt out of personalized advertising via your device settings (and, on iOS, via ATT).
• Port your data and object to certain processing.
• Choose whether to enable cloud sync (AI Money Cloud) at all.
• Stop receiving offers and news at any time, without it affecting your account or the service messages described in section 2.

To exercise them, contact us at servicios@cuentate.com or use the “Delete Account” feature within the App.

12. Legal Bases for Processing (GDPR)

Where the GDPR applies, we process your data based on: your consent (AI features, SMS/notification/payment captures, WhatsApp, Taxes, personalized advertising), performance of a contract (account, subscription, sync), and our legitimate interest (security, diagnostics, and service improvement).

13. Changes to This Policy

We may update this Policy from time to time. We will post the new version on this page and update the effective date. You are advised to review it periodically.

14. Contact Us

• Legal Entity: CuentaTe (Rep. Daniela Maria Cardona)
• Email: servicios@cuentate.com
• Website: www.cuentate.com