Effective date: 7 September 2026
1. Our approach
Your financial data is personal. Arthly is built so that your data is used only to power the features you see in the app. We do not sell your data, and Arthly is ad-free.
2. Information we collect
- Account information: your name, email and mobile number when you register.
- Financial data you enter: expenses, income, budgets, accounts, goals, debts and investments.
- Payment account details you choose to save: if you add a bank, card or UPI account, we store what you enter — which may include a bank account number, IFSC code, account holder name, UPI ID, card network, card expiry month and year, and the last four digits of a card. We never ask for and never store your full card number, CVV, PIN, or your login credentials for any bank or payment app.
- Bank alerts captured on Android (optional): if you switch on notification capture, Arthly reads transaction alerts posted by your banking and UPI apps and sends that alert text to our servers so it can be turned into a suggested entry. This is off unless you enable it in Settings and grant Android's Notification access permission, and you can revoke it at any time. Arthly does not read notifications from messaging, social or other non-financial apps. This feature does not exist on iOS.
- Gmail messages (optional): if you connect Gmail, Arthly requests read-only access and scans for bank and card statement emails so it can suggest entries. We never send email on your behalf, and never modify or delete anything in your mailbox. You can disconnect Gmail at any time from Settings or from your Google Account permissions page.
- Statement and bill files you upload: PDF, CSV or spreadsheet statements you choose to import, including the file itself while it is being processed.
- Family sharing data: members you invite and the accounts and transactions you choose to share.
- Activity and technical data: a record of actions taken in your account, including IP address and device or browser information, kept to secure your account and investigate problems. Also your device type and push notification token, if you enable notifications.
Receipt photos stay on your device. Receipt images you attach to an expense are stored locally on your phone and are never uploaded to our servers.
3. How we use your information
- To provide and operate the app's features.
- To calculate balances, budgets, reports and family dashboards.
- To turn bank alerts, statement emails and uploaded statements into suggested entries for you to approve.
- To send reminders and notifications you enable.
- To secure your account and prevent misuse.
- To respond to your support requests.
We do not use your data to build advertising profiles, and we do not use it to assess your creditworthiness or for any lending purpose.
3a. Smart parsing and third-party AI
Arthly first tries to read transaction text using its own pattern rules, which run entirely on our servers. Anything the rules cannot interpret can optionally be passed to Anthropic, a third-party AI provider, purely to extract the amount, date, merchant and transaction type.
- This is off by default. Nothing is sent to any AI provider unless you explicitly turn on smart parsing in Settings.
- Anthropic processes this text as our service provider, on our instructions, and does not use it to train their models.
- Turning the setting off stops it immediately — the very next import is handled by rules only.
- We never send your name, email, phone number, account numbers or card details for AI processing.
3b. Google user data
Arthly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the statement-import feature visible in the app. It is never sold, never used for advertising, and never used to determine creditworthiness or for lending purposes.
4. Family sharing & visibility
When you share an account with family, members you invite can see the balance and transactions of that shared account, with each transaction attributed to the person who recorded it. Your personal (unshared) accounts and categories remain private to you.
5. Data storage & security
Your data is transmitted securely and protected with industry-standard safeguards. The app also offers biometric lock for an added layer of protection on your device. While no method of transmission or storage is 100% secure, we work to protect your information using reasonable technical and organizational measures.
6. Data sharing
We do not sell your personal data and we do not share it for advertising. We share data only with service providers who process it on our behalf, under agreements that protect your information, or where required by law. Those service providers are:
- Hostinger — hosting for our servers and database.
- Expo — delivery of push notifications to your device.
- Anthropic — optional AI parsing of transaction text, only if you turn on smart parsing (see section 3a).
- Google — Gmail access only if you connect it; Firebase Crashlytics for crash diagnostics; and Google Analytics on our website and web app (see section 6a).
6a. Analytics and crash diagnostics
We use Google Analytics on this website and on the web version of the app to understand which pages and features are used, so we know what to improve. It is not used for advertising, and we have disabled Google's advertising and remarketing signals.
- You choose. Analytics cookies are off until you accept them in the banner shown on your first visit. Decline and no analytics identifiers are stored — we receive only anonymous, cookieless counts.
- IP addresses are anonymised before they reach the reports.
- Analytics is about page and feature usage. It never receives your expenses, income, budgets, account details or any other financial data.
- To change your mind later, clear this site's data in your browser and answer the banner again.
We also use Firebase Crashlytics in the mobile app. When the app crashes it sends a diagnostic report — the error, the stack trace, the device model and OS version — so we can fix it. Reports are linked to your account ID, but never to your name, email or phone number, and financial values are stripped from the report before it leaves your device.
7. Your rights
- Access and update your information from within the app.
- Export your data as CSV or PDF from the Reports section.
- Delete your account and all associated data — from Profile → Delete Account in the app, or from our account deletion page if you have already uninstalled it.
- Withdraw consent for smart parsing, notification capture or Gmail access at any time in Settings.
- Control notifications and privacy settings.
- Contact us with any privacy questions or requests.
7a. Data retention
We keep your data for as long as your account is active. When you delete your account it is erased immediately — there is no deactivation period — and routine encrypted backups rotate out within 30 days. We retain nothing further except where a legal or regulatory obligation requires it.
8. Children's privacy
Arthly is not directed to children under 13, and we do not knowingly collect data from them.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above.
10. Contact us
Questions about your privacy? Email or visit our Contact page.