Privacy Policy

• We collect only what the app needs to track your spending and show you insights.
• We do not sell your data or share it with advertisers, and we do not run ad tracking on your financial records.
• We never ask for or store your bank credentials, card numbers, or full payment details.
• You can export your data as a PDF, and you can delete your account and all of its data from Profile at any time.

Everything below is entered by you or generated from what you enter. Nothing is pulled from a bank, card network, or credit bureau.

• Bank logins, online banking credentials, or account routing details.
• Full debit or credit card numbers, CVVs, or PINs.
• Government identity numbers or credit history.
• Contacts, photos, or files other than the receipts you choose to capture.

• Authentication: email and password with leaked-password protection, plus Google and Apple sign-in. Passwords are never stored in plain text — they are salted and hashed by our authentication provider. Email changes are confirmed by verification link and phone numbers by one-time code.
• Sessions: short-lived access tokens with rotating refresh tokens. You can sign out from Profile, which invalidates the session on this device.
• In transit: every request between the app and our backend uses HTTPS/TLS. There is no unencrypted endpoint.
• At rest: your records live in a managed Postgres database with encryption at rest and encrypted automated backups. Receipt images are stored in private buckets that are not publicly listable.
• Access control: every table enforces row-level security keyed to your user ID, so a query can only ever return your own rows. Server-side processing (such as receipt reading) verifies your session before it runs.
• Data minimisation: we keep your records only while your account exists. Deleting your account removes them.

We use a small number of processors purely to run the service: a managed database and authentication host, an email sender for account and security notices (from notify.centss.app), an AI provider that reads the receipt image you submit in order to extract items, and a places lookup used only when you ask for nearby deals. They process data on our instructions and are not permitted to use it for their own purposes.

• Access and export: open any section and use Export PDF to take a branded copy of your data.
• Correction: edit or delete any expense, budget, goal, loan, or card directly in the app.
• Deletion: Profile → Delete account permanently removes your account and every record tied to it — expenses, receipts and their items, income, budgets, goals, loans, repayments, price logs, and membership cards. This cannot be undone and takes effect immediately.
• Location and notifications: revoke permission in your browser or device settings at any time; the app keeps working without it.
• Questions or a formal privacy request: email privacy@centss.app and we'll respond within 30 days.

Centss is not intended for anyone under 13, and we do not knowingly collect their data. If we change this policy we'll update the date at the top of this page and, for material changes, notify you by email or in the app before the change takes effect.