Privacy Policy oftrytesorin.com

Full privacy policy

Financial records stored on your device

The app may store expenses, income, accounts, budgets, goals, net worth items, investments, tax entries, planning inputs, notes, categories, structured receipt details, settings, and other records you create. On supported mobile and native platforms, records in TESORIN’s main financial database are stored locally in encrypted form. Some account-scoped feature records and settings, including structured receipt details, are stored separately as device preferences protected by the operating system’s app sandbox and your device security.

These records power app calculations and views and stay on your device unless you deliberately use a connected feature that requires selected information to leave it.

Account and authentication data

TESORIN may process your email address, Supabase user ID, authentication session, account status, provider identity, consent records, subscription state, and related account information. Google Sign-In and Sign in with Apple may provide identity tokens and account details. TESORIN does not receive your Google or Apple password.

The account service is not used as a readable cloud database for ordinary expenses, balances, net worth, goals, categories, or holdings. A valid account session identifies you to TESORIN services, but it does not by itself give a browser access to encrypted financial records.

Encrypted financial data

Encrypted financial sync is optional. When you enable it, the financial records selected for synchronization are encrypted on an approved device before they are sent to TESORIN’s sync service. The service stores and delivers encrypted copies and does not receive the decryption keys held by your approved devices.

Encrypted financial data may include the records and settings needed to keep your TESORIN experience consistent across approved devices. You continue to own the records you create and may change or delete them through the Service, subject to the retention and deletion information below.

Service data for sync and web access

TESORIN processes limited service data to provide, secure, maintain, and troubleshoot encrypted synchronization. This may include account and device identifiers, browser or platform information, authentication and synchronization status, connection and activity information, storage or usage information, timestamps, and security or error events. Network infrastructure may also process information such as an IP address when a device connects to the Service.

Service data is separate from the readable contents of your financial records. TESORIN uses it only for the purposes described in this Policy, including operating synchronization, managing approved devices, preventing abuse, maintaining reliability, and providing support.

Approving a browser or another device

Signing in to the TESORIN web application does not automatically make financial records available. A browser must be approved from a device that already has access to your encrypted financial records. Once approved, the browser can view and change synchronized records until its access is removed or its local authorization information is cleared.

Approve only a browser or device that you recognize and control. If a linked device is lost, sold, shared, or compromised, remove it through TESORIN’s linked-device controls as soon as possible.

TESORIN does not use your account password as the encryption key for financial sync and does not hold a separate recovery key that can decrypt your synced records. If every approved device and every usable copy of the required access information is lost, the encrypted records may be permanently unrecoverable. Deleting an unreadable encrypted vault and starting again does not recover the previous records.

Camera permission and QR pairing

The TESORIN mobile app requests camera access only when you choose a camera-based feature, such as scanning a receipt or opening the scanner used to approve another device. The browser-pairing flow does not require access to the computer’s camera: the computer displays a code and the TESORIN mobile app scans it.

For pairing, live camera frames are processed on the mobile device to read the code. TESORIN does not save or upload a photograph, video, or continuous camera feed as part of that process. Scanning the code does not by itself grant access. The app shows an approval request before the browser or device is added. Cancelling the request or denying camera permission prevents approval through that scan.

Receipt scanning and on-device text recognition

Receipt scanning is optional and is offered on supported iOS and Android devices. It opens the camera only after you choose to scan a receipt. The receipt scanner uses the camera as its only image source and does not request access to your photo library.

The app creates a temporary, resized receipt photograph in its cache and uses Apple Vision on iOS or the bundled Google ML Kit text recognizer on Android to recognize text locally. The receipt image and recognition output are not sent to TESORIN servers, Apple, Google, or a remote OCR provider by this scan flow. TESORIN attempts to delete the temporary photograph as soon as recognition finishes or fails. If the operating system prevents immediate deletion, the file may remain temporarily in the app cache until it is removed by normal device storage management.

The complete OCR transcript and receipt photograph are not retained as receipt records. TESORIN may keep structured details derived from the scan, including the merchant name and item descriptions as recognized, normalized merchant and item names, purchase date, currency, subtotal, tax and tax treatment, total, quantities, unit and line prices, item categories, product identifiers where printed, discounts, deposits, fees, tips, refunds, recognition-confidence values, and review or edit timestamps. The saved receipt is attached to a Wallet transaction and may be used for receipt display, reconciliation, item-level analysis, and reporting.

TESORIN presents recognized information for review and correction. You may edit receipt amounts and items, confirm the details, remove the receipt detail, or enter the transaction manually instead. Removing receipt detail does not remove or change the Wallet transaction. If encrypted financial sync is enabled, the structured receipt record may be encrypted on an approved device and synchronized with your other approved devices. It may also be included in an encrypted backup when backup is enabled.

Browser storage and session processing

TESORIN is designed so that readable financial records used by the web application remain within the active browser session rather than being stored as a readable browser database after the session. Reloading or closing the page may require TESORIN to rebuild the browser session from encrypted synchronization data.

To keep a browser linked, TESORIN may store encrypted security credentials and limited device-authorization information in browser storage. Clearing TESORIN site data removes this local information and normally requires the browser to be approved again.

Signing out ends the current account session, but it may not remove the browser as a linked device. To fully remove a browser, use TESORIN’s linked-device controls or clear TESORIN site data. On a shared or public computer, do both. Anyone who can use an unlocked approved browser, or malicious software operating on that device, may be able to access the information and actions available in the open session.

Face ID, Siri, Shortcuts, and Live Activities

Face ID and device-passcode verification are performed by the operating system. TESORIN receives only the verification result and does not receive biometric templates or passcodes. Siri and App Intents may provide a requested action or command text. Live Activities may display selected financial values on your device.

Apple Shortcuts transaction input

TESORIN does not directly access Apple Wallet history and does not use FinanceKit. A user may create an Apple Shortcuts automation that sends selected transaction details to TESORIN as Shortcut Input. TESORIN receives only the information supplied by that automation.

The information is treated as user-provided input and may be used to prepare an expense record for review. TESORIN does not manage Apple Wallet financial-data permission and does not receive bank credentials, full card numbers, or full account numbers through this feature.

Permission-based bank SMS import on Android

On supported Android versions, bank SMS import runs only after you turn it on, accept the disclosure, and grant SMS permission. Parsing occurs on the device. Raw SMS bodies, one-time codes, full account numbers, and full card numbers are not stored as expense records.

Subscriptions and purchase history

When you choose a paid plan, payment is processed by the Apple App Store or Google Play. TESORIN uses RevenueCat to validate purchases, manage Premium access, restore purchases, and receive subscription-status updates.

RevenueCat receives TESORIN’s account user ID and purchase information from the applicable store. TESORIN may process or store the user ID, product identifier, store, subscription status, entitlement status, expiration date, renewal status, cancellation, refund and billing-status events, and related timestamps.

RevenueCat does not receive expenses, balances, net worth, goals, categories, holdings, or other in-app financial records from TESORIN. TESORIN does not receive payment-card numbers, bank-account details, or payment credentials. Purchase information is not used for advertising or cross-app tracking and is not sold.

Optional encrypted backup

On iOS, TESORIN may create an encrypted backup in your iCloud account when backup is enabled. On supported non-iOS platforms, TESORIN may create an encrypted backup in Google Drive. Backup content is encrypted using a key derived from the password you provide before it is written to the selected destination.

Backup files may include financial and planning records, including saved structured receipt details but not the temporary receipt photograph. Deleting TESORIN or your TESORIN account may not automatically delete files held in iCloud or Google Drive.

Encrypted Family sync

When Family sync is enabled, TESORIN may process membership, invitation, participant, device, delivery, synchronization, and transport information needed to operate the shared group. Family financial content is encrypted on the device before transmission and is sent and stored as ciphertext. The service does not receive the key needed to read that content.

Personal Ask and General Ask

Personal Ask and personal financial analysis are generated locally and do not send your financial context to a remote AI service. General Ask sends the question you type through TESORIN’s service to an AI provider to generate a response. TESORIN does not automatically attach balances, transactions, holdings, goals, or other personal financial records.

The text you type is sent as written. Do not include information you do not want processed online, including passwords, card numbers, full account numbers, government IDs, one-time codes, or detailed personal financial facts.

Market data

When you request current market information, a provider may receive the ticker symbol, fund identifier, or currency code needed to answer the request. TESORIN does not send the quantity you own, the value of your holding, your balance, or your identity as part of that lookup.

Optional analytics

Firebase Analytics is off by default. Collection begins only after you enable it. TESORIN uses a closed allow-list of permitted event names, screen names, and parameter keys. Parameters containing financial values, transaction information, notes, account or institution names, ticker symbols, questions, search terms, email addresses, tokens, passwords, or backup filenames are blocked before an event is sent.

When analytics is disabled, TESORIN disables collection and requests that locally held analytics data be reset.

Optional crash diagnostics

Firebase Crashlytics is off by default. When enabled, TESORIN sends the type of an error, a sanitized origin code, whether the error was fatal, and a stack trace used to identify the affected code path. TESORIN does not send the error message, which may otherwise contain user-entered information.

When diagnostics is disabled, TESORIN disables collection and deletes unsent reports held by the app.

Service providers and disclosures

TESORIN may use Supabase for account services and encrypted synchronization infrastructure, RevenueCat for purchase validation and subscription status, Apple and Google for sign-in and store billing, Apple Vision and Google ML Kit for on-device receipt text recognition, iCloud or Google Drive for optional backup, TESORIN services for encrypted Family transport, Firebase for optional analytics and diagnostics, providers for market data, and an AI provider for General Ask. Apple Vision and Google ML Kit process receipt input and recognition output on the device; their frameworks or SDKs may perform ordinary maintenance or compatibility communications under the provider’s practices without sending the receipt image or recognized output.

These providers may process the information required for the particular service described above. TESORIN does not sell personal information or user-entered financial data. Information may also be disclosed where required by law, to protect rights and safety, investigate abuse, or complete a business transfer with appropriate safeguards.

Security and retention

TESORIN uses technical and organizational safeguards appropriate to the sensitivity of the information, including encryption, secure authentication, device approval, access controls, permission controls, and limited collection. Safeguards are reviewed and may change as the Service and relevant risks evolve.

No technical system can guarantee complete security. Anyone with access to an unlocked approved device or browser may be able to view the information available there. Malware, compromised software, stolen credentials combined with an already approved browser, or another person using an unlocked device may expose information. Removing a linked device is intended to stop future access, but it cannot erase information that the device already received, displayed, exported, copied, or captured.

Local device records remain until deleted or the app data is removed. Saved receipt detail normally remains until you remove it, delete its Wallet transaction, clear financial or app data, or delete the account data from that device. TESORIN keeps up to 500 saved receipt records per account and may drop the oldest receipt detail after that limit without deleting the related Wallet transaction. Temporary receipt photographs are handled as described in the receipt-scanning section above.

Encrypted financial data and related service data may be retained while the feature is active and as needed to synchronize devices, preserve security and integrity, prevent abuse, resolve disputes, comply with law, and operate provider backups. Account and subscription records may be retained as needed for functionality, security, fraud prevention, support, legal compliance, disputes, and accounting.

Apple, Google, Supabase, RevenueCat, Firebase, cloud-storage providers, market-data providers, and AI providers may retain information according to their own legal obligations, backup practices, and privacy policies.

Account and data deletion

You can request deletion in the app, through the Account Deletion section, or by emailing hello@trytesorin.com from your account email address.

When account deletion is completed, TESORIN removes the active account-linked records it controls from its live services, including active encrypted financial data and related service data. Temporary provider backups, security records, or information required for legal compliance, fraud prevention, disputes, or accounting may remain for a limited period where applicable.

Account deletion may not remove local device records, browser site data, exports, iCloud or Google Drive backup files, store purchase records, or RevenueCat purchase and subscription records. Clear TESORIN site data on approved browsers and remove third-party backup or exported files separately. TESORIN does not promise deletion of a RevenueCat customer profile unless a supported deletion operation is implemented and completed.

Deleting your TESORIN account or uninstalling the app does not cancel an Apple App Store or Google Play subscription. Subscriptions must be cancelled through the store where they were purchased.

Your choices

You may delete device records, edit or remove saved receipt detail, decline receipt scanning and enter transactions manually, enable or disable encrypted financial sync, approve or decline a browser or device, review and remove linked devices, clear browser site data, manage camera, Siri, Shortcuts, Live Activities, SMS, and other app permissions in platform settings, request account deletion, remove backup files, leave Family groups, avoid General Ask, and keep analytics and diagnostics disabled. Removing access information may make encrypted records unavailable on that device and, if no other approved device remains, may make the encrypted records unrecoverable. Subscription cancellation is handled separately through the purchasing store.