Privacy Policy

1. Who we are

Arctoga is a family-budgeting service. We are based in Canada and store your data on servers in Canada. For any privacy question, write to privacy@arctoga.app.

2. What we collect

• Email and password — to sign you in and secure your account
• Receipt data — store, date, total, and items, only from what you scan or enter
• Bank transactions — only from the statements you choose to upload
• Account and card details — the last 4 digits, type and balance you enter; never full card numbers
• Technical data — IP address and browser, used only for security and abuse prevention

We do not collect full card numbers, CVV codes, PINs, or connect to your bank on your behalf — there is no bank-linking feature.

3. How we use your data

• To show you your own financial picture and analytics
• To send receipts and statements for AI processing that extracts the transactions
• To send the reminders and alerts you turn on (bills, budgets)
• To protect your account against unauthorized access

We do not sell your data to anyone, and we do not use it for advertising.

4. Third-party services

To run the app we rely on a small number of trusted providers:

• Supabase — Database and authentication. Servers in Canada (ca-central-1). Supabase privacy policy
• Anthropic (Claude) — Processes receipt and statement images to extract data. Images are sent for recognition and are not used to train their models. Anthropic privacy policy
• Stripe — Processes subscription payments. Card details are held by Stripe only — we never see them. Stripe privacy policy
• Resend — Sends transactional email (reminders, alerts, account notices). Resend privacy policy
• Vercel — Hosts the application. Servers in the United States. Vercel privacy policy

5. Security

• All data is encrypted in transit (HTTPS/TLS)
• The database is encrypted at rest
• Row-Level Security means each user can only ever see their own data
• Rate limits protect against abuse

6. Your rights

• Access — you can see all of your data inside the app at any time
• Deletion — delete your data from Settings, or ask us and we will remove it
• Export — export your receipts (Excel / PDF) yourself, or request a copy
• Correction — inaccurate data can be edited directly in the app

For any request, write to privacy@arctoga.app.

7. Data retention

We keep your data while your account is active. When you delete your account, your data is removed within 30 days.

8. Changes to this policy

If we make a material change, we will notify you by email at least 7 days before it takes effect.

9. Contact

Privacy questions: privacy@arctoga.app.