Privacy notice
Pilot draft · last updated 15 September 2026 · final wording pending compliance review
aubi is a personal-finance service run from the United Kingdom. This notice explains what we hold about you, why, and what you can do about it. It is written for the pilot. If anything here is unclear, ask before you sign in.
What we hold
Your sign-in identity. This is the email address and name on the Google account you sign in with. We don't store a password.
The financial records you give us. These are the bank and card statements you add, the values you enter, the payslip figures you type in, and the categories and notes you add. We hold these only because you chose to build your picture from them.
A record of activity. This is a permanent record of the actions taken in your account, such as a consent you gave, an invite you accepted or a statement you added. It lets us show you what changed and when.
Why we hold it
We hold it to provide the service you signed up for, which is the contract between us, and to keep the accounts you build accurate.
If you switch AI suggestions on, we also use it to suggest categories. We don't sell or rent your data, and we don't use it for advertising.
Where it lives and who processes it
Your data is stored with Supabase in the European Union and served through Vercel. Invitation emails are sent through Resend.
When AI suggestions are on, the text of the transactions being categorised is sent to Anthropic to produce each suggestion. Nothing is sent when the setting is off.
Each of these providers acts on our instructions under a written agreement. Google is used only to confirm who you are when you sign in.
Sharing with a partner
Nothing in your own finances is visible to anyone else unless you choose to share it. If you join a household, you and your partner both see what's in Shared. Your own finances stay private unless you switch sharing on. You can switch it off, or leave the household, at any time in Settings.
How long we keep it
We keep it for as long as you have an account. You can download everything, reset your data or delete your account in Settings › Account data. Deleting your account removes your records. Backups are then cycled out on a fixed schedule.
Your rights
Under UK data-protection law, you can:
- ask for a copy of what we hold
- have it corrected or deleted
- object to how it is used
- complain to the Information Commissioner's Office (ico.org.uk)
The download and delete tools in Settings › Account data are the quickest route. For anything else, contact us at [contact address to be added before launch].