Privacy Policy
Last updated: November 8, 2026
Statemint ("we", AppUsta) analyses the credit card statements you choose to import. This policy explains exactly what is processed, where, and for how long.
Your statements stay on your device
- Reading. When you import a PDF, the app extracts its text on your device. For paper statements or PDFs without text, the app takes photos of the pages instead.
- Masking. Before anything is sent, the app replaces card numbers, IBANs and other long ID numbers with their last four digits. Photos cannot be masked this way; the model is instructed never to return such numbers.
- Analysis. The masked text (or page photos) is sent over an encrypted connection to our server, which forwards it to OpenAI to extract the transactions and write the insights. Our server does not write it to any database, file or log; it exists in memory only while the answer is streamed back to you.
- Storage. The result — transactions, categories, totals, insights — is saved only on your device, in the app's private storage, protected by your device's encryption. It is not backed up to our servers.
- OpenAI processes the data as our sub-processor under its API terms: it does not use API data to train models, we disable response storage, and it may retain requests for up to 30 days solely to detect abuse.
The assistant
When you ask the assistant a question, the app sends your question, the recent conversation, and a summary of your statement data computed on your device, handled exactly like statements above. Conversations are stored only on your device.
What our server does keep
- An anonymous ID created on first launch. We never ask for your name, email or phone number.
- Usage counters per import or question: date, number of pages or characters, the issuing bank's name, the number of transactions found, the AI model, token counts, cost and duration. Never amounts, merchants, card numbers or text.
- Device details: platform, app version and language.
- Product events (for example "statement imported", "paywall shown"), without statement content, deleted after 180 days.
- Subscription status from RevenueCat. Payments are processed by Apple or Google; we never see payment details.
Service providers
Cloudflare (hosting), OpenAI (analysis), Google Firebase (App Check to verify genuine app installs, Analytics without statement content, Crashlytics crash reports), RevenueCat (subscriptions).
Your choices
Delete any statement in the app. Settings → Delete all data erases everything on your device and everything our server holds for your anonymous ID. Due-date reminders are local notifications scheduled on your device.
Children
Statemint is not directed at children under 16.