Privacy Policy

Who we are

Grosh is a personal finance tracker operated by pamware. This policy explains what we collect when you use the Grosh apps and the website at grosh.pamware.com, why we collect it, and who processes it for us.

Information you give us

• Account details: name, email address, and a password we store only as a salted hash. If you sign in with Google or Apple, we receive the identity token those services issue, including the email and name they provide.
• Finance records you enter: wallets, balances, transactions, categories, notes, transfers, and broker trades or holdings.
• Optional investor-profile answers you choose to save.
• Messages you send through Help or in-app feedback.
• A profile photo, if you upload one.

Information collected automatically

• Session tokens stored on your device so you stay signed in.
• IP address and basic request data, used to rate-limit sign-in and to investigate abuse.
• Language and display-currency preferences, stored on your device.

What stays on your device

• An app PIN, if you set one, is hashed and kept in the device secure store. Biometrics are handled by the operating system; we do not receive your fingerprint or face data.
• On Android, bank-notification capture reads only the apps you choose. Matching a shop against transactions you already logged happens on the phone. The original notification text is sent to our servers only if you turn on AI mapping.

AI features

Voice logging, receipt scanning, chat, and optional notification-category mapping send data off the device only after you accept the in-app AI disclosure. Depending on the feature, that can include a receipt photo, voice audio, a chat message, or the text of a notification you asked us to categorise, plus wallet names and amounts needed as context. Your email and account id are not included in those requests. We do not use this data to train AI models. Nothing from an AI suggestion is saved to your account until you confirm it.

How we use information

• To run your account and show your balances, transactions, and statistics.
• To send account email (verification, password reset) and to reply to support requests.
• To provide the AI features you turn on.
• To keep the service secure and prevent abuse.

We do not sell personal information.

Who processes it

• Cloudflare hosts the app and API, stores uploaded profile photos, provides bot checks on registration, and transcribes voice audio.
• Anthropic (Claude) processes receipt images, chat, transcribed voice text, and notification text when you use those AI features.
• Resend delivers transactional and support email.
• Google and Apple, when you choose those sign-in methods.

Finance records are stored in our database. A wallet you share is visible to the Grosh accounts you invite, limited to what that share allows.

How long we keep it

We keep account and finance data while your account exists. You can export transactions to CSV from Profile, and you can delete the account there. That removes the account and the finance data stored with it. You can also ask us to delete it by emailing [email protected]. Security logs are kept only as long as we need them to protect the service.

The demo account is a shared, read-only sample. It is not your personal data, and leaving it is an ordinary sign-out.

Children

Grosh is not directed at children under 16, and we do not knowingly create accounts for them.

Changes

If this policy changes, we will update the date above and publish the new version at this URL.

Contact

Questions about this policy: [email protected].