Privacy

The commitments below are the product's actual architecture, not aspirations. The legally-minded full notice is here.

What we collect

  • Your account: an email address and a password.
  • What you enter or upload: transactions, budgets, documents. Scoped to your account at the database level; nobody else's queries can see your rows, by construction.
  • Optional AI keys you attach. Encrypted at rest, decrypted only to serve your requests, never used for anyone else's.

What we never do

  • Sell data. There is no ad product and never will be.
  • Move money. Bearings displays money; it cannot touch it.
  • Keep your documents longer than you want. Deletion is deletion.

Your email, on your terms

  • There is no inbox connection: nothing to scan, nothing to revoke. You forward a bank alert yourself, and that single email is the only message we ever see.
  • Email we send you: account and security mail (verification, password reset), and notifications you opted into (recurring postings, budget warnings, bill-due reminders, the monthly digest). Off by default except account mail; every switch lives in Settings → Alerts.

AI processing

  • Compass answers from your ledger: the question and the relevant figures go to the AI provider, never your stored documents.
  • Document capture sends the uploaded file's text (or the receipt image) to the AI provider to extract rows; every extracted value is re-validated locally before you ever see it.
  • Bring your own key and the requests go to your provider, on your account. Providers process requests to answer them; their terms govern reuse, and the hosted path is configured against models that do not train on API traffic.

Third parties

  • OpenRouter, for AI requests (yours or ours, depending on tier).
  • Polar, as merchant of record, for payments.
  • Resend, for transactional email (no marketing).
  • Our object store (MinIO or Cloudflare R2) for the documents you upload; encrypted in transit, scoped to your account.
  • The whole stack runs on our own servers. No ad networks, no trackers, no analytics selling.

How long we keep it

  • Ledger data, budgets, and documents: until you delete them, or 30 days after you request account erasure (the change-of-mind window), then gone for good.
  • Sign-in sessions: 15 minutes for the access token, 30 days for the refresh token that renews it.
  • Billing webhook records (fraud dedupe, no financial detail beyond the customer id): 90 days.

Children

Bearings is not directed at children under 13, and we do not knowingly collect their data. Users under 18 need a parent or guardian's consent. Tell us if a child created an account and we will delete it.

Your rights

Access, correction, export, and erasure are all self-serve in the app. Where the Jamaica Data Protection Act or the GDPR applies, its statutory rights are yours regardless of where you live — you may complain to the Office of the Information Commissioner (Jamaica) or your local supervisory authority, though the contact page is the faster door. Refunds are governed by the refund policy.

Deletion requests: the contact address reaches a human, though the delete buttons in the app are faster.