Your books never reach us. This page is about the little we do handle — your account, and your bill.
Clerk.AI is run by Augmented Mind AB (PB 13, 00561 Helsinki, Finland), and we are the data controller for the personal data described here. This policy covers our website (https://clerkai.eu), the Mac and Windows apps, the iPhone companion and the optional licence. Write to us about any of it at privacy@augmentedmind.io.
Clerk.AI keeps your financial records on your own machine. Your statements, receipts,
voice notes and the working index sit on your own computer: in a folder (on Windows,
Clerk.AI in your user folder), with your account sign-in kept in the macOS
Keychain on a Mac or in Windows Credential Manager on a PC. Augmented Mind AB
does not run a cloud that stores your books, and your vault is never uploaded to us. If you
never make an account, we hold nothing about you at all.
None of what follows reaches Augmented Mind AB. It is here because it is still your data.
To do what you ask of it, the app reads and writes files in the folder you chose, runs commands on your computer under your own user account, and uses a web browser signed in as you. On a Mac, if you grant the permissions, it also reads your photo library to find photographed receipts, and your microphone when you answer a question by speaking; you can withdraw either at any time in System Settings › Privacy & Security. On Windows it does not read a photo library at all; it uses your microphone when you answer by speaking, and you can turn that off in Settings › Privacy & security › Microphone. The rest is how the app works at all.
What it reads contains other people's personal data — an invoice names a supplier, a statement names who you paid, an email names who wrote it. Where you use Clerk.AI for a business, that handling is yours: you decide what it reaches and why, on your own equipment, and we neither receive that material nor tell the app what to do with it. What you owe the people named in your records is unchanged by using our app.
The bookkeeping workflow runs on the AI you choose when you set it up: Claude Code, running on your own Claude subscription under your own agreement with Anthropic, or Codex, running on your own ChatGPT subscription under your own agreement with OpenAI. What a request needs goes from your computer to that company directly; we are not in that path and never see it. With Claude, how long Anthropic keeps it depends on your Claude privacy settings: with model improvement off, its usual 30-day retention period applies; with it on, it may keep your sessions, de-identified, for up to five years for training. Turn model improvement off there if you want the shorter one. With ChatGPT, whether OpenAI may use it to improve its models is your ChatGPT data control “Improve the model for everyone”; turn it off there if you do not want that, and see OpenAI's privacy policy. Reading receipts and transcribing your voice happen on your computer and are sent nowhere.
Only these, and only if you make an account or write to us.
| Your account | Email address, and your name if we have one. To give you an account, let you sign in, in the app as well as here, and let the app check which plan you are on. Legal basis: our contract with you. |
|---|---|
| Your bill | Billing details and payment records, handled by Stripe, which stores your payment method so the subscription can renew. We never see full card numbers. Legal basis: our contract with you, and our legal obligations for tax and accounting. |
| What you write to us | Support messages and bug reports, with your email address so we can reply. Legal basis: our legitimate interest in answering you and fixing what is broken. |
| Email we have sent you | A record of the messages we sent, including their contents, and whether they arrived. Legal basis: our legitimate interest in knowing that our own email works, and in showing what we sent and on what basis. |
| Downloads and update checks | The internet address that fetched a download or checked for an update, the app's version, and for an installed app an install number it makes up at random when it is installed, so we can count copies in use rather than addresses. It is not linked to your account. Deleted after about three months. Legal basis: our legitimate interest in delivering updates and in knowing roughly how many copies are in use. |
| How far you got when you started | While you set up the Mac app, it tells the same server when you reach each of these steps, once each: the first screen opened, your first answer given, setup finished, first run completed, and the first month whose books the app closed for you. Each message carries only the step's name, the app's version and the install number described above, never anything from your books. Deleted after about three months. Legal basis: our legitimate interest in seeing where people get stuck when they start, so we can fix it. |
| Visits to this website | Counted three ways, none of which stores anything on your device: Cloudflare Web Analytics; our own page counter, which records the page, the country Cloudflare reports, the site that linked to it, any campaign label in the link, the kind of device and which buttons were pressed, joined by a number forgotten when you close the tab, and never your internet address; and Google Analytics, fed from our server with those same page events, so Google receives neither your address nor anything from your browser directly. None of it can recognise you on a later visit. Legal basis: our legitimate interest in knowing roughly how many people visit. |
We take blunter numbers in exchange for not putting a consent banner in front of you. Nothing here is used to make an automated decision about you. During setup the app opens one page on this website in your browser, to check it can drive the browser; that appears in the visit counts like any other visit.
Two kinds, and they work differently.
Email about your account — a sign-in link you asked for, a receipt, a reply to something you wrote — is part of giving you the service, so we send it because we have to. You cannot opt out of it, and it is never marketing.
Everything else — product updates, news and offers, and invitations to tell us how a close went — we send only if you tick the box for it. Legal basis: your consent. The boxes start empty, you can change them whenever in your account settings, and you can turn everything off in one go. Changing your mind costs you nothing and does not affect anything we sent before.
Five companies help us run this, and each one only gets what it needs for its job: Stripe for payments, Supabase for your account, Cloudflare for hosting, Resend for sending email, and Google for counting visits. Who they are and what each handles is on our sub-processors page, which we keep up to date. None of them receives your books, because we do not have them.
Our own systems are in the EU. Some of the companies above are American or have American parents, so your data may be processed outside the EU. Where that happens it is covered by the European Commission's adequacy decision for the EU–US Data Privacy Framework, or by the Commission's standard contractual clauses. Ask us at privacy@augmentedmind.io if you want the detail for a particular company.
Under the GDPR you can ask us to:
Ask at privacy@augmentedmind.io and we will answer within a month. It costs nothing.
If you think we have got it wrong, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the authority where you live.
We update this page when what we do changes. The date at the top always shows when it last changed, and if a change matters to you we will say so rather than leave you to spot it.