Your data · Clementine

Who processes it.

Nine rows. Seven of them only apply if you switch that thing on.

Services that process your data, when, what they see and how you control it
Who	When	What they see	Your control
Supabase Database, sign-in and file storage	Always. It is where Clementine keeps your records.	Your email address and a scrambled (hashed) copy of your password Everything you enter or import: transactions, categories and limits, bills, goals, invoices and clients, tax records, settings Receipt photos you attach to deductions The keys that connect your bank feed, Gmail and AI, each one encrypted before it is stored	Download all of it whenever you like. Ask for it to be deleted and it is.
PocketSmith Bank feed	Only if you connect a bank feed. Today that means connecting your own PocketSmith account.	Your bank connections, balances and transactions, which you set up with PocketSmith directly Requests from Clementine, made with a key you paste in, to read those transactions and to ask a feed to refresh Clementine never sees or stores your bank login.	Disconnect under Account, Connections. What was already imported stays in Clementine until you remove it. Switching one account off deletes its imported transactions.
Google Gemini AI sorting	Only if you turn AI sorting on. Today it runs on a Google key you supply.	The public name of a business you paid, such as a supermarket or a streaming service The names of your categories, so it can choose one Never amounts, dates, account names, reference numbers or the bank’s own description. Payments to people, transfers, PayID and BPAY lines are not sent at all.	Turn automatic sorting off, or remove the key, under Account, AI. Categories already chosen stay.
Google Gemini AI subscription finding (optional, off unless you switch it on)	Only if you turn it on as well as AI sorting.	From billing emails the ordinary rules could not read: the sender’s domain, the subject and a short excerpt of the billing sentences, including the service name and price From repeating bank charges: the merchant’s name, how often it repeats, the amount rounded to whole dollars and how many times it has been charged Names, addresses, email addresses, links, card endings and long numbers are removed before anything is sent.	Leave it off, or turn it off again, under Account, AI.
Google Gmail Payslips, subscriptions and sending invoices	Only if you connect Gmail. Read access and permission to send are asked for separately.	A payslip scan, when you start one, searches the senders you name for payslip PDFs Subscription scanning, once you turn it on, looks for billing emails and repeats in the background until you turn it off Invoices you send go out from your own address Clementine searches for those emails only, and it does not send anything you did not ask it to.	Turn subscription scanning off, or disconnect Gmail, under Account, Connections. Disconnecting withdraws the permission at Google.
Stripe Payments	Only if you pay for a plan.	Your email address, the plan you chose and the card details you type on Stripe’s own page Clementine never sees or stores your card number. It keeps a customer reference and which plan you are on.	Receipts, card changes and cancelling are on your account page, in two clicks.
Apple, Google or Mozilla Reminders on your phone or computer	Only if you turn reminders on for a device.	A short notice passed through your browser’s own notification service. The text on the lock screen is generic Names and amounts stay in Clementine.	Turn reminders off under Account, Notifications, or in your browser.
Your calendar app Calendar sync	Only if you switch on the calendar feed and add its private address to a calendar.	Names and due dates of bills, renewals, invoices and goal deadlines No amounts.	Switch the feed off under Account, Calendar and its address stops working.
DuckDuckGo and Google icon services Company logos	When the app shows a logo beside a business or a bank.	The website address of that business, asked for by your browser, along with your internet address as any website sees it Nothing about your account, your transactions or your amounts.	None today. If no logo is found the app shows initials instead.

What Clementine does not do with it

It does not sell it, rent it or share it for marketing.
It does not use it to pick loan, card or insurance offers for you, and it takes no payment from anyone who would.
It does not hand your transaction list to an AI model. AI sorting works from a business’s public name and your category names. The optional subscription finding sends a little more, set out in the table, and stays off unless you turn it on.

Independent and staying that way

Export everything

In the app, open Account, then Your data, and choose Download everything. You get one zip file with:

a spreadsheet (CSV) for each kind of record: transactions and their split lines, categories, accounts and balances, bills, subscriptions, goals and buckets, invoices and clients, tax income, deductions and settings;
one JSON file with everything exactly as it is stored, for moving to other software;
a guide to what each file and column means, and how to check the totals against the app;
your receipt photos, unless you untick them for a smaller download.

The zip is put together on your own device. It is free on every plan and still works after a plan ends. Passwords and the keys that connect your bank, Gmail and AI are never included. A guide to the export

Delete your account

There is no delete button in the app yet. Until there is, email the contact address that will be published on this page before sign-ups open from the address on your account and ask for it to be deleted. We will confirm it is you, tell you when it is done, and remove your account and every record stored under it, including receipt photos and the encrypted keys for your connections.

Download your export first: deletion cannot be undone. Records we are required by law to keep, such as the receipts for payments you made to us, are kept for as long as the law requires and no longer.

Deleting your Clementine account does not close your PocketSmith, Google or Stripe accounts. Disconnect them in the app first, or with those services directly.

Questions

The privacy policy is the formal version of this page. For anything it does not answer, write to the contact address that will be published on this page before sign-ups open.

Join the founding list

Sign-ups are not open yet. Leave your email and we will write once, when founding places open. Founding members pay A$59 a year for Plus or A$129 for Sole Trader, fixed for life.

Not open yet. The founding list opens shortly. Until then this form is switched off, and nothing typed here is sent or stored.

That did not go through. Check the email address and tick the consent box, then try again. If you have tried several times, wait a minute first.

You are on the list.

We will write when founding places open. Nothing else will arrive before then, and you can unsubscribe from that email.