Your books never reach us. This page is about the little we do handle — your account, and your bill.
Clerk.AI is run by Augmented Mind AB (PB 13, 00561 Helsinki, Finland), and we are the data controller for the personal data described here. This policy covers our website (https://clerkai.eu), the Mac app, the iPhone companion and the optional licence. Write to us about any of it at [email protected].
Clerk.AI keeps your financial records on your own machine. Your statements, receipts, voice notes and the working index sit in a folder on your Mac and in the macOS Keychain. Augmented Mind AB does not run a cloud that stores your books, and your vault is never uploaded to us. If you never make an account, we hold nothing about you at all.
None of what follows reaches Augmented Mind AB. It is here because it is still your data.
To do what you ask of it, the app reads and writes files in the folder you chose, runs commands on your Mac under your own user account, and uses a web browser signed in as you. If you grant the macOS permissions, it also reads your photo library to find photographed receipts, and your microphone when you answer a question by speaking. Those two you can withdraw at any time in System Settings; the rest is how the app works at all.
What it reads contains other people's personal data — an invoice names a supplier, a statement names who you paid, an email names who wrote it. Where you use Clerk.AI for a business, that handling is yours: you decide what it reaches and why, on your own equipment, and we neither receive that material nor tell the app what to do with it. What you owe the people named in your records is unchanged by using our app.
The bookkeeping workflow sends what a request needs to an AI provider on your account, under your own agreement with them, and we are not in that path. Reading receipts and transcribing your voice happen on the Mac and are sent nowhere.
Only these, and only if you make an account or write to us.
| Your account | Email address, and your name if we have one. To give you an account and let you sign in, on the Mac as well as here. Legal basis: our contract with you. |
|---|---|
| Your bill | Billing details and payment records, handled by Stripe, which stores your payment method so the subscription can renew. We never see full card numbers. Legal basis: our contract with you, and our legal obligations for tax and accounting. |
| What you write to us | Support messages and bug reports, with your email address so we can reply. Legal basis: our legitimate interest in answering you and fixing what is broken. |
| Email we have sent you | A record of the messages we sent, including their contents, and whether they arrived. Legal basis: our legitimate interest in knowing that our own email works, and in showing what we sent and on what basis. |
| Visits to this website | Counted with Google Analytics, set up so it stores nothing on your device: no cookie, and no identifier that survives closing the tab. It cannot recognise you on a later visit or follow you elsewhere. Legal basis: our legitimate interest in knowing roughly how many people visit. |
We take blunter numbers in exchange for not putting a consent banner in front of you. Nothing here is used to make an automated decision about you.
Two kinds, and they work differently.
Email about your account — a sign-in link you asked for, a receipt, a reply to something you wrote — is part of giving you the service, so we send it because we have to. You cannot opt out of it, and it is never marketing.
Everything else — product updates, news and offers, and invitations to tell us how a close went — we send only if you tick the box for it. Legal basis: your consent. The boxes start empty, you can change them whenever in your account settings, and you can turn everything off in one go. Changing your mind costs you nothing and does not affect anything we sent before.
Five companies help us run this, and each one only gets what it needs for its job: Stripe for payments, Supabase for your account, Cloudflare for hosting, Resend for sending email, and Google for counting visits. Who they are and what each handles is on our sub-processors page, which we keep up to date. None of them receives your books, because we do not have them.
Our own systems are in the EU. Some of the companies above are American or have American parents, so your data may be processed outside the EU. Where that happens it is covered by the European Commission's adequacy decision for the EU–US Data Privacy Framework, or by the Commission's standard contractual clauses. Ask us at [email protected] if you want the detail for a particular company.
Under the GDPR you can ask us to:
Ask at [email protected] and we will answer within a month. It costs nothing.
If you think we have got it wrong, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the authority where you live.
We update this page when what we do changes. The date at the top always shows when it last changed, and if a change matters to you we will say so rather than leave you to spot it.