The short version
LucasApp stores the information needed to run your personal finance account: login data, settings, accounts, movements, subscriptions, loans, investments, usage limits and security records.
Receipt photos and screenshots submitted only for AI parsing are transmitted to the AI provider for processing and are not intentionally stored as raw images after parsing completes.
Voice features use the microphone only after you allow it and start them. Your voice is processed to turn it into text and draft movements; LucasApp never creates voiceprints or identifies you by your voice.
We do not sell your personal financial data and we do not use your private finance entries to advertise third-party financial products.
Who controls this policy
LucasApp is operated by Steven Coaila Zaa. This Privacy Policy applies to the LucasApp mobile app, lucasapp.app, backend APIs, App Store subscription features, support channels and related product surfaces.
If you have questions about privacy, security, support or data deletion, contact us at [email protected].
Information we collect
Account information may include your name, email address, password hash, verification status, timezone, language, plan, profile photo if you add one, app settings, passkey metadata, two-factor authentication metadata, security counters and active refresh sessions.
Finance information may include account names, balances, currencies, transaction records, income and expense entries, categories, transfers, loans, installments, subscriptions, subscription groups, investment accounts, trades, cash adjustments, instruments, market metadata and deleted-item recovery records.
Technical and audit information may include IP address, user agent, request identifiers, timestamps, rate-limit counters, login attempts, error logs, app platform, app version, Terms acceptance version and Terms acceptance time.
Billing information may include Apple product identifiers, transaction identifiers, renewal status, expiration status, refund or revocation state and entitlement information needed to provide Premium access.
Voice information, only when you use a voice feature, may include the audio you speak while it is active, its transcript, the assistant's replies, the drafts it proposed, call duration and usage counters, and the corrections you make to those drafts before saving.
AI processing
LucasApp may send text, receipt images, vouchers, bank screenshots, merchant lines, dates, amounts, currency symbols, account context and related parsing metadata to AI providers. At the time of this version these are Anthropic (Claude), with OpenRouter (using an OpenAI-compatible API) as a backup, and, for voice features, ElevenLabs, which converts speech to text and text to speech and runs the assistant model. LucasApp may also use OpenAI or another provider with equivalent safeguards.
AI requests do not include your name, email address or password. Text and photo parsing sends the content you submit plus the selected finance account's name and currency. Voice features also send the context the assistant needs to propose correct drafts: your account names, types, currencies and balances, category names, subscription and loan names, and names of merchants you use often. The app asks for your explicit consent before the first AI analysis and before the first voice session.
When you use a voice feature, your audio is streamed to ElevenLabs while the session is open. LucasApp configures the shortest retention the provider offers for that audio and its transcript; the provider may keep them for a limited period under its own terms for security and abuse prevention. Dictation inside text fields uses Apple's speech recognition under Apple's terms.
To recognize names correctly, LucasApp may keep a list of words for your account, such as your account names, merchants you use and the corrections you make to voice drafts. Across users, LucasApp may only use de-identified merchant and brand names to improve recognition, never amounts, balances or anything that identifies you.
AI processing is used to parse expenses and prepare draft transactions for user review. AI output can be wrong, incomplete or duplicated; you are responsible for reviewing and confirming parsed data before relying on it.
Raw receipt photos submitted only for AI parsing are not intentionally stored by LucasApp after the request completes. Parsed fields, confirmed transactions, request identifiers, usage counters and error metadata may be stored because they are required for the app to work, enforce plan limits, debug failures and prevent abuse.
How we use information
We use information to create and secure accounts, synchronize data, provide finance tracking, process AI requests, enforce plan limits, verify subscriptions, prevent abuse, debug errors, maintain legal records, improve product quality and respond to support requests.
We may use aggregated, anonymized, de-identified or statistical information to understand feature adoption, app health, cost, reliability and product direction.
We do not sell your personal financial data. We do not intend to use private user finance entries for third-party advertising or third-party financial-product targeting.
Service providers
LucasApp may use infrastructure, database, hosting, email, AI, Apple App Store, StoreKit, Apple App Store Server Notifications, logging, security, exchange-rate and market-data providers.
For current and future market data features, LucasApp may request symbols, instruments, logos, prices and related metadata from third-party providers. We do not intend to send your full private portfolio or personal identity to market-data providers unless a future feature explicitly discloses that behavior.
Retention and deletion
Active account data is kept while your LucasApp account exists and while needed to provide the service. Some security, billing, legal, fraud-prevention and audit records may be retained after account deletion where required or reasonably necessary.
If you delete your LucasApp account, your account and the finance data it owns are deleted from the active service right away. Backup copies that still contain them are deleted automatically within 40 days as our backups rotate. Some information may remain temporarily in logs, Apple transaction history or legal acceptance records.
You can review account deletion instructions at /account-deletion/.
Your choices
You can choose what finance information to enter, whether to use AI parsing, whether to add a profile photo, whether to enable passkeys or two-factor authentication, and whether to subscribe to Premium.
You can request help, report a privacy issue or ask questions by emailing [email protected].