LucasApp stores the information needed to run your personal finance account: login data, settings, accounts, movements, subscriptions, loans, investments, usage limits and security records.
Receipt photos and screenshots submitted only for AI parsing are transmitted to the AI provider for processing and are not intentionally stored as raw images after parsing completes.
We do not sell your personal financial data and we do not use your private finance entries to advertise third-party financial products.
Who controls this policy
LucasApp is operated by Steven Coaila Zaa. This Privacy Policy applies to the LucasApp mobile app, lucasapp.app, backend APIs, App Store subscription features, support channels and related product surfaces.
If you have questions about privacy, security, support or data deletion, contact us at [email protected].
Information we collect
Account information may include your name, email address, password hash, verification status, timezone, language, plan, profile photo if you add one, app settings, passkey metadata, two-factor authentication metadata, security counters and active refresh sessions.
Finance information may include account names, balances, currencies, transaction records, income and expense entries, categories, transfers, loans, installments, subscriptions, subscription groups, investment accounts, trades, cash adjustments, instruments, market metadata and deleted-item recovery records.
Technical and audit information may include IP address, user agent, request identifiers, timestamps, rate-limit counters, login attempts, error logs, app platform, app version, Terms acceptance version and Terms acceptance time.
Billing information may include Apple product identifiers, transaction identifiers, renewal status, expiration status, refund or revocation state and entitlement information needed to provide Premium access.
AI processing
LucasApp may send text, receipt images, vouchers, bank screenshots, merchant lines, dates, amounts, currency symbols, account context and related parsing metadata to OpenRouter using an OpenAI-compatible API. LucasApp may later use OpenAI directly or another OpenAI-compatible provider.
AI requests do not include your name, email address or account identifiers; they contain only the content you submit plus the selected finance account's display name and currency. The app asks for your explicit consent before the first AI analysis.
AI processing is used to parse expenses and prepare draft transactions for user review. AI output can be wrong, incomplete or duplicated; you are responsible for reviewing and confirming parsed data before relying on it.
Raw receipt photos submitted only for AI parsing are not intentionally stored by LucasApp after the request completes. Parsed fields, confirmed transactions, request identifiers, usage counters and error metadata may be stored because they are required for the app to work, enforce plan limits, debug failures and prevent abuse.
How we use information
We use information to create and secure accounts, synchronize data, provide finance tracking, process AI requests, enforce plan limits, verify subscriptions, prevent abuse, debug errors, maintain legal records, improve product quality and respond to support requests.
We may use aggregated, anonymized, de-identified or statistical information to understand feature adoption, app health, cost, reliability and product direction.
We do not sell your personal financial data. We do not intend to use private user finance entries for third-party advertising or third-party financial-product targeting.
Service providers
LucasApp may use infrastructure, database, hosting, email, AI, Apple App Store, StoreKit, Apple App Store Server Notifications, logging, security, exchange-rate and market-data providers.
For current and future market data features, LucasApp may request symbols, instruments, logos, prices and related metadata from third-party providers. We do not intend to send your full private portfolio or personal identity to market-data providers unless a future feature explicitly discloses that behavior.
Retention and deletion
Active account data is kept while your LucasApp account exists and while needed to provide the service. Some security, billing, legal, backup, fraud-prevention and audit records may be retained after account deletion where required or reasonably necessary.
If you delete your LucasApp account, the active account row and associated user-owned finance data are deleted from the active service. Some information may remain temporarily in backups, logs, Apple transaction history or legal acceptance records.
You can review account deletion instructions at /account-deletion/.
Your choices
You can choose what finance information to enter, whether to use AI parsing, whether to add a profile photo, whether to enable passkeys or two-factor authentication, and whether to subscribe to Premium.
You can request help, report a privacy issue or ask questions by emailing [email protected].