Privacy

Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains how Edgewise Labs ("we", "us", "our") collects, uses, and protects your information when you use EL Expenses (the "Service") — our household expense tracker made up of a Telegram bot and a web dashboard. Edgewise Labs is an unincorporated business based in Canada. We handle your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

  • Account email — the email you use to sign up, log in, and receive service messages.
  • Expense data you enter — the transactions, amounts, categories, groups, members, and notes you record.
  • Receipt images — photos of receipts you send to the Telegram bot or upload to the web dashboard, so they can be read and stored against a transaction.
  • Payment status — your subscription plan and whether it is active. Card details are handled by Stripe and are never stored on our servers (see below).

Why we collect it

We use your information only to run the Service: to create and secure your account, read and record your expenses, store your receipts, split shared costs, produce your spending reports, process your subscription, and send you essential service email (such as sign-up confirmation). We do not sell your personal information, and we do not use it for advertising.

Third parties we share data with

We rely on a small number of trusted service providers ("processors") to operate the Service. Each receives only the data needed for its role:

  • Stripe — processes your subscription payments. Your card details are entered directly with Stripe and handled by Stripe; we do not receive or store your full card number.
  • Resend — sends our transactional email (for example, sign-up confirmation). It processes your email address for delivery.
  • Anthropic (Claude) — when you send a receipt, the image is sent to Claude's API so the AI can extract details such as merchant, amount, and date. Images are processed to perform that extraction.
  • Telegram — the Telegram bot receives the photos and messages you send it. Your use of Telegram is also subject to Telegram's own privacy policy.
  • Neon (database) and Vercel (hosting) — store and serve your account and expense data so the app can run.

Cross-border storage

Our database (Neon) and hosting (Vercel), and some of the processors above, run on servers located in the United States. This means your information is stored and processed outside Canada. While it is outside Canada, it may be accessible to foreign courts, law enforcement, and regulatory authorities under the laws of that country. By using the Service you consent to this cross-border transfer and processing.

Data retention

We keep your account and expense data for as long as your account is active and you continue to use the Service. If you close your account or ask us to delete your data, we remove your personal information within a reasonable period, except where we must keep limited records to meet legal, tax, or billing obligations. Retention of your expense history is also tied to your plan.

Your rights under PIPEDA

Under PIPEDA you have the right to access the personal information we hold about you and to request correction of anything inaccurate. You may also withdraw your consent, subject to legal and contractual limits, by closing your account. To make any of these requests, contact us at the address below and we will respond within a reasonable time.

Security

We take reasonable technical and organizational measures to protect your information, including transport encryption and access controls at our providers. No online service can be guaranteed to be perfectly secure, but we work to keep your data safe.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated where appropriate.

Contact us

Questions about this policy or your data? Contact Edgewise Labs at support@[your-domain].