Privacy & Security

Where your data lives

Everything you enter into Artha, transactions, account balances, notes, scenarios, calendar events, lives in a single Postgres database hosted on Render, a SOC 2 Type II and ISO 27001 certified infrastructure provider. It isn't shared with any other product, and nobody outside of running the app has a reason to open it.

How your account is protected

• ✓Your password is hashed, never stored in plain text. Not even Artha's own operator can read it back.
• ✓Two-factor authentication is optional and free: a code from an authenticator app on top of your password, with one-time recovery codes for a lost phone.
• ✓Login is rate-limited, so repeated password guesses get slowed down automatically.
• ✓Deleting your account is real: a 30-day window, undone just by logging back in, then a full purge, not a flag that quietly leaves your data behind.

Your bank statement, step by step

1. 1.You upload a PDF, CSV, OFX or QIF file, or a photo of a paper statement. It's read directly from the upload into memory, never written to disk or any storage bucket, anywhere.
2. 2.A free, offline parser reads it first, entirely on Artha's own server. No external call, no cost, for the large majority of statements, and always for CSV, OFX and QIF files.
3. 3.Only if that fails, the extracted text, never the original file, is sent to Claude to make sense of an unusual layout, a few pages at a time so it's quick. A scan or a photo has no text to extract, so for those, pictures of its pages (at most 12) are sent instead. Anthropic doesn't train on them.
4. 4.You review every row before anything is saved. Edit or uncheck any line first.
5. 5.You click Import, or you don't. Close the tab instead, and nothing from that statement was ever saved.

The AI Assistant

When you ask it something, it's handed a snapshot built for that one question, your budgets, upcoming notes and events, and recent transactions, not a permanent memory of everything you've ever entered. It runs on Anthropic's commercial API, which by policy does not use customer data to train its models unless a customer explicitly opts in. Artha doesn't.

More importantly: the AI Assistant can never write to your account directly. Every action it suggests, adding a transaction, setting a budget, anything, shows up as a card you have to click to confirm. It proposes; you decide.

Notifications on the website

They're off until you turn them on in Settings, one browser at a time. Once they're on, reminders for bills, notes and events, budget alerts, and the pace heads-up if you've chosen it travel through your browser's own push service (run by Google, Apple or Mozilla, depending on the browser), encrypted so only your browser can read them. Turning them off in Settings removes that browser from the list.

The iPhone, iPad and Mac apps

• ✓Your password isn't kept on your device. Signing in gives that one iPhone, iPad or Mac its own key, held in its Keychain and never synced to your other devices. Artha's server stores only a one-way hash of it, and signing out, changing your password, or deleting your account turns it off.
• ✓A copy of your latest numbers stays on the device so the app opens instantly, and it's erased when you sign out. On iPhone and iPad it's encrypted whenever the device is locked, except the copy your widgets read, which unlocks after the first unlock since a restart so Lock Screen widgets can show it. On a Mac both live in Artha's own sandboxed app folder, which FileVault encrypts when it's turned on.
• ✓Widgets show only what you put there. A Lock Screen widget shows its number while the phone is locked, and a desktop widget on a Mac shows it to anyone looking at your screen, so only add one if you're comfortable with that.
• ✓Siri and Shortcuts answer only when you ask. “What's safe to spend” is worked out by the app on your device, from your own account, and Siri then shows or says it under Apple's own Siri privacy terms. That action can read your numbers but never change them.
• ✓Apple Pay logging is off until you set it up in the Shortcuts app yourself. When it's on, Artha receives only what Wallet shares with the automation: the amount, its currency, and the store's name. Never your card number, and never a bank login.
• ✓Importing a statement works the same as on the website. The app reads the PDF, CSV, OFX or QIF file from where it already is, never makes its own copy (a statement you scan with the camera is held in memory only, never saved to your photos or files), and sends it to Artha's server over HTTPS, where it's read in memory and never stored. Nothing is saved until you review the rows and tap Import.
• ✓You can create and delete your account right in the app. Signing up asks for the same things the website does. Deleting from the app works the same way too: it asks for your password, signs out every device, and starts the same 30-day window.
• ✓Notifications are made on your device. Bill reminders, budget alerts, the pace heads-up if you've chosen it, and Apple Pay confirmations are created by the app from numbers it already has, so no notification service ever sees your money. On iPhone and iPad, iOS now and then lets the app refresh in the background to keep them current.
• ✓No analytics or tracking in the apps either. They talk only to Artha's own server.

What Artha doesn't do

• ✕Doesn't sell or share your data with advertisers, data brokers, or anyone else.
• ✕Doesn't run analytics or ad-tracking scripts of any kind.
• ✕Doesn't ask for your bank login, on the web or in the app. There's no bank connection to give one to.
• ✕Doesn't store your bank statement file anywhere, ever, not even temporarily.
• ✕Doesn't let the AI touch your account without your own explicit click.
• ✕Doesn't let one user's data cross into another's, even on the same Artha instance.