Privacy Policy

Last updated: September 2026

The Short Version

Your transactions never leave your browser. Unblur processes all CSV files entirely on your device using client-side JavaScript. We never see, receive, store, or transmit your transaction data. The one exception is opt-in and summary-only: Pro's AI action plans (details below).

What We Don't Collect

  • Your bank or credit card transaction data
  • Your CSV file contents
  • Your spending analysis or report data
  • Your bank login credentials (we never ask for them)

What We May Collect

  • Email address — only if you voluntarily subscribe to our newsletter
  • Payment information — processed by Stripe (our payment provider). We never see your card number.
  • Basic analytics — page views, anonymized usage metrics (no personal data)
  • A spending summary — only if you use AI action plans — see the section below

AI Action Plans (Optional, Pro)

Pro users can optionally generate AI action plans for their savings recommendations. If — and only if — you click "Send & generate", we send an aggregate spending summary to our server, which forwards it to Anthropic's Claude API for processing. Before anything is sent, we show you the exact data verbatim so you can review it.

  • What the summary contains: category totals, savings-recommendation figures, and recurring-payment rates. Only nationally recognizable brand names (like Netflix) are included — local merchants, charities, and utility providers are replaced with generic labels before sending
  • What it never contains: individual transactions, dates, account names or numbers, or your CSV files
  • Storage: we do not store the summary or the generated plans on our servers; results are cached only in your browser
  • If you never click the button, nothing is ever sent

How CSV Processing Works

When you upload a CSV file to Unblur:

  1. Your browser reads the file using the File API
  2. PapaParse (a JavaScript library) parses the CSV in your browser
  3. Our analysis engine categorizes transactions in your browser
  4. Chart.js renders visualizations in your browser
  5. If you keep a report between visits, it is stored on your device in your browser's local database, encrypted at rest (AES-256-GCM) — the browser's on-disk files never contain your transactions in readable form
  6. “Erase all my data from this device” at the bottom of any report deletes everything Unblur stored locally — report, files, corrections, and goal
  7. At no point does any transaction data leave your device

Third-Party Services

  • Stripe — payment processing (for Pro purchases)
  • Vercel — hosting and anonymized analytics
  • Anthropic (Claude API) — processes the opt-in AI action-plan summaries described above; nothing else

Contact

Questions about privacy? Email us at privacy@unblur.money