Privacy Policy

Feeno is operated by Feeno, which decides how the personal data described here is used (the “controller”). Questions or requests about your data go to our contact address (listed here soon; until then, signed-in users can use Give feedback).

Inside an organization, the organization's owner decides what is added and who may see it. When you add data about other people, such as teammates you invite, you are responsible for being allowed to share it.

Your account

When you sign in with Google we receive your name, email address and profile picture. We don't receive or store your Google password. We keep your settings, such as reminder and notification choices and the private link to your calendar feed.

What you add

• Organizations, projects, services, prices, renewal dates, tags and notes.
• Payment methods as a label: the card brand, its last four digits, its expiry and the name on it. A full card number is never sent to or stored by Feeno, even when your browser fills one in.
• Saved logins for services. Usernames are stored as you type them. Passwords and other secrets are encrypted before they are stored (see Security).
• Invoices and receipts you upload, kept in private storage that only your organization can read.
• Logos you upload for organizations and projects.
• Messages you send through Give feedback, with the page you were on.

Your inbox, if you connect one

Connecting Gmail or Outlook is optional. Feeno asks for read-only access, so it can never send, delete or change email. It searches for billing emails (receipts, invoices, renewal and price notices) and, for each one it reads, keeps:

• the sender, subject and date, and a link to open it in your inbox;
• what was read from it: the vendor, amount, currency, dates, VAT, invoice number and whether it is a donation;
• the names and sizes of attached PDFs;
• for each email filed as an invoice, a copy of its attached PDFs, or when nothing is attached, the email printed to PDF, so everyone in the organization can open it and it stays after the email is gone.

We don't keep the text of your other emails. Invoice copies are stored in a private storage bucket and served only to members of the organization, and are deleted when the invoice is removed or the account is deleted. Until a copy is saved, opening an attachment fetches the email from your inbox at that moment. We store the access token your provider gives us, encrypted, so scans can run. Your inbox settings (folders, senders, how far back) decide which emails are looked at.

Technical data

Our hosting providers log requests (IP address, browser, time and page) to keep the service running and secure. We count sign-in attempts per IP address to stop abuse, and delete those counts within two days.

• To run Feeno for you: show your services and costs, find receipts, and file invoices.
• To send the emails you ask for: renewal and trial reminders, price change notices, invitations and digests.
• To keep the service secure, stop abuse and fix problems.
• To answer your feedback and support requests.
• To meet legal obligations, such as keeping billing records once paid plans start.

We don't sell personal data, show ads, or use your data for advertising. We don't use the content of your emails, invoices or logins to train AI models.

Where the GDPR applies, our legal bases are: performing our contract with you (running the service), our legitimate interests (security, abuse prevention, improving reliability), your consent (connecting an inbox, which you can withdraw at any time by disconnecting it), and legal obligations.

Feeno's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:

• use Gmail data only to find and file your billing emails, features you can see and control in Feeno;
• don't transfer it to others except to provide those features, for security, or to comply with the law;
• don't use it for advertising, and don't sell it;
• don't use it to train generalized AI or machine learning models;
• don't let people read it unless you ask us to (for support), it's needed for security or the law requires it.

We hold data from Microsoft Outlook to the same rules.

You can disconnect an inbox on the Inbox page at any time. That deletes its stored access token and revokes Feeno's access where the provider allows it. You can also remove access from your Google account or Microsoft account.

Feeno uses AI models to read receipts and invoices: the text of a billing email or an uploaded file is sent to the model, which returns the vendor, amount, dates and similar fields. AI is also used to suggest categories for your services from their names.

These requests go to Anthropic, directly or through OpenRouter, under their API terms. The content is used to return the answer, not to train their models, and is kept by them only as long as their terms allow for safety and abuse checks. What the AI reads can be wrong, so check amounts before relying on them.

We share data only with the providers that help us run Feeno, each under a contract that limits what they may do with it, and with people you choose to share with.

Inside your organization, members see what the organization holds, according to their role. Viewers can't see saved logins. When you export invoices for your accountant, you decide where that file goes.

Service logos are fetched by our server from each service's own website, so no logo service learns which services you pay for.

We may disclose data when the law requires it, to protect people's safety or our rights, or as part of a sale or merger of the service, in which case this policy keeps applying to your data.

Your data is stored and processed on servers in India (Mumbai) operated by Supabase and Vercel, and our other providers may process it in the United States and elsewhere. When data leaves Israel or the European Economic Area, we rely on the safeguards the law allows, such as the European Commission's standard contractual clauses in our providers' terms.

• Your account and what you add are kept until you delete them or your account.
• Disconnecting an inbox deletes its access token right away. Invoices already filed from it stay.
• Deleting an imported invoice deletes the copy of its files, and keeps a note of that email so it isn't imported again.
• Sign-in attempt counts are deleted within two days.

When you delete your account, we delete your data, your uploaded files and invoice copies and your inbox connections, and revoke inbox access. Copies can remain in our providers' backups for a short time until they are overwritten. Records we must keep by law, such as invoices for paid plans, are kept for as long as the law requires.

Under Israel's Protection of Privacy Law and, where it applies to you, the GDPR, you can ask to see the data we hold about you, correct it, delete it, receive a copy, or object to or restrict how we use it.

• Download your data: Settings, then Your account, gives you everything you hold as JSON or CSV (saved passwords are left out; reveal them in the app).
• Delete your account: in the same place. It deletes your data for good.
• Emails: choose which reminders and notices you get in Settings.

For anything else, write to our contact address (listed here soon; until then, signed-in users can use Give feedback). We answer within 30 days. You can also complain to Israel's Privacy Protection Authority or, in the EU, to your local data protection authority.

Feeno uses as little as it can:

• A sign-in cookie from Supabase, which keeps you signed in. It is strictly necessary, so it needs no consent.
• Your theme choice (light, dark or system), kept in your browser's local storage, never sent to us.

We don't use analytics, advertising or tracking cookies, and our fonts load from our own server. If that changes, we'll update this policy and ask for your consent where the law requires it.

We protect data with encryption in transit and at rest, separate encryption for secrets and inbox tokens, database rules that keep each organization's data to its members, and read-only inbox access. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires. More on the Security page.

Feeno is for adults managing personal or business expenses. It isn't meant for anyone under 18.

We'll update the date at the top when this policy changes. If a change is significant, we'll tell you by email or in Feeno before it takes effect.