Privacy Policy

Filu ("Filu", "we", "us") is a personal-finance app for iPhone and Android that turns your bank SMS messages, and optionally bank and subscription emails, into a clear picture of your spending. Filu is operated by BugSquads. This policy explains what data Filu collects, how it is used, and the choices you have. For questions, email contact@bugsquads.com.

Information we collect

• Account information — a random device identifier, your primary currency and language, and, only if you back up with Apple or Google, your name, email address and that account's identifier.
• Transaction data — amounts, merchants, currencies, dates, balances, and bank and card identifiers read from your bank messages and emails, together with the original message text so you can check each transaction in the app.
• Data you create — subscriptions, savings goals, installment plans, spending limits, categories, and notes.
• Purchase information — if you subscribe to Filu Premium: the subscription's status, product, dates and purchase identifier from the App Store or Google Play. We never see your card or payment details.
• Device information — the app version, operating system version and phone model, sent with each request, and a notification token if you allow reminders.
• Basic diagnostics — error information our servers record to keep the service working. The apps contain no third-party crash-reporting or analytics tools.

Using Filu without an account: the app creates a random identifier on your phone and uses it to keep your data on our servers. It is not linked to your name, phone number, Apple ID or Google account unless you choose to back up your data in Settings.

Filu does not show ads, does not use third-party advertising or analytics trackers, and never sells your data.

Bank SMS

On Android, Filu asks for permission to read and receive SMS. When you allow it, Filu imports the bank messages from the last 90 days, then reads each new bank message as it arrives. Every message is first checked by a filter on your phone, and only bank transaction messages pass it. Personal messages and one-time passcodes are never stored, sent or logged. You can withdraw the permission at any time in Android's settings.

On iPhone, iOS does not give apps access to your SMS inbox. Instead, an Apple Shortcuts automation you install hands each incoming bank message to Filu on your device. You can turn the automation off at any time in the Shortcuts app.

What happens to a bank message. Filu reads it on your phone. The transaction it finds is saved in your private account together with the original message text, which is encrypted on our servers. A message Filu is unsure about waits in a review list on your phone and is not sent until you confirm it; discarding it deletes it from your phone only. If Filu cannot read a bank message at all, the message's text, sender and the app version are sent to us so we can add support for that bank's format. Those messages are stored separately and used only for that purpose.

Filu also downloads updated bank-message formats and parser files from our servers. These downloads send nothing about you beyond a normal web request.

Backing up with Apple or Google

Backing up is optional. If you choose Sign in with Apple on iPhone or Sign in with Google on Android, we receive your name, email address and an account identifier from Apple or Google. Apple may give us a private relay address instead of your real email. We use these only to keep your data safe and to restore it on a new phone, never for marketing.

Purchases

Filu Premium is a subscription sold through the App Store or Google Play, and Apple or Google handles the payment. To unlock Premium features and keep subscription records, we receive the subscription's status and dates from them, linked to your Filu account through an anonymous token. Deleting your Filu account does not cancel a subscription; cancel it in your App Store or Google Play settings.

Camera

Filu uses the camera only when you scan a Filu Advance sign-in code shown on filu.life. The code is read on your phone. No photos or video are saved or sent.

Gmail and Outlook access

You can optionally connect a Google (Gmail) or Microsoft (Outlook) inbox so Filu can find bank receipts and subscription emails automatically. When you do:

• Access is read-only. Filu cannot send, delete, or modify your email.
• Filu only processes messages from recognized bank and subscription senders. Everything else is ignored and never stored.
• From a matching message, Filu extracts and stores only the parsed result — for example the service name, amount, currency, and renewal or transaction date.
• OAuth access tokens are encrypted and stored securely, and are deleted when you disconnect the inbox.
• You can disconnect at any time in Filu's Settings, from your Google Account permissions, or from your Microsoft account privacy settings.

Google user data is used only to provide the features described above. It is never used for advertising, never sold, and never used to develop, improve, or train generalized artificial-intelligence or machine-learning models. Humans do not read your email content except with your explicit permission, when necessary for security, or to comply with applicable law.

How your data is stored

Your data lives in your private Filu account on our own secured servers. Everything is encrypted in transit, and sensitive fields such as the original message text and sign-in tokens are also encrypted at rest. Each account can only access its own data, and access is protected by authentication on every request.

Sharing

We share data only with the service providers needed to run Filu: our hosting and network providers; Apple and Google for sign-in, notifications and purchases; Google or Microsoft when you connect an inbox; or when required by law. We never sell personal data and never share it with advertisers.

Data retention and deletion

Your data is kept for as long as your account exists. You can delete individual transactions in the app, or delete everything in Settings, Account, with Delete my data or, for a backed-up account, Delete account. Your account is closed straight away and permanently deleted from our systems after 30 days. A backed-up account can be restored by signing back in within those 30 days. You can also ask for deletion by emailing contact@bugsquads.com; filu.life/delete-account explains both ways. Bank messages Filu could not read are kept after deletion without any link to you, so we can keep improving bank support.

Children

Filu is meant for adults and is not directed to children under 13. We do not knowingly collect children's data.

Changes to this policy

If we make material changes, we will update this page and the effective date above, and notify you in the app when appropriate.

Contact

BugSquads · bugsquads.com · contact@bugsquads.com