Filu ("Filu", "we", "us") is a personal-finance app for iOS that automatically turns your bank SMS messages and bank / subscription emails into a clear picture of your spending. Filu is operated by BugSquads. This policy explains what data Filu collects, how it is used, and the choices you have. For questions, email contact@bugsquads.com.
Information we collect
- Account information — your phone number or sign-in details, display name, and primary currency.
- Transaction data — amounts, merchants, currencies, dates, and bank/card identifiers parsed from your bank SMS and emails. A record may include the original message text so you can verify it in the app.
- Data you create — subscriptions, savings goals, installment plans, spending limits, categories, and notes.
- Basic diagnostics — crash and error information needed to keep the service working.
Filu does not show ads, does not use third-party advertising or analytics trackers, and never sells your data.
Bank SMS
iOS does not give apps access to your SMS inbox. Instead, an Apple Shortcuts automation you install hands each incoming bank message to Filu on your device, where it is parsed locally. Only the parsed result is stored in your private account. If a message cannot be parsed, its text may be submitted so we can build support for that bank's format.
Gmail and Outlook access
You can optionally connect a Google (Gmail) or Microsoft (Outlook) inbox so Filu can find bank receipts and subscription emails automatically. When you do:
- Access is read-only. Filu cannot send, delete, or modify your email.
- Filu only processes messages from recognized bank and subscription senders. Everything else is ignored and never stored.
- From a matching message, Filu extracts and stores only the parsed result — for example the service name, amount, currency, and renewal or transaction date.
- OAuth access tokens are encrypted and stored securely, and are deleted when you disconnect the inbox.
- You can disconnect at any time in Filu's Settings, from your Google Account permissions, or from your Microsoft account privacy settings.
Filu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is used only to provide the features described above. It is never used for advertising, never sold, and never used to develop, improve, or train generalized artificial-intelligence or machine-learning models. Humans do not read your email content except with your explicit permission, when necessary for security, or to comply with applicable law.
How your data is stored
Your data lives in your private Filu account on our own secured servers, encrypted in transit and at rest. Each account can only access its own data, and access is protected by authentication on every request.
Sharing
We share data only with the infrastructure and service providers needed to run Filu — our hosting provider, and Google or Microsoft when you connect an inbox — or when required by law. We never sell personal data and never share it with advertisers.
Data retention and deletion
Your data is kept for as long as your account exists. You can delete individual items in the app, disconnect a linked inbox at any time (which deletes its tokens), or request full account deletion from the app's Privacy screen or by emailing contact@bugsquads.com. Deletion removes your account data from our systems.
Children
Filu is not directed to children under 13, and we do not knowingly collect their data.
Changes to this policy
If we make material changes, we will update this page and the effective date above, and notify you in the app when appropriate.
Contact
BugSquads · bugsquads.com · contact@bugsquads.com