TLDR Classic privacy policy
Last updated: 20 October 2026
TLDR Classic is a money journal for iPhone. You write what you spend, and the app works out the totals. This policy explains what the app collects, where it goes, how long it's kept, and what you can do about it. It covers the TLDR Classic app and the people who use it anywhere in the world, including the European Union and the United Kingdom (the GDPR and the UK GDPR), California and other US states (the CCPA and similar laws), and India (the Digital Personal Data Protection Act, 2023).
Published at https://tldrmoney.in/classic/privacy.
Who we are
TLDR Classic is made by Sonal Systems Private Limited ("we", "us"), a company in India. We decide how and why your personal data is used in the app, which makes us its controller (its "data fiduciary" under India's law). Address: A-3, Mehsana Nagar, Nizampura, Vadodara, 390002. Contact: hello@tldrmoney.in. Write to that address for anything in this policy, including the requests described under "Your rights".
The short version
- Your entries are yours. We use them only to run the app for you.
- No ads, no tracking, no analytics, and nothing is sold or shared for advertising.
- Your data is stored in Mumbai, India.
- When AI features are on, only what your iPhone can't handle on its own goes to Anthropic (the maker of Claude): a line it can't read, an Ask question, a name it can't place in a category, or a category name in a file you import. In a shared ledger, an Ask question also carries your partner's first name. Never your totals or your profile.
- You can download all your data, and delete your account and its data, from inside the app at any time.
What we collect and why
| What | Why | Where it's kept |
|---|---|---|
| Your account: email address, and the first name you give or Apple shares | Signing in, and showing your name to a partner in a shared ledger | Supabase, Mumbai |
| Your entries: amounts, names, categories, dates, notes (including the card's name an Apple Pay automation passes), tags, budgets, repeating entries, lists, and settings | Running the app on every iPhone you sign in to | Supabase, Mumbai |
| Bill photos, only if you attach one | Showing it on the entry, to you and anyone who shares that ledger | A private store at Supabase, Mumbai, that only that ledger's members can open |
| Your subscription status | Knowing whether you have Pro | Supabase, Mumbai; RevenueCat and Apple handle the purchase |
| A random account number | Linking your account to your entries and your subscription | Supabase and RevenueCat |
| A notification token, only once you allow notifications | Sending reminders you asked for, budget alerts, and a partner's new entries | Supabase; Apple delivers the notification |
| Optional profile details: occupation, income bracket, goal | Shown to you in Settings. Never used for anything else and never sent to any AI | Supabase, Mumbai |
| A record of each AI request: which feature, its size, its cost to us, whether it worked, and when | Keeping AI use within daily limits and costs in check. The record holds no text from you | Supabase, Mumbai |
The legal basis is that we need this data to provide the app you asked for (GDPR and UK GDPR article 6(1)(b)), and, for AI features, your consent (article 6(1)(a); DPDP section 6), which you can withdraw at any time in Settings. The AI request records are kept for our legitimate interest in keeping costs and misuse in check (article 6(1)(f)).
We don't use your data for advertising, profiling or automated decisions that affect you, and we don't buy data about you from anyone.
What stays on your iPhone
- Voice: speech is turned into text on your iPhone. Audio is never recorded, stored or sent.
- UPI payment screenshots (for ledgers in rupees): read on your iPhone. Only the details you confirm are saved as an entry; the picture is never uploaded. The app looks at a recent screenshot only if you turn that on in Settings, which asks for access to Photos.
- Every figure: totals, Analyze, budgets, and every answer in Ask are worked out on your iPhone from your entries.
- Widgets and Siri read the app's own files on your iPhone. Nothing extra is sent.
- Apple Pay automation: a Shortcuts automation you set up passes the amount, the shop name and the card's name of a tap payment to the app, on your iPhone. They're saved as an entry, with the card's name in its notes, and sync like any other entry. The app never sees card numbers or anything else from Wallet.
- Face ID: your iPhone answers yes or no. The app never sees biometric data.
AI features and Anthropic
TLDR Classic can use Claude, an AI model made by Anthropic, PBC, to help with three things. It asks before the first time, and you can say no or switch it off later in Settings; everything else in the app keeps working.
| Feature | What is sent | Never sent |
|---|---|---|
| Reading a line your iPhone couldn't | The line you typed (or the unreadable part of what you said), your category names, your currency, today's date, your time zone, and your month's start day | Your saved entries, audio, profile details, account number |
| Ask | Your question, your category and tag names, in a shared ledger the name your partner chose (or just "your partner"), your currency, today's date, and your month's start day | Your entries and amounts, profile details, account number |
| Placing a name in a category | Entry names it can't place, up to 20 at a time (from what you just saved, or once from entries saved earlier), or the category names in a file you import, and your category names | Amounts, dates, notes, people, account number |
Anthropic processes this text in the United States and other countries outside India, for that one request. Under its commercial terms it does not use it to train its models. The answer that comes back is structured data (an amount and a name, or a query); the app itself does every calculation.
Who else handles your data
| Who | Why | What |
|---|---|---|
| Supabase (servers in Mumbai, India) | Storage, sign-in, and keeping your iPhones in step | Everything listed under "What we collect" |
| Anthropic | AI features, only when on | The text listed above, per request |
| RevenueCat | Subscriptions | Your random account number and App Store purchase receipts |
| Apple | Sign in with Apple, purchases, notifications, and crash reports from TestFlight and the App Store | Under Apple's own privacy policy |
Each of them processes data only to provide their service to us. We don't sell personal data, share it for advertising, or let anyone track you.
Where your data goes (international transfers)
Your account and entries are stored on servers in Mumbai, India. If you live in the European Union, the United Kingdom or anywhere else outside India, using TLDR Classic means your data is transferred to India. AI requests go to Anthropic, which processes them in the United States and other countries; RevenueCat and Apple process their part under their own terms, also outside your country.
For transfers out of the European Economic Area and the United Kingdom, we rely on the European Commission's standard contractual clauses (with the UK's addendum) in our data processing terms with these providers. Write to hello@tldrmoney.in for a copy of the relevant terms.
A shared ledger
If you share a ledger ("Ours") with a partner, they see every entry in it, who added each one, any bill photos on them, and your first name. Nothing in your own ledger ("Mine") is ever visible to them. If your partner uses Ask in Ours with AI features on, your first name goes to Anthropic with their question, so a question that names you can be understood. Your entries and amounts never go with it. If you allow it, your partner's iPhone can show a notification when you add an entry to Ours, with your first name, the amount and the name of the entry.
How long we keep it
- Your account and entries: until you delete them or your account.
- Deleted entries: kept for 30 days so you can bring them back (Recently deleted), then removed for good.
- Invites to a shared ledger: removed 30 days after they expire.
- AI request records: kept to manage limits and costs. They hold no text from you, only the random account number, which is removed from them when your account is deleted.
- Backups made by our hosting provider are overwritten on its own schedule.
Your rights
Wherever you live, you can do all of the following. Most of it works inside the app, straight away; for the rest, write to hello@tldrmoney.in from the email address on your account (or tell us the name on it if you signed in with a hidden Apple email), and say what you'd like. We may ask you to confirm it's you before we act.
- Get a copy of your data: Settings, Your data, Download raw data. It's free and includes everything the app holds for you, deleted entries included, as a JSON file.
- Correct it: edit any entry or setting in the app.
- Delete it: Settings, Delete account. This deletes your account, your entries in Mine, your settings, your bill photos in Mine and our records of your purchases straight away, and asks RevenueCat to delete its record of you. A shared ledger stays with your partner, with your past entries there shown as "Former member" and any bill photos on them kept. For a Sign in with Apple account, the app also asks Apple to remove TLDR Classic's access. Deleting the account doesn't cancel a subscription; cancel that in your iPhone's Settings. If the app can't delete it, write to hello@tldrmoney.in and we'll delete it within 7 days.
- Withdraw consent for AI features at any time in Settings.
- Object, restrict or port your data, or ask any question, by writing to hello@tldrmoney.in. We answer within 30 days.
- Complain to your data protection authority (in the UK, the Information Commissioner's Office), or in India to the Data Protection Board of India. We'd like the chance to fix things first, at hello@tldrmoney.in.
- Nominate someone to use these rights for you if you can't (DPDP section 14), by writing to us.
If you live in California or another US state with a privacy law
The California Consumer Privacy Act (CCPA) and similar state laws give you the rights to know what personal information we collect and why, to get a copy, to correct it, to delete it, and not to be treated differently for using these rights. The tables above list every category we collect (identifiers such as your email and account number, the entries and photos you record, your subscription status, and records of app activity), where it comes from (you, and Apple for sign-in and purchases), why, and who receives it. We keep each category only as long as "How long we keep it" says.
We don't sell your personal information or share it for cross-context behavioural advertising, and we haven't done so in the past 12 months. We don't use sensitive personal information to infer anything about you. You can use your rights in the app or by writing to hello@tldrmoney.in; someone you authorise can write for you with your signed permission. We answer within 45 days.
Children
TLDR Classic isn't meant for children under 13, or under the age your country sets for agreeing to an app like this yourself where that's higher (up to 16 in parts of the European Union, and 18 in India). We don't knowingly collect children's data. If you think a child has an account, write to us and we'll delete it.
Security
Data travels encrypted (HTTPS). On the server, each row belongs to a ledger, and the database only lets a ledger's members read or change it. Bill photos sit in a private store with the same rule. The app's servers keep their keys out of the app.
Changes
If this policy changes in a way that matters, the app will say so before the change takes effect, and where the law needs your consent again, it will ask. The date at the top shows the latest version; earlier versions are available on request.