Tresi · privacy
Privacy policy
Effective 8 August 2026 · Last updated 8 August 2026
This is the whole of it, in plain language. Tresi is a personal spend tracker: it connects to your bank accounts through Plaid, sorts your transactions into categories, matches paper receipts to the charges that paid for them, and keeps track of budgets you set.
The short version. We collect your email, your transactions, and the receipt details you confirm. Your receipt photos never leave your device. Nothing is sent to a third party AI provider. Nothing is sold, ever. Deleting your account really does delete it.
Who we are
Tresi is operated by Rafael Ortiz, an individual doing business as Tresi in the United States ("Tresi", "we", "us"). We are the data controller for the information described below.
Contact for anything on this page, including privacy requests: rortiz@tresi.app.
Tresi is read-only. It cannot move money, freeze a card, or take any action on your accounts. It can only observe and organise.
What we collect, and why
| Data | Where it comes from | Why we have it |
|---|---|---|
| Email address | You, at sign in | Identifies your account. Signing in is a one time emailed code, so we never ask for or store a password. |
| Transactions, balances, account and institution names | Plaid, once you authorise it | The core of the product: your ledger, your balances, your budgets. |
| Bank access token | Plaid, after you connect a bank | Lets us keep pulling your transactions without asking you to reauthenticate constantly. Stored encrypted, and never sent anywhere except back to Plaid. |
| Receipt details: merchant, total, tax, date, line items | Read from a photo on your device, and only after you confirm it | Matches a receipt to the transaction that paid for it. |
| Categories, budgets, funds and rules you create | You | The features you are using them for. |
| Device identifier and device name | Your device, at sign in | Lets you see your signed in devices and sign any one of them out individually. |
| Subscription status | Apple, Google, or our payment processor | Tells us whether your subscription is active. We never receive your card number. |
What we deliberately do not collect
The photograph of your receipt never leaves your device. Tresi reads the photo where you took it and uploads only what you confirm: merchant, amounts, date, line items, and a content hash of the image used to spot duplicates. There is no server side photo storage. That hash is the only trace of the picture that ever reaches us, and it cannot be turned back into an image.
We do not collect your full card or account number. Plaid gives us at most the last four digits, and only when your bank provides them. We do not collect your bank username or password at any point, because you type those on Plaid's own page and not into Tresi. We do not embed third party advertising or analytics SDKs, and there is no cross app or cross site tracking anywhere in the product.
How your data is used
- Categorisation runs on infrastructure we control, using models we host ourselves. No transaction is ever sent to a third party AI provider. The cascade is: your own rules, your own past corrections, cross user consensus (only once at least five unrelated users independently agree about a merchant, so no single user's data is inferable from it), Plaid's own free classification, and a small locally hosted model as a last resort before Tresi simply asks you.
- Receipt matching compares the receipt fields you confirmed against your recent transactions on our servers, using plain scoring. Not a model, and not a third party.
- Budget evaluation and alerts run against your transaction data to tell you where you stand. Alerts are delivered inside the app.
- Service email such as your sign in code and account notices. We do not send marketing email.
We do not sell your data. We do not share it with data brokers. We do not use it for advertising, and we do not use your financial data to train models that serve anyone other than you.
Legal bases, if you are in the UK or EEA
We process your data to perform the contract you entered into when you created an account (providing the service), on the basis of your consent where you gave it (connecting a bank through Plaid, using your camera for receipts), and on the basis of our legitimate interest in keeping the service secure and working.
Who we share data with
- Plaid Inc., to link your bank and retrieve transactions and balances on your behalf. Plaid's own policy governs your bank credentials, which we never see, because authentication happens on Plaid's hosted page rather than inside the app. See Plaid's End User Privacy Policy.
- Our infrastructure providers, meaning application and database hosting, who store data on our behalf under contract and may not use it for their own purposes.
- App stores and payment processors, who handle subscription billing and tell us only whether your subscription is active.
- Law enforcement or regulators, only where we are legally compelled, and only to the extent we are compelled.
We do not otherwise share your financial data with any third party. If Tresi is ever sold or transferred, you will be told before your data moves, and this policy travels with it.
Security
- Your Plaid access token is envelope encrypted at rest. A unique key encrypts each connection's token, and that key is itself encrypted under a master key that never touches the database. A copy of the database alone is not enough to use your bank connection.
- All traffic between the app and our servers is encrypted in transit with TLS.
- We verify the cryptographic signature of every message Plaid sends us before acting on it.
- Sign in is a one time emailed code, so there is no password of yours for us to leak.
No system is perfectly secure. If there is ever a breach involving your data, we will notify you and the relevant authorities as required by law. More detail is on the security page.
Your controls and rights
- Correct anything. Categories, budgets, funds and rules are yours to edit or delete at any time, and a correction you make is never silently overridden by automation.
- Disconnect a bank. Remove a connected institution at any time from inside the app. This revokes our access to that bank through Plaid immediately.
- Delete your account. Available in the app under Settings, and described step by step on the account deletion page. Deleting your account ends every session on every device, stops all syncing, and then permanently and irreversibly deletes your transactions, receipt records, budgets, funds, rules and connected bank records, and revokes our Plaid access. There is no recovery window. We built it that way on purpose, so that "delete my account" means what it says.
- Get a copy of your data. Email rortiz@tresi.app from your account address and we will send you a machine readable export of everything we hold about you within 30 days, at no charge.
- Ask us anything else. If you are covered by the GDPR, the UK GDPR, the CCPA or a similar law, you have rights of access, correction, deletion, portability, and objection to processing, and the right to complain to your data protection authority. Use the same address and we will not make you jump through hoops. We will never charge you or degrade the service for exercising a right.
For California residents
We do not and will not sell your personal information, and we do not share it for cross context behavioural advertising. We have not done so in the preceding twelve months. The categories we collect, and the purposes for each, are the table above.
Data retention
We keep your data for as long as your account exists. Once you delete your account, the purge described above removes it permanently. We do not keep a copy beyond our routine encrypted infrastructure backups, which age out on their own within 30 days.
Where your data lives
Our servers are in the United States. If you use Tresi from outside the United States, your data is transferred there and handled under this policy.
Children
Tresi is not directed at anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
We will update the date at the top of this page whenever this policy changes, and for anything material we will tell you inside the app before it takes effect.
Contact
Questions about this policy, or about your data: rortiz@tresi.app. A person reads that address.