Legal

Bolsaro · Last updated: September 15, 2026

Privacy

Bolsaro is an app for recording and organizing your personal expenses. We store the minimum needed for it to work:

Your email address and your name, which we receive when you sign in with Google or Apple. We never see your password.
The expenses you record: amount, currency, merchant, date and category.
The receipt emails you forward to us, if you turn on automatic forwarding: we store who sent them, the subject and the content, because that is where the expense comes from.
The photo or screenshot you scan: it is sent to Google (Gemini) to read the amount and the merchant, and we do not store it: it exists only for the length of the scan.
Your preferences: budget period, main currency and name.
The answers you give during setup, before you create an account: what you want to get out of Bolsaro, how you pay and how often you spend. They ride on the anonymous profile our analytics tool keeps for the device, and are attached to your account when you sign in.
How you use the app: which screens you open, session recordings with text and images masked, and error reports when something breaks.
If you turn notifications on, your phone's notification identifier.

We use that data to provide the service, to support you and to understand what works in the app. We do not sell it and we do not give it to advertisers. The analytics do not carry your expenses. Session recordings show the app as you see it, but mask images, the fields where you type your name, email or password, and every screen with your expenses on it: they show where you got stuck, not what you spent or what on. If you arrived from an ad, on Android we tell Meta that the install or the subscription came from it, along with the phone's advertising identifier (which you can reset or limit in Android settings); on iPhone we send Meta nothing, and in no case does Meta receive your expenses. This website measures visits with the same tool.

We rely on providers that host and operate the service on our behalf: Clerk (sign-in), Neon (database), Vercel (servers), Amazon Web Services (receives the emails you forward), Google (Gemini, which reads the receipt and extracts the expense), RevenueCat (subscriptions), Expo (push notifications) and PostHog (analytics, session recordings and errors). They work under contract and with no permission to use your data for anything else. The exception is Meta, which on Android only receives the install or subscription signal and the advertising identifier, and also uses them to measure and improve its own ads. Their servers are located in the United States. We may also disclose information where a competent authority legally requires it.

Your data is stored and processed outside your country: every provider listed above runs servers in the United States, and your data travels to them encrypted each time you use the app. It is used only for the purposes listed (sign-in, database, servers, reading receipts, subscriptions, notifications and analytics), under contract, and kept as described below. If you do not want your data to leave your country, do not use the app, or delete your account, which erases your data from our systems.

Clerk (clerk.com), United States: sign-in. Your name, your email and your Google or Apple account details.
Neon (neon.tech), United States: database. All of your account data and expenses.
Vercel (vercel.com), United States: servers. The requests the app sends while you use it.
Amazon Web Services (aws.amazon.com), United States: receives the emails you forward. The content of those emails.
Google (ai.google.dev), United States: Gemini reads your emails and receipts to extract the expense. The content of the email or image.
RevenueCat (revenuecat.com), United States: subscriptions. Your subscription status and an app identifier.
Expo (expo.dev), United States: push notifications. Your phone’s notification identifier and the text of the notification.
PostHog (posthog.com), United States: analytics, session recordings and errors. How you use the app, device details and recordings with your data masked.
Meta (meta.com), United States: Android only, and only if you arrived from an ad. The install or subscription event and the phone’s advertising identifier.

The app automatically records usage analytics, errors and session recordings, with your data masked as described above. The app has no setting to turn this off. If you want the analytics and recordings linked to your account deleted, write to support@bolsaro.app; if you delete your account, we stop collecting them.

Traffic is encrypted in transit and the database is encrypted at rest. We keep your data for as long as your account exists; when you delete the account, we delete the data.

Security measures: encrypted connections, an encrypted database, access to personal data limited to the person who operates Bolsaro and to providers bound by contract. The United States has no national data protection law equivalent to Japan’s or South Korea’s, which is why those contracts require each provider to protect your data and use it only for the service. When you delete your account, your data is permanently erased from the database at that moment, and backups that might still contain it are overwritten within 30 days at the latest.

You have the right to access, rectify, cancel and object to the processing of your data (Peruvian Law No. 29733). Write to support@bolsaro.app from the address you signed up with. Bolsaro is not directed to people under 18.

Depending on where you live, local law may give you more rights: for example, in the European Union, Brazil, Japan or South Korea you can ask for a copy of your data, correct it, delete it, restrict its processing or withdraw your consent, and file a complaint with your country’s data protection authority. We honor these rights for everyone: write to support@bolsaro.app and we answer within 30 days at the latest. That address is also our privacy contact.

If you are not satisfied with our answer, you can turn to the authority in your country: in Japan, the Personal Information Protection Commission (PPC); in South Korea, the Personal Information Protection Commission (PIPC) or KISA’s privacy complaints center (phone 118); in the European Union, your country’s data protection authority.

Bolsaro is operated by an independent developer. Their name and address are provided without delay to anyone who asks by writing to support@bolsaro.app, which is also our privacy contact (Bolsaro support team).

Terms of service

By using Bolsaro you agree to the following.

What Bolsaro is. A tool for recording your expenses. It is not a bank, it does not connect to your bank accounts, it does not ask for your banking credentials, it does not move money and it does not provide financial or tax advice. Its summaries are informational: your receipts and your bank are always the authoritative source.

Your account. You need a Google or Apple account, you must be 18 or older, and the information you record must be your own. Bolsaro is a paid app: using it requires an active Bolsaro Pro subscription, which starts with a free trial. You are responsible for what happens in your account.

Use. Do not use Bolsaro for anything illegal, to access other people’s data, or to interfere with the service. We may close accounts that break these rules.

Your content is yours. We only store and process it in order to show it back to you inside the app.

Warranties. The service is provided “as is”, with no warranty that it will be free of errors or interruptions. To the fullest extent permitted by law, we are not liable for indirect damages, loss of data, or decisions you make based on the app.

Subscription and free trial. Bolsaro Pro is required to use the app and is billed by the store (App Store or Google Play) at the price shown in your own currency. Every plan starts with a free trial, and its length is shown on the purchase screen before you confirm. We send you a reminder one day before the trial ends. If you do not cancel, it turns into a paid subscription automatically and renews at the price shown until you cancel. You can cancel at any time from your store settings, at least 24 hours before the period ends; cancellation takes effect at the end of the period you already paid for. Refunds are handled by the store, not by us.

Changes. If the service, these terms or this policy change, we post the new date here and let you know when the change is significant.

Governing law. The laws of the Republic of Peru; the courts of Cercado de Lima.

Language. This document was written in Spanish. Translations are provided for your convenience; if any of them differs, the Spanish version prevails.

Deleting your account

From the app: Account → Delete account. It is immediate, you do not need to request it or wait for approval, and it cannot be undone. All your expenses, your categories, your preferences and your sign-in account are deleted.

If you no longer have the app installed, write to support@bolsaro.app from the same address you signed in with, with the subject “Delete my account”. We do it within 30 days at the latest and confirm it to you. Any backups that might still contain your data are overwritten within that same period.

Support

Something not working, a question or an idea? Write to support@bolsaro.app and we will get back to you, usually within 48 business hours. Tell us which device you use, what you expected to happen and what happened instead.