Privacy policy

Airtail is run by Wondertabs Pte. Ltd. (“we”). This policy covers the Airtail website at airtail.vercel.app and the Airtail iOS app. If you have a question or a request, email hello@wondertabs.com.

What we collect

• Your account: your name, email address, profile photo if your Google account has one, and the account ID that Apple, Google or Microsoft gives us when you sign in.
• Mailbox access: for each inbox you connect, the access tokens Google or Microsoft issue when you approve Airtail, or the Yahoo app password you create for it.
• Transactions: for each receipt we find, the merchant, amount, currency, date, category, the service it went through (for example Uber Eats), and the email's subject line and sender. Also any edits you make, and the rows of any bank file you import.
• Settings: your preferred currency, budgets and notification choices.

How we use it

We search your connected inboxes for receipt-like emails: orders, bills, invoices and payment alerts. Everything else is left alone. We use your data only to run Airtail for you: to show your spending, flag subscriptions and unusual charges, and email you when a sync finishes and once a month with a summary (you can turn the summary off in Settings). These emails are sent from your own mailbox to you.

AI processing. To read a receipt, we send the matching email (its subject, sender and up to 3,000 characters of its text) to our AI providers, Anthropic and Google, with Groq and OpenRouter as backups, which return the merchant, amount, date and category. We store only those extracted details, not the email itself or its attachments. For spending summaries, insights and search, they get the relevant merchants, amounts, dates and categories.

Airtail's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes it

We share data only with the services that run Airtail, and only what each one needs:

• Anthropic: AI processing of receipts and spending summaries.
• Google: Gmail access, Google sign-in, and AI processing of receipts and spending summaries.
• Groq and OpenRouter: backup AI processing of receipts and spending summaries.
• Google Firebase: Google sign-in in the iOS app.
• Apple: Sign in with Apple.
• Microsoft: Outlook access and Microsoft sign-in.
• Yahoo: Yahoo Mail access.
• Vercel: hosts the website and API. Its Web Analytics and Speed Insights count page views and load times on the website without cookies.
• MongoDB Atlas: stores your account, connections and transactions.
• Supabase: handles sign-in on the website.

If you choose to connect another app to Airtail, such as Ledgr, it can read your receipt details until you disconnect it.

What we don't do

We don't sell your data. We don't show ads, and we don't use your data for advertising or track you across other apps and websites. We never ask for your bank password.

How long we keep it

We keep your account and transactions until you delete your account. Sync logs, which record what was found in each email for troubleshooting, are deleted automatically after 30 days.

Your choices

• Delete your account: in the iOS app, go to Settings > Delete Account. On the website, go to Settings > Danger zone > Delete account. This permanently deletes your account, transactions, connected inboxes and their tokens.
• Revoke mailbox access: disconnect an inbox in Settings on the website, which deletes its stored tokens or app password. You can also revoke Airtail from your Google account or Microsoft account, or delete the app password in your Yahoo account security settings.
• Get or fix your data: export your transactions as CSV or PDF on the website, and edit or delete any transaction.

For anything else, including a copy of your data, email hello@wondertabs.com.

Changes

If we change this policy we'll update the date at the top. If a change affects how we use your data, we'll tell you in the app or by email first.