How your data is handled

For anyone comparing this to paper before trusting it

We Both runs a household: the money, the shopping list, the chores and the calendar. This page is the plain-language version of what actually happens to your data, not a legal document. The full list, company by company, is on the privacy page.

No bank login, ever

We Both never asks for a bank login, a card number, or any banking credential, and there is no code anywhere in it that could accept one. Every figure in it comes from your house: typed, said out loud, or read off a receipt you chose to photograph or share.

Signing in without a password

You sign in with a link sent to your email, or with Sign in with Apple. There is no password to pick or to leak: the link expires in 15 minutes, and only a hash of it is ever stored, never the link itself.

The lock stays on your phone

Turn on the app lock and it is Face ID, Touch ID, or your passcode, answered by iOS itself: the app is told yes or no and never sees anything biometric.

The assistant is told what it can see, and no more

Before the household assistant answers anything, it says what goes to Anthropic’s Claude, and nothing is sent until you ask it something. Anthropic does not train on it, and nothing about it is sold. Reading a mailbox for receipts is something you turn on yourself, off by default.

Receipt photos don't stick around

A photo of a receipt is deleted automatically 30 days after you attach it. The amount and category already read off it stay on the entry forever: only the picture goes.

Yours to take, yours to delete

Export your entries to a spreadsheet whenever you want one. Deleting your account happens the moment you confirm it in Settings: solo, the whole thing goes with you; shared, your entries stay under the name “Former member” so nobody else’s totals move.

Calendars and mail, only if you connect them

Nothing outside the house connects until you ask it to, and disconnecting a calendar or a mailbox is a tap away in the app. Payments run through Apple, so neither We Both nor its subscription provider ever sees a card number.

What we don't do

No ads, no ad network, no selling anything to anyone. Counting which features get used is anonymous: it carries no name, no email and no figure from your house.

Every claim above is the short version of the full privacy page, which names every company involved and exactly what each one sees. Questions go to rithellyenzo@gmail.com.