Security & your data
Pursly is a money app that asks to read your email. That deserves a straight answer rather than a badge, so here is what it can see, what it keeps, and what it never touches.
What Pursly never has
Your bank login
Pursly has no bank connection at all — no Plaid, no open-banking aggregator, nothing. There is no screen that asks for bank credentials because there is no code that could use them.
Your card numbers
Purchases go through the App Store. Pursly never sees a card number, and payment is Apple's problem rather than ours.
Your email, stored
Gmail sync keeps a sync timestamp and a position marker so it knows where it left off. Message bodies are read, parsed, and dropped — what gets saved is the transaction, not the email.
What connecting Gmail actually grants
Pursly requests a single Google scope: gmail.readonly. It can read mail. It cannot send, delete, or modify anything, and Google will not issue it those abilities without asking you again.
Receipts are matched locally first with ordinary pattern matching, which costs nothing and never leaves the server. Only when that fails does up to 4,000 characters of the message body go to OpenAI to be read — enough to find a total and a merchant, capped so a long email cannot send more.
Disconnecting revokes Pursly's access at Google and unlinks the account. Transactions already imported stay in your history; disconnecting stops future imports rather than erasing past ones.
What the AI assistant sees
The assistant runs on OpenAI. To answer a question about your spending it has to be given the spending it is being asked about, so the relevant figures are sent with your question.
It is not trained on your data, and it does not act on its own — it proposes, you confirm.
If you would rather no financial data ever reached a model, do not connect Gmail and do not use the assistant. Everything else in Pursly works without either.
How things are stored
Passwords are hashed with scrypt and never stored in a form anyone can read back, including us.
Receipt images and attachments are not public files. Each one is served through a short-lived signed link generated when you open it, so a URL copied out of a log or a screenshot stops working shortly after.
Everything travels over HTTPS, and the database sits behind the API rather than being reachable from the internet.
What a shared space exposes
A space is separate from your personal finances. Inviting someone shares that space — never your personal transactions, budgets, or goals.
Be aware that permissions inside a space are currently flat: family, friend and member are labels, and all three can read and edit everything in that space. None of them can remove members or delete the space itself. If you need someone to only look and not touch, that does not exist yet — so only invite people you would hand the whole space to.
Signing in
You can sign in with a password, with Apple, or with a one-time code sent to your email — no password to reuse or leak.
Resetting a password signs out every existing session, because a reset is exactly the move someone would make after taking over an account.
Getting your data out, or deleting it
You can export your transactions as a PDF from the app at any time.
Deleting your account removes your data. Email support@pursly.app and it will be done — there is no retention period we are quietly holding you to.
Something here unclear, or missing? Ask me directly. The Privacy Policy is the formal version of this page.