What Purser keeps, and why.

Effective 4 October 2026. Purser Money is a private household money app made by Erick Ingleby for the members of one household. It has no customers and no advertisers.

What Purser collects

Bank, card and loan balances and transactions, supplied through a bank aggregation service that each household member connects and authorises themselves.
With Apple's FinanceKit, and only after a household member grants permission on their own iPhone, Apple Card and Apple Cash transactions and balances from that device.
Sign-in identity through Sign in with Apple: a stable identifier and, if the person chooses to share them, a name and email address. These decide only whether a person belongs to the household.
Credit report files a household member chooses to add, read only for scores, factors, inquiries and account lines.

How it is used

Data is used solely to show the household its own finances: balances, spending, recurring payments, upcoming bills, credit health and savings suggestions. Nothing is used for advertising, profiling, scoring, resale or training.

Where it lives

Data is stored in a private cloud account owned by the household, in the United States, encrypted at rest and in transit. A copy is kept on each household member's own device so the app works offline. Apart from the advisor described below, no third party receives the data. The app contains no analytics, advertising or tracking libraries.

FinanceKit data

Apple Card and Apple Cash data read through FinanceKit goes only from the person's iPhone to the household's own private service, and is never shared with anyone else. Access can be withdrawn at any time in Settings on the iPhone, after which Purser stops receiving it and the stored copy can be deleted on request.

Penny, the advisor

When a household member asks Penny a question, the question and a short summary of that household's own figures (balances, spending totals, upcoming bills, rounded to the dollar, with no account numbers) are sent to Anthropic's Claude service to write the answer. Anthropic processes it only to answer that question, under terms that do not allow it to train models on the data. Nothing is sent unless someone asks Penny something.

Money never moves

Purser cannot pay, transfer, or move funds. It reads and advises. Every payment stays in the bank's own app.

Deletion

Any household member can ask for their data to be deleted, and it will be removed from the service and from the devices. Write to erick@ingleby.com.

Changes

This policy changes only when Purser changes what it collects. The effective date above is updated when it does.