Effective date: September 4, 2026
Contact: telleratme@gmail.com
bear ("the App," "we," "us"), operated by TELLER LLC, is an AI-powered money-management and
document application. This policy explains what we collect, why, and the
control you have. The short version: **your data powers *your* features. We
do not sell it, and we do not show you ads built from it.**
Account information. Email address, name, and a securely hashed password
(we never store your actual password).
Financial information you provide or connect.
institution through Plaid (see §4). We never see or store your bank
username or password — linking happens directly with Plaid.
you enter yourself or through the AI assistant.
Documents and images. Documents, receipts, and photos you scan or
upload, including text we extract from them (OCR) so you can search them,
and information the AI reads from them (amounts, due dates, companies) with
your review.
Messages to the AI assistant. What you type into the assistant is
processed to carry out your instructions and retained as your chat history.
Household and business data. Family member names and allowances, and
business profiles you create.
Usage and device data. Basic technical logs (timestamps, error reports)
needed to run and debug the service. We do not use third-party advertising
or tracking SDKs.
and savings, generating insights and forecasts, scanning and organizing
documents, sending documents you ask us to send, and executing the
instructions you give the AI assistant.
**We do not sell your personal information. We do not use your private
financial data to build advertising profiles.**
AI features — the assistant, document reading, and receipt scanning — are
powered by Claude, an AI model made by Anthropic, PBC (San
Francisco, USA). Anthropic is a third-party AI service. This section says
exactly what goes to Anthropic, when, and on what terms.
We ask first. Before the App sends anything to Anthropic, it shows you
an in-app permission screen that names Anthropic, lists the data below, and
asks you to allow it. Nothing is sent until you tap Allow. You can withdraw
that permission at any time in Profile → AI & your data; the AI features
then stop, and the rest of the App keeps working.
What is sent, by feature:
conversation, and a summary of your money so answers fit your situation:
account names and balances, recent transactions, bills, subscriptions,
budgets, goals, and the names of documents you have filed.
or upload, so bear can name, file, and pull dates and amounts from them.
items, and totals.
the name of a merchant you ask bear to research.
How it is collected. Through the App, when you use one of those
features: what you type or say, what you photograph or upload, and the
financial data you linked or entered (§1).
What Anthropic does with it. Anthropic processes the data only to
generate the response for you. Under Anthropic's commercial terms, it does
not use your data to train its models, and it protects the data with
safeguards equivalent to ours (encryption in transit and at rest, access
controls, and confidentiality obligations). See anthropic.com/legal for
Anthropic's commercial terms and privacy policy.
What we do not send. Your bank login (we never have it), your bear
password, your payment card details, and documents in your Emergency Vault
are never sent to Anthropic.
AI outputs can be wrong — the App shows you what it saved and where, and
asks before destructive or outward-facing actions (sending, signing,
deleting).
Only as needed to run the App:
(see plaid.com/legal for Plaid's end-user privacy policy)
milestones (first open, account created, subscription started) so we can
tell whether our advertising works. It receives a device-level analytics
identifier and coarse device information, never your name, email, bank
data, or document contents. It is not used to track you across other
companies' apps or websites, and we do not use it for ad personalization.
message and attachment pass through the sending service
Each provider is bound to use data only to provide their service to us. We
may also disclose information if required by law, or as part of a merger or
acquisition (in which case this policy continues to apply).
Documents can contain government IDs, account numbers, tax and medical
information. Extra protections: PIN-locked areas (Timeline, Emergency
Vault), optional password-protected PDF exports (AES-256), and the App will
not send or share such documents without your explicit confirmation.
Data is encrypted in transit (TLS) and stored on access-controlled servers.
Passwords are hashed (PBKDF2); session tokens expire; every data operation
is checked against your account ownership. Files you save to bear Files
are stored on your device and are under your device's protections.
No system is perfectly secure. If a breach affects your data, we will notify
you as required by law.
AI). To delete your entire account and its data, contact us at the email
above; we will complete the deletion within 30 days except records we must
retain by law.
your data; nothing further is sent to Anthropic.
entirely.
additional rights (portability, objection, non-discrimination). Contact us
to exercise them.
We keep your data while your account is active. Demo accounts and their data
may be purged periodically. Deleted items are removed from active systems
promptly and from backups on a rolling basis.
bear is not directed to children under 18, and we do not knowingly
collect their data. Family features let an adult record household members;
that data belongs to the adult's account.
We'll post changes here and update the effective date; material changes will
be announced in the App.