← 98 Prism

Privacy policy

Last updated: September 4, 2026

What 98 Prism is

98 Prism is a multi-currency expense and income tracker. You record your own money movements; we store them so you can see them across your devices and share them with workspace members you invite.

What we hold

Your account identity — email address, your name, and a profile picture if you add one. Then everything you record: amounts, currencies, dates, categories, notes and tags, the shop, the invoice number, the location, the name you gave the payment method, and the meaning you assign an entry (an expense, a refund, a reimbursement, and so on). The people, groups, trips and collections you organise entries into. Line items, including model and serial numbers. Warranty details, including retailer, manufacturer and support contacts. And the files you attach.

This describes the kinds of thing we hold, not an exhaustive column list — the app gains fields as it grows. What stays true is the shape of it: it is what you put in, plus what we read off the documents you give us.

Reading your receipts

When you ask 98 Prism to read a receipt, the file is sent to Anthropic's API to be transcribed. What travels is the image or PDF itself, our instructions, and one line naming your account's base currency code. Nothing else goes with it — not your name, not your email, not your other transactions.

What comes back is a set of extracted fields and a full plain-text transcription of every page. Both are stored: on the file's record, and in a cache keyed to your workspace and a fingerprint of the file's exact bytes, so the same document read twice does not become two different answers.

If you choose not to keep the image, the image is not stored — but the transcript and the extracted fields still are. No control deletes them on their own; they go when you delete the workspace holding them, or your account. If a card's last four digits are printed on a receipt, they may appear in that transcript. Full card numbers, security codes, PINs and bank account numbers are never asked for and never returned.

Anthropic's own handling of what it receives is governed by their commercial terms, not by this app.

What we never ask for

98 Prism does not connect to your bank, your cards, or any financial institution. We never ask for account numbers, statements, or banking credentials. There is no investment or asset tracking. Every number in the app either came from you, or was read off a document you handed us — and you can see and change any of it.

Where your data lives

Records and account details are stored with Supabase — a managed PostgreSQL database and authentication service. Attached files are stored in Supabase Storage. Your browser talks to Supabase directly to sign you in and to upload files, so Supabase sees your device and network address as well as the data itself. Everything travels over HTTPS.

98 Prism never publishes a public link to one of your files. A file is opened through a signed link that expires about a minute after it is created.

Exchange rates

Currency conversions use indicative reference rates (European Central Bank data via the Frankfurter service), fetched by 98 Prism's servers on a schedule. Only currency codes are ever sent — no amounts, no entries, nothing about you — and your device never contacts the rate provider. Rates are indicative, never a bank or transaction rate.

Invitations

When you invite someone to a workspace, their email address, the workspace name, your name (or your email address, if you haven't set a name) and a join link are sent through Resend, our email provider, so the invitation can reach them.

Who can see what

Anyone you add to a workspace sees everything in it — every transaction, every attached receipt, every note, every serial number. Roles govern what a person can change, not what they can see. Adding someone to a workspace is sharing that workspace's full paper trail with them, so add deliberately.

What stays on your device

An entry you start but don't finish is kept in your browser's local storage for up to seven days so you can come back to it. Your display preferences — theme, date format, whether to show decimals, calendar settings — are stored on the device too, and do not follow you to another one.

What we don't do

We don't sell your data or share it with advertisers. 98 Prism does not train AI models on your data. There is no analytics provider, no ad tracking and no tag manager in the app — the only cookies set are the ones that keep you signed in.

Deleting your data

You can delete any transaction, collection, trip or workspace inside the app at any time. Deleting a file you attached removes the stored file, and so does deleting the transaction or the workspace it belongs to.

Two things do not go away on their own today, and we would rather say so than imply otherwise. Receipt transcripts and extracted fields have no deletion control of their own — they go when the workspace or the account holding them goes, and not before. And when a member is removed from a workspace, their membership record is retained rather than erased, so the entries they recorded stay attributed and that workspace's history stays complete.

Closing your whole account. Settings → Your data → Delete account, or go straight to 98prism.com/delete-account without opening the app. You will be shown exactly what it destroys — every workspace you own by name, how many entries each holds, and who else loses one that is shared — and asked for your password and your email address before anything happens. It happens immediately and there is no undo. You can download a copy of everything first, and you are never required to.

What survives, deliberately: entries you recorded in someone else's workspace stay in that workspace, because deleting them would destroy another household's record of purchases you entered for them. Your name stays on those entries — it is what makes that record readable, and an entry whose recorder has no name is a hole in it. Your profile photo, your email address and every way to sign in are deleted.

Receipt images go with everything else, with two exceptions we would rather name than imply away. Files attached to entries you deleted before September 2026 were left in storage at the time — that is the defect described above, now fixed going forward, but we no longer hold a record of which files those were, so account deletion cannot find them either. And if storage is unreachable during the deletion itself, a few of the rest can survive. In both cases what remains is data nothing points at any more.

You can still email us at the address below instead, and we will do it by hand.

Getting your data out

Settings → Your data downloads a copy of your account: every workspace you own as JSON and per-workspace CSV, including the transcripts and fields our reader took from your receipts, plus the receipt files themselves fetched to your device one by one. In someone else's workspace, entries attributed to you are included as your entries alone — never the rest of their workspace, and only while you are still a member there. Reports can separately export a CSV of whatever they are currently showing.

Contact

Questions about this policy, requests about your data, and account closures go to admin@98prism.com.