Privacy Policy

Last updated: September 29, 2026

Introduction

Neeuh, LLC ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our expense tracking and tax planning application and services.

Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Name, email address, and contact information
  • Business information and tax identification numbers
  • Account credentials and authentication information
  • Payment and billing information (card details are entered directly into Stripe and are never stored by Neeuh)
  • Records of your agreement to our Terms of Service and this Privacy Policy
  • Receipts, documents, and photos you upload or forward to your Neeuh receipt email address, and a company logo if you add one
  • Messages you send to our support team

Financial Information

To provide our expense tracking and tax services, we collect:

  • Transaction data (income, expenses, receipts)
  • Bank and card account details and transaction history, received from Plaid
  • Tax-related documents and calculations
  • Mileage and business travel records, including trip locations (see Location and Mileage Tracking below)

Usage Information

We automatically collect certain information about your use of our services:

  • Device information and operating system
  • IP address and approximate location derived from it
  • App usage patterns and feature interactions
  • Error logs and performance data

How we collect this, and the providers that help us, are described under Analytics and Diagnostics below.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our expense tracking services
  • Process transactions and generate financial reports
  • Calculate tax estimates and prepare tax documents
  • Categorize and search your transactions and read your receipts, using the AI features described below
  • Provide customer support and respond to your requests
  • Send important service notifications and updates
  • Detect, prevent, and address fraud or security issues
  • Comply with legal obligations and tax reporting requirements

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

  • With your explicit consent
  • With trusted service providers who assist in our operations (under strict confidentiality agreements)
  • To comply with legal obligations, court orders, or government requests
  • To protect our rights, property, or safety, or that of our users
  • In connection with a business transfer, merger, or acquisition

No advertising and no tracking across apps. Neeuh does not show ads, does not use advertising or data-broker SDKs, does not share your information with advertisers or data brokers, and does not track you across other companies' apps or websites.

Service Providers We Use

We rely on the following companies to run Neeuh. Each receives only the information it needs to perform its service for us:

  • Plaid — connects your bank and card accounts and provides account details and transaction history (see How the Plaid connection works below).
  • Stripe — processes subscription payments. When you subscribe on app.neeuh.com, your card details are entered into Stripe's secure payment fields and go directly to Stripe; Neeuh never receives or stores your full card number.
  • Our AI provider, currently OpenAI — powers transaction categorization and search, receipt and document reading, and the AI assistant (see AI Features below).
  • Google Maps Platform — calculates driving routes and distances for mileage trips, and suggests addresses as you type your business address.
  • PostHog — product analytics (see Analytics and Diagnostics below).
  • Sentry — crash reporting and error diagnostics (see Analytics and Diagnostics below).
  • Postmark — sends account and service emails, such as verification codes, password resets, and notifications.
  • Cloudflare — hosts our website and web app, stores the receipts, documents, logos, and reports you upload or generate, receives receipts you forward to your Neeuh receipt email address, and, where enabled, provides bot protection (Turnstile) on sign-up and other forms.
  • Fly.io — hosts the Neeuh application servers.
  • PlanetScale — hosts the Neeuh database.

These providers process information on our behalf and under their own security practices, and some, such as Plaid and Stripe, also have their own privacy policies that apply to you directly. We may change providers over time, including our AI provider, and will update this list and the "Last updated" date above when we do.

How the Plaid connection works

When you link a bank account, you sign in to your bank inside Plaid's interface, not ours. Your online banking username, password, and any one-time codes are handled by Plaid and are never sent to, seen by, or stored by Neeuh. Plaid returns an access credential tied to that connection, which we store encrypted, and we use it to retrieve the account and transaction information you have chosen to share — account names, balances, and transaction history.

Account and routing numbers. When you connect a bank account, we request Plaid's Auth product alongside transaction data. Auth permits access to the account and routing numbers of the accounts you connect, and your bank or Plaid may describe the connection that way when you approve it. Neeuh stores only the last few digits of each account number, to help you tell your accounts apart; we do not currently retrieve or store full account or routing numbers, and we cannot move money in or out of your accounts.

Plaid's handling of your information is governed by Plaid's end user privacy policy. You can disconnect a bank at any time from your account settings, which revokes our access and deletes the stored credential.

Location and Mileage Tracking

The Neeuh mobile app can record a drive automatically so that the miles can be claimed as a business deduction. Because that is the only thing we use location for, we have kept it narrow:

  • Only while a trip is running. We collect location points after you start a trip and stop collecting when you end it. We do not track your location in the background at other times, and we do not build a history of where you go.
  • Background collection, if you allow it. A drive would otherwise stop recording the moment you locked your phone, so we ask for background location permission. If you decline, trip tracking still works while the app is open. While a trip is recording, your device shows a persistent notification (Android) or the system location indicator (iOS).
  • What we do with it. Location points are used to draw the route and compute the distance for that trip. They are not used for advertising, profiling, or any purpose unrelated to your mileage records, and they are never sold or shared for marketing.
  • Google Maps. When you end a trip, the app sends the trip's start and end coordinates from your device to Google Maps Platform to calculate the driving route and distance, and saves that route with the trip. Google's handling of that request is governed by the Google Privacy Policy.
  • The web app does not collect location. Trip tracking runs only on the mobile apps.
  • How to turn it off. Revoke the location permission in your device settings at any time, or simply do not start trips — you can always enter mileage manually instead. Deleting a trip deletes its route.

Camera, Photos, and Face ID

  • Camera and photo library. If you allow it, the mobile app uses your camera or photo library only when you choose to capture or attach a receipt or document, or to add a company logo. We receive only the images you select. You can revoke these permissions in your device settings at any time.
  • Face ID and biometrics. If you turn on biometric unlock, the check is performed entirely by your device's operating system. Neeuh only learns whether the check succeeded; we never receive, collect, or store your face data or fingerprints.

AI Features

Neeuh uses a third-party artificial intelligence provider to do some of its core work. We currently use OpenAI as that provider. To make these features work, we send our AI provider the following information:

  • Transactions. The name or description, notes, amount, and date of your transactions — including transactions imported from your bank — to suggest categories and to power transaction search.
  • Receipts and documents. The images and files you upload or forward, so that details such as the merchant, date, and amount can be read from them.
  • Imported files. Descriptions and amounts from spreadsheet (CSV) files you import, to categorize them.
  • The AI assistant. Where the in-app assistant is available and you use it, your messages and the financial information needed to answer them, such as summaries of your income, expenses, and tax estimates.

We do not send our AI provider your password or your bank login credentials.

This processing is part of the Service. These features are built into how Neeuh records, categorizes, and organizes your financial information; they are not an optional extra layered on top of it. When you accept our Terms of Service and this Privacy Policy, you agree to the processing described in this section. We do not ask for it as a separate permission, so there is no separate AI consent for you to give or withdraw. Where the GDPR or a comparable law applies, we rely on the performance of our contract with you for this processing, not on your consent.

What you can and cannot avoid. We would rather be plain about this than imply a choice that does not exist:

  • Transaction text cannot be excluded. Every transaction in your account is sent to our AI provider to be turned into the numeric representation that powers categorization and search. This happens when the transaction is created and again whenever its name, notes, amount, or date changes. It applies to transactions you enter yourself and to transactions imported automatically from your bank through Plaid, and there is no setting in Neeuh that turns it off. If you do not want your transaction information processed this way, the only way to avoid it is not to use Neeuh; if you already have an account, you can delete it at any time as described in Delete your account.
  • Receipts and documents are sent only when you provide them. Images and files go to our AI provider to be read when you upload them in the app or forward them to your Neeuh receipt email address. If you never upload or forward one, none is sent — but the transactions you enter by hand instead are still processed as described above.
  • Spreadsheet imports are sent only when you import. Descriptions and amounts go to our AI provider when you import a CSV file. If you do not import files, none is sent — and, again, the resulting transactions are still processed as described above.
  • The assistant sends only what you ask it. Your messages and the financial summaries needed to answer them are sent only when you use the in-app assistant. If you never open it, nothing is sent from it.

If you have questions about this processing, contact us at privacy@neeuh.com.

How our AI provider handles it. We access our AI provider through its API platform. According to OpenAI's published data usage policies for its API, OpenAI does not use data submitted through the API to train its models unless the customer chooses to opt in, and Neeuh has not opted in. OpenAI may retain API data for a limited period, for example to monitor for abuse, as described in those policies.

Our AI provider may change. OpenAI is the provider we use today, not a permanent commitment; we may replace it or add another provider as the Service develops. As stated under Service Providers We Use above, we will update this policy and the "Last updated" date when our providers change, and the description of what we send and do not send applies to whichever provider we use.

AI can be wrong. Suggested categories, information read from receipts, and assistant answers may be inaccurate or incomplete. Review them before relying on them.

Analytics and Diagnostics

  • Product analytics (PostHog). We record how the website and app are used — for example, which screens are viewed and which features are used — to understand what works and improve Neeuh. Once you sign in, these events are linked to your account ID and email address. On neeuh.com and app.neeuh.com, PostHog uses a first-party cookie to recognize your browser between visits. In the Neeuh app, PostHog also records sessions so we can see where people get stuck. These recordings mask all on-screen text, everything you type, and images, so they show layout, taps and navigation but not your financial details. Sessions on neeuh.com are not recorded.
  • Crash and error reports (Sentry). When something goes wrong, we collect diagnostic information such as the error, device and operating system details, app version, and the steps that led to it, so we can fix it. To help us understand a problem, Sentry may also capture a replay of a small sample of app sessions and of sessions in which an error occurs. These replays are configured to mask on-screen text and images and to hide what you type, so your financial details are not visible in them.
  • Not for advertising. Analytics and diagnostic data are used only to operate, secure, and improve Neeuh. They are not used for advertising and are not shared with advertisers or data brokers.

Data Security

We implement industry-standard security measures to protect your information:

  • Encryption of data in transit using industry-standard TLS
  • Encryption at rest for sensitive stored data, including bank connection credentials
  • Regular security review and vulnerability assessment
  • Two-factor authentication and passkey options
  • Limited access controls and employee training

To be clear about what this does and does not mean: Neeuh is not an end-to-end encrypted service. Our systems necessarily process your transaction data in readable form in order to categorize it, calculate tax estimates, and build your reports. Access by our personnel is restricted to what is needed to operate the Service and support you.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access - Request copies of your personal data
  • Correction - Request correction of inaccurate or incomplete data
  • Deletion - Delete your account and your data at any time from your account settings, or ask us to do it (see Data Retention below and Delete your account)
  • Portability - Request transfer of your data to another service
  • Opt-out - Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@neeuh.com.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the rights described above — to know, access, correct, delete, and port your personal information — along with the right to limit the use of sensitive personal information and the right not to be discriminated against for exercising them. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done so. The financial information we collect — transactions, bank connections, and tax records — is used to provide the Service and is never sold, rented, or traded.

You may exercise these rights yourself or through an authorized agent by emailing privacy@neeuh.com. We will verify your request against the information associated with your account and respond within the timeframes required by law.

European, UK, and Other International Rights

If you are in the European Economic Area, the United Kingdom, or another region with comparable data protection law, you have the rights listed above and may also object to or request restriction of certain processing, and lodge a complaint with your local supervisory authority.

Where the GDPR applies, we process your personal data on these legal bases: to perform our contract with you (providing the Service, billing, and support); our legitimate interests (securing the Service, preventing fraud and abuse, and improving the product); compliance with legal obligations (tax and financial recordkeeping); and your consent where we ask for it, which you may withdraw at any time.

Data Retention

We keep your data for as long as you have an account, and not longer. Your records stay available to you while your account is open, because your own tax recordkeeping may require you to be able to reach back several years. We are not your taxpayer or tax preparer, so we do not hold your financial records on our own account after you are gone.

Deleting your account deletes your data. You can delete your account in the app or on the web under Settings > Delete Account, or ask us to do it by emailing privacy@neeuh.com; step-by-step instructions are on our account deletion page. When your account is deleted, we permanently remove your profile; every company that only you belong to, with its transactions, tax profiles and calculations, and mileage records and trip routes; and your conversations with the AI assistant. Your receipts, documents, company logos, and reports are queued for removal at the same moment and are removed from storage shortly afterward. Your sessions are revoked. Any active subscription is cancelled in Stripe immediately, with no further charges and no prorated refund, and your billing profile at Stripe, including saved payment details, is deleted. We delete your stored bank connections and instruct Plaid to remove them; if Plaid cannot be reached at that moment, your account is still deleted and we follow up with Plaid to complete the removal. This is not a soft delete or a deactivation, and it cannot be undone — export anything you want to keep first.

Shared companies. A company that other members still use is not deleted when you delete your account. Your membership ends, and if you owned the company, ownership passes to one of its admins or, if there is none, to its longest-standing member, together with the company's shared tax profile, W-2s, and tax payment records.

What outlives deletion. A few narrow things remain after your account is deleted, and none of them is used to re-create your account or for any other purpose:

  • Encrypted database backups, which are kept on a short rolling schedule and age out within 30 days, after which no copy remains.
  • Invoices and payment records of what you paid Neeuh, which Stripe and we, as a business, are required by tax and financial-recordkeeping law to retain.
  • Product analytics in PostHog and error reports in Sentry, which are tied to an internal identifier and expire on those providers' retention schedules rather than at deletion.
  • Logs of requests we sent to our AI provider, currently OpenAI, which that provider retains under its own API data retention policy.
  • Original receipt emails you forwarded to Neeuh, which are deleted automatically 30 days after they arrive.
  • Our administrator access audit log, which may keep your account's internal ID and the IP address of any Neeuh administrator who accessed your account, as a security record.

While your account is open, these same retention periods apply: analytics, error reports, and AI request logs expire on their providers' schedules, and forwarded receipt emails are deleted after 30 days. We keep marketing contact details until you opt out.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

International Users

If you are accessing our services from outside the United States, please note that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: