Who we are
Amsio is run by Pranix, LLC, a company in the United States ("we", "us"). This notice explains what personal data Amsio collects through its web app and its WhatsApp and Telegram chats, why, who it goes to, how long we keep it and what you can do about it. Pranix, LLC decides how and why this data is used. Amsio is offered in the United States.
Effective date: November 8, 2026. Updated November 9, 2026: how to delete your data.
The short version
- Amsio keeps a shared record of expenses and works out who owes whom. It does not hold or move money, and it never asks for card, bank or government ID numbers.
- We collect what is needed to run your ledgers: your phone number, a display name, the expenses you record and the receipts you upload.
- An AI provider reads your messages and receipts to draft expenses. It may not train on them. Nothing changes a balance until you confirm it.
- We do not sell your data, do not show ads, and do not use advertising or tracking cookies.
- You can export your ledgers and delete your account at any time from Account.
What we collect
Information you give us
- Phone number. Your phone number, with its country code, is your Amsio account. We store it encrypted, with a keyed hash so we can find your account without decrypting it.
- Email address (optional). Used to sign in if you lose your phone and to send you notices. Stored the same way.
- Display name. Visible to members of ledgers you join.
- Settings. Your country (for your tax year), currency, time zone, and whether new expenses go to a default ledger or Amsio asks each time.
- Ledger content. Ledgers you create or join (shared, household or business), their members, and the expenses, categories, shares, payments, corrections and recurring bills you record or take part in. Ledger content is about you and about the other people in it.
- Receipts. Photos and PDFs you upload. We remove location and camera details from photos and mask card numbers we can read. PDF receipts are kept as uploaded. Every file is checked for malware.
- Messages to Amsio. The text and photos you send the Amsio chat, used to create the expense or carry out the command you asked for (see Keeping and deleting data for what we keep).
- Contact form. Your message, the request type and your account's phone number, or an email address if you cannot sign in.
Information collected when you use Amsio
- Messenger identifiers. Your WhatsApp number or Telegram user id, and the time of your last message (WhatsApp only lets us reply within 24 hours of it). If you link Telegram by sharing your phone number, we use the number once to find your account and do not store it again.
- Sign-in and security records. Sign-in codes (stored only as a scrambled hash), sessions, the browser and device type you signed in with (for example "Chrome on macOS"), and a record of important actions such as joining a ledger, changing your phone or email, or deleting a receipt.
- Network data. Your IP address, used in scrambled form to limit sign-in attempts and kept in our hosting provider's access logs, together with your browser's user agent.
- Usage counts. How long it takes to add an expense, how many people join a ledger, and how often receipts are read correctly. These hold no message content.
Information from others
- Other members can add you to an expense, record a payment involving you or invite you to a ledger. A ledger you join shows you what they recorded.
- WhatsApp and Telegram tell us your number or user id and the name on your profile when you message Amsio.
What we do not collect
- Card, bank or payment account numbers, Social Security, PAN or Aadhaar numbers, passwords (Amsio has none), your contacts, or your precise location. We do not read your group chats.
How we use it, and why
We use your data only for the purposes below. Where a law asks us to name a legal basis for each purpose, it is the one shown.
- Running your account and ledgers: signing you in, recording expenses, working out balances, sending you what you asked for. Basis: performance of our contract with you.
- Reading messages and receipts with AI to draft expenses for you to confirm. Basis: contract; you can enter everything by hand instead.
- Telling you about your ledgers: who joined, new expenses that involve you, payments to confirm, bills due, sign-in codes and changes to your account. Basis: contract.
- Security and abuse prevention: rate limits, malware checks, audit records, investigating problems. Basis: our legitimate interest in keeping Amsio and its users safe.
- Improving Amsio: the usage counts above, without message content. Basis: legitimate interest.
- Support: answering what you send through the Contact form. Basis: contract, or legitimate interest if you have no account.
- Legal obligations: keeping records we are required to keep and responding to lawful requests. Basis: legal obligation.
We do not use your data for advertising, sell it, or use it to train AI models.
AI processing
To read your messages and receipts, Amsio sends their content to an AI provider (Anthropic) under commercial terms that do not allow it to train its models on your data. Anthropic keeps what it receives only for a limited period, to provide the service and to detect misuse, and then deletes it. Receipts may also be read by text-recognition software on our own servers. The AI only drafts: amounts are checked by our own code, and nothing changes a balance until you confirm it. Amsio makes no decision about you that has legal or similarly significant effects. You can always enter an expense by hand.
Who can see what
- Members of a ledger see its name, members, expenses, payments, balances and receipts. The person who entered an expense and its payer can change it; everyone affected is told. Your running balance is shown only to you.
- Before you join, the invitation shows who is in the ledger and what members can see, and you choose Join or Decline.
- Telegram group chats. In a group chat connected to an Amsio ledger, Amsio reads only commands, messages that mention it and replies to it, and posts there only who joined and each expense's description, payer and total. Balances and sign-in links go to private chats.
- People who don't use Amsio. Only signed-up people can be members of a ledger. Someone who doesn't use Amsio can still appear in what members record, for example a name in an expense description or on a receipt photo. In a Telegram group, Amsio receives only commands, mentions of it and replies to it, so other people's ordinary messages never reach us. If you don't use Amsio and want something about you removed, use the Contact form.
- Our staff. A small number of operators can look up an account by a masked id, suspend accounts and view a receipt to investigate a problem. Viewing a receipt requires a reason and is recorded.
Where your data is stored
Amsio's database, receipts and logs are stored with Amazon Web Services in the United States (us-east-1, Virginia). If you use Amsio from outside the United States, your data is transferred to and processed in the United States. Some service providers may process it in the other countries listed on the service providers page.
Keeping and deleting data
- Account details (phone, email, name, settings): until you delete your account.
- Ledger records (expenses, shares, payments, corrections): for as long as the ledger exists. Records are never edited in place; a correction is added beside the original, so the history stays complete for every member.
- Receipts: 8 years in a business ledger, 3 years in a household ledger and 400 days in a shared one, then deleted; the expense stays. In a shared ledger, receipts are also kept for as long as anyone in it still owes or is owed money. When a period ends the file is deleted from storage within the hour; we keep no other copy of it.
- Your messages to Amsio: we do not keep the text of a message once it has been turned into a draft. We keep the draft (amount, description, who paid and shares) and the AI's structured reading of it, until you delete your account. If Amsio first has to ask which ledger an expense is for, it holds that one message until you answer or cancel.
- Messages Amsio sends you: chat messages are removed from our delivery queue as soon as they are delivered. Other notices (emails, sign-in codes and alerts about your ledgers) keep their content for up to 90 days after delivery, so a problem can be investigated, and then it is erased.
- Sign-in codes expire within minutes. Rate-limit records are deleted after 2 days.
- Server logs: 30 days. Access logs with IP addresses: 90 days.
- Backups of the database: 35 days, then overwritten. Data you delete leaves the backups when they expire.
- Audit and security records (for example, that an account joined a ledger or a receipt was deleted): kept for security, fraud prevention and legal obligations. Once your account is deleted they no longer carry your name or contact details.
Deleting your account (Account → Delete account) takes effect at once. We remove your phone, email and messenger identifiers, your name (replaced with "Deleted member"), your settings, drafts, sessions and the receipts you uploaded, including those in shared ledgers. Recurring bills you set up stop. Expenses and payments other members took part in stay, because their balances depend on them, shown as by "Deleted member". Before you delete, Amsio shows any balance still open. We recommend exporting your ledgers first.
How to delete your data
You can delete your Amsio account and the personal data tied to it at any time, whether you use Amsio on the web, in WhatsApp or in Telegram.
- Go to amsio.app/signin and sign in with the email, phone number or Telegram account you use with Amsio. If you only use Amsio in a chat, sign in with that same phone number or Telegram account.
- Open Account and choose Delete account. If your last sign-in was not recent, Amsio asks you to sign in again first.
- Amsio shows any balance you still owe or are owed. We recommend exporting your ledgers first. Confirm, and the deletion takes effect at once.
Deleting your account removes your phone number, email and WhatsApp and Telegram identifiers, so Amsio no longer recognises you or sends you messages. What is removed, and the few records that stay because other members' balances depend on them, are listed under Keeping and deleting data. Deleted data leaves our backups within 35 days.
Blocking Amsio or deleting the chat in WhatsApp or Telegram stops the conversation but does not delete your data with us. The copy of the chat on your phone, and anything WhatsApp or Telegram keep, are covered by their own policies.
If you cannot sign in, use the Contact form, choose "Privacy request" and give the email or phone number on the account. We write to that email or phone number to confirm the request came from you, then delete the account within 30 days and tell you when it is done.
Security
Data is encrypted in transit and at rest; phone numbers, emails and messenger ids are encrypted again in the database. The application has no permission to change the database's structure, ledger records cannot be edited or deleted in place, webhooks from WhatsApp and Telegram are checked for a valid signature before they are read, and every uploaded file is scanned for malware. Administrative access to production is limited to named people and requires multi-factor authentication. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Your choices and rights
Wherever you live, you can:
- See and export your data: each ledger exports as a spreadsheet, and reports and receipts download from the web app. Ask through the Contact form for anything else we hold about you.
- Correct it: change your name, email, phone and settings in Account; correct an expense in its ledger.
- Delete it: delete your account in Account, or ask us to.
- Leave a ledger, or decline an invitation.
- Stop AI processing: enter expenses by hand on the web instead of sending messages or receipts.
Use the Contact form for any request. We confirm your identity through your signed-in account or a code sent to your phone or email, and reply within 30 days, or sooner where the law requires. We will not treat you differently for using your rights.
If you live in the United States
Depending on where you live, state privacy laws (for example in California, Colorado, Connecticut, Virginia, Utah and Texas) give you the right to know what personal information we collect, use and disclose; to access, correct and delete it; to obtain a portable copy; and to opt out of its sale, sharing for targeted advertising, or profiling with significant effects. We do none of those, so there is nothing to opt out of; we still honour Global Privacy Control signals. In the last 12 months we collected the categories described in What we collect (identifiers, records of transactions you entered, internet activity on Amsio, and inferences limited to suggested expense categories) for the purposes in How we use it, and disclosed them only to the service providers listed. We do not collect sensitive personal information beyond what you choose to put in an expense or receipt, and we do not use it to infer anything about you.
We give these rights to every user, whichever state you live in. You can use an authorised agent; we will ask the agent for your signed permission and confirm your identity with you. If we decline a request, you can appeal by replying to our answer; we respond to appeals within 45 days, and if you are not satisfied you can contact your state attorney general. This notice is our notice at collection: it is linked where you sign up, before we collect anything.
Using Amsio outside the United States
Amsio is offered in the United States. If you use it from another country, your data is processed in the United States as described above, and the laws where you live may give you further rights, such as restricting or objecting to some processing or complaining to your data protection authority. Contact us and we will respond to your request under the law that applies to you.
Messages from Amsio
Amsio messages you only about your account and ledgers: replies to you, sign-in codes, who joined, expenses and payments that involve you, and bills due. We do not send marketing messages. On WhatsApp we can only message you within 24 hours of your last message, except through templates WhatsApp has approved. To stop messages, block the Amsio chat or delete your account; you will then not get notices about your ledgers.
Age
You must be 18 or older to use Amsio. Amsio is not directed to children, and we do not knowingly collect personal data from anyone under 13. If we learn that an account belongs to someone under 18, we delete it. If you believe a child has given us data, use the Contact form and we will delete it.
Changes to this notice
When we change this notice we update the effective date above. If a change is significant, for example a new purpose or a new kind of data, we tell you by email or in the app before it applies, and ask for your consent where the law requires it.
Contact and grievances
To ask a question about your data or this notice, or to use any of your rights, use the Contact form and choose the privacy request type. Sign in first if you can. If you cannot sign in or have no account, the form has a short option that replies by email. Pranix, LLC is responsible for Amsio and for your data.