Data Security
Last updated: February 5, 2026
Our Commitment to Data Privacy and Security
At Sofiapp LLC, protecting your privacy and securing your data is a core principle. Our application processes user data in strict compliance with applicable privacy and security requirements from both Google (Gmail) and Microsoft (Outlook).
We access email data only to the extent strictly necessary to provide our core functionality: automatic expense detection and tracking. Our systems are designed to minimize data access and avoid unnecessary retention.
We never sell, rent, transfer, or share your email data with third parties for advertising or marketing purposes. Your data is used exclusively to provide the Sofiapp service to you.
For full details about how we collect, use, and protect your information, please review our Privacy Policy.
Frequently Asked Questions About Your Data
What email data does Sofiapp access?
Sofiapp LLC requests read-only access to specific Gmail and Outlook emails that may contain transaction or payment notifications. These emails are temporarily processed to extract transaction-related information. We do not store full email content, attachments, or metadata beyond what is required to create a transaction record.
How is my email data used?
Email content is processed solely to determine whether it represents a financial transaction. If a transaction is detected, only the extracted transaction data (such as amount, date, merchant, and category) is stored. Email data is never used for advertising, profiling, or analytics unrelated to Sofiapp's functionality.
Do you store or retain my emails?
No. Sofiapp does not store full email messages. Emails are processed in real time or near real time, and only the resulting transaction data is retained. We do not create email archives, backups, or replicas.
How do you protect my information?
We apply industry-standard technical, administrative, and organizational safeguards, including encryption in transit and at rest, strict access controls, least-privilege policies, and periodic security reviews to prevent unauthorized access, misuse, or disclosure.
Can I revoke email access?
Yes. You can revoke Sofiapp's access at any time directly from your Google Account or Microsoft Account settings. Once access is revoked, no further email data will be processed.
Do you share my data with third parties?
We do not sell or share your personal or email data with third parties. Data is only disclosed if legally required (for example, by a valid court order) or to protect the rights and safety of users and the company, always within applicable legal frameworks.
Questions about data security or privacy?