Bilenzo is a ledger that lives on your phone. Nothing in it is sent anywhere by default, there is no account to make, and there is no server on the other end that keeps anything of yours.
Last updated 31 October 2026
Everything you enter — expenses, income, categories, accounts, debts, contracts, savings goals, notes — is written to a database inside the app's own storage on your device. It is not uploaded, indexed, backed up to us, or read by anyone. There is no us to read it.
One smaller thing sits alongside it:
Reminders are scheduled by your phone's own notification system. They are never sent from anywhere.
Both are off until you switch them on. Sync sends your data to your own account with the company concerned — not to an account belonging to Bilenzo. AI reading passes text through Bilenzo's reader, which keeps none of it.
If you turn sync on, the ledger is written as a single JSON file into Bilenzo's own iCloud container under your Apple ID, together with dated snapshots. Apple stores it; Bilenzo cannot see it, and neither can anyone else with your Apple ID. Turning sync off stops the writing; deleting the files in the Files app removes what is there.
Three parts of the app can ask an AI to make sense of text: typing or dictating an expense as a sentence, scanning a receipt, and checking how your phone read a bank screenshot. Each has its own switch under Settings → AI reading, and each is off until you turn it on.
What is sent: the sentence you typed, or the text read off a receipt, with the names of your categories so it can pick one; or the text of the statement rows you chose, with every amount taken out. Not your ledger, not your other expenses, not your device, and no account or identifier of any kind — the app has none.
A statement's amounts never leave your phone. Each row's amount is replaced by a label — A1, A2 — before anything is sent, and any other figure on the page by a placeholder. The AI only says which line is the shop, which day the row is from and whether the money went out or came in; the amounts your ledger gets are the ones your phone read. Where the two readings differ, you choose, and your phone keeps what your answers teach it about that bank's layout so it can read the next screenshot alone. That stays on the phone too: it is not in your backup and is not synced.
You choose what a statement says. Before anything is sent, the app shows you the screenshot with a box over the rows it is about to read. Everything outside the box is greyed out and stays on the phone. The box starts below the first transaction — that is where a statement stops printing your name, your address and your account number — and you drag it wherever you like. Anything shaped like an IBAN, a card or an account number is masked inside it as well.
Under the picture is the exact text that would go, amounts already taken out, if you want to read it first. It is the same text, not a summary of it.
What is never sent: the photograph. Receipts and statements are read into text by your phone, on your phone, using Google's ML Kit, which runs entirely offline. The image stays where it was.
Who it goes to: Bilenzo's reader at ai.bilenzo.app, over HTTPS. It runs on Cloudflare, hands the text to Cloudflare's Workers AI and sends the answer straight back to your phone.
What is kept: nothing. The reader has no database and writes no logs. Cloudflare does not keep the text or the answer once it has replied, and does not use them to train any model. Your phone's internet address, which every connection carries, is counted for a minute so that no one address can flood the reader, and is not written down.
Turn a switch off and that part is read on your phone again, with nothing sent.
When an Apple Pay purchase or a bank's notification is in a currency other than the account's — lira spent with a euro card — Bilenzo fetches that day's reference rates from the European Central Bank to show what it came to, and asks you to check it. The request is for the bank's public table of rates and nothing else: no amount, shop, card or identifier is sent. Like any connection, it carries your phone's internet address.
Because the data never reaches us, the usual requests — access, export, correction, deletion — are things you perform directly, and immediately:
Under the GDPR this makes you the only holder of your data. Where the law still names a controller, that is Seyedamir Zarafshanihodaei, reachable at the address below.
Bilenzo is rated 4+ and collects nothing from anyone, of any age. It is not directed at children, and it has no social features, no messaging and no web browsing.
If a future version of the app sends something new, this page will say so before that version ships, and the date at the top will change.
26 September 2026 — first version.