Bilenzo is a ledger that lives on your phone. Nothing in it is sent anywhere by default, and there is no account to make, because there is no server on the other end.
Last updated 26 September 2026
Everything you enter — expenses, income, categories, accounts, debts, contracts, savings goals, notes — is written to a database inside the app's own storage on your device. It is not uploaded, indexed, backed up to us, or read by anyone. There is no us to read it.
Two smaller things sit alongside it:
Reminders are scheduled by your phone's own notification system. They are never sent from anywhere.
Both are off until you switch them on, and both send your data to your own account with the company concerned — not to an account belonging to Bilenzo.
If you turn sync on, the ledger is written as a single JSON file into Bilenzo's own iCloud container under your Apple ID, together with dated snapshots. Apple stores it; Bilenzo cannot see it, and neither can anyone else with your Apple ID. Turning sync off stops the writing; deleting the files in the Files app removes what is there.
Three features can ask Anthropic's Claude to make sense of text: typing an expense as a sentence, scanning a receipt, and importing a bank statement. They do nothing at all unless you have entered your own Anthropic API key in Settings.
What is sent: the sentence you typed, or the text read off a receipt or statement. Not your ledger, not your other expenses, not your device, and no account or identifier of any kind — the app has none.
You choose what a statement says. Before anything is sent, the app shows you the screenshot with a box over the rows it is about to read. Everything outside the box is greyed out and stays on the phone. The box starts below the first transaction — that is where a statement stops printing your name, your address and your account number — and you drag it wherever you like. Anything shaped like an IBAN, a card or an account number is masked inside it as well.
Under the picture is the exact text that would go, if you want to read it first. It is the same text, not a summary of it.
What is never sent: the photograph. Receipts and statements are read into text by your phone, on your phone, using Google's ML Kit, which runs entirely offline. The image stays where it was.
Who it goes to: Anthropic, directly from your phone over HTTPS, authenticated with your key and billed to your account. Their privacy terms govern what happens next.
Remove the key in Settings and these three features stop sending anything, permanently, until you add one again.
Because the data never reaches us, the usual requests — access, export, correction, deletion — are things you perform directly, and immediately:
Under the GDPR this makes you the only holder of your data. Where the law still names a controller, that is Seyedamir Zarafshanihodaei, reachable at the address below.
Bilenzo is rated 4+ and collects nothing from anyone, of any age. It is not directed at children, and it has no social features, no messaging and no web browsing.
If a future version of the app sends something new, this page will say so before that version ships, and the date at the top will change.
26 September 2026 — first version.