Privacy
Scope and operator
SheEarns is an early-stage bookkeeping service for adult business users. New enrollment is paused. Verified legal operator identity and a public privacy contact have not yet been supplied; this is not a complete commercial-launch privacy policy.
Information collected
Account email and authentication details; display/business names, country, currency, chosen year and income sources; entered financial amounts, dates, categories, purpose, notes, business-use choices, receipt images, historical extractions/review issues and account audit events. Previously entered tax settings remain stored but are not used for predictions. Hosting/authentication services may process technical and security logs.
Purposes and recipients
Lovable Cloud provides hosting, authentication and private storage for account access, bookkeeping and owner-requested exports/sharing. User access is limited to own records; operational service access is different. No promise of absolute security is made.
AI paused and historical recipients
Live document AI, text parsing and voice transcription are disabled: no new content is submitted through those app AI actions. Previous receipt processing could send images to BytePlus ModelArk at its Asia-Pacific endpoint and, on failure, to the Lovable AI gateway with OpenAI-labelled models. Income/voice used the gateway. Retention, training, subprocessors and precise locations remain unverified. A store:false request is not a zero-retention guarantee. Terms must be reviewed before AI reopens.
Browser storage, tracking and CSV
Session information keeps you signed in; Remember me optionally stores email, not passwords. Demo/guide state is tab-scoped. Bank CSV parsing/name matches run in your browser; only chosen rows save on Add. This release configures no advertising tracker. Hosting-level tracking and responses to Do Not Track/Global Privacy Control require operational verification.
Optional accountant sharing
Your explicit permission creates a password-protected copy of selected-year confirmed business/mixed USD expenses and non-salary business income. Receipt images come from current linked files, not frozen copies, and may expose personal items. Anyone with link/password can read/download; send the password separately. Links expire in 30 or 60 days. Revoke blocks future access; Delete packet removes the snapshot. Source edits/deletion do not update existing snapshots. Downloads cannot be recalled.
Retention and deletion
Active account records remain until record/account deletion. Snapshots remain until packet/account deletion; expiry/revocation alone blocks access, not retention. Settings and Export are accessible without a subscription. Successful account deletion removes primary account data, receipt files and snapshots; failures require retrying. Backups, security logs, past AI-provider copies and recipient downloads have separate unverified retention/deletion limits. Keep source documents and tax records independently; there is no universal three-year destruction rule.
Rights and changes
Applicable privacy rights depend on location and legal coverage. CCPA/financial-institution coverage is not asserted here. Operator identity/contact, rights-response procedures, vendor retention and jurisdiction review are required before reopening. Material changes require notice before implementation.
Last updated October 26, 2026.