inventoryVersion: "1.0"
# SpendClear User Data Rights
This is the plain-English summary of what SpendClear stores locally today, what Bacenik stores server-side for account access, and what the in-product export and clear controls do.
## What SpendClear stores on your device
Financial:
- Guardrails, purchase-check history, period ledger entries, intake records, Financial Context snapshots, provider connection mappings, Category Intake sessions, and active basket sessions or handoffs.
Behavioral:
- In-app feedback, Savings Clarity events, and cooling-off reflections.
UI preferences:
- Appearance and optional feature settings, plus small convenience flags such as dismissed hints.
Telemetry:
- Trust diagnostics use counts and violation types only. They do not include amounts.
Operational:
- Short-lived FX and tax-rate caches, plus pilot unlock flags when preview modes are enabled.
## What SpendClear never stores
- Bank credentials in local storage.
- Raw purchase-check financial inputs on Bacenik servers during normal operation.
- Smart Scan or Category Intake camera frames on Bacenik servers during normal operation.
- Passwords for SpendClear accounts.
## Export My Data
`Export my data` includes all user-generated local categories that are classified for main export:
- guardrails
- history
- settings
- feedback
- periodLedger
- intakeRecords
- savingsClarity
- contextSnapshots
- providerConnections
- categoryIntakeSession
- basketSession
- basketHandoff
- coolingOff
- tripTaxRate
- validationRollups (derived aggregates only — no per-check amounts)
Manifest fields:
- `exportVersion`
- `inventoryVersion`
- `exportedAt`
- `appVersion`
- `schemaVersion`
- `containsFinancialData: true`
- `categories`
- `excludedCategories`
- `data`
Excluded categories are still disclosed in the manifest with the key, classification, and reason.
## Export Trust Diagnostics
`Export trust diagnostics` is a separate JSON export. It contains:
- trust session counters
- trust violation types and status markers
- governance metadata
It explicitly does not contain:
- purchase amounts
- income values
- email addresses
## Clear All Local Data
`Clear all local data` removes every documented `spendclear.*` key in localStorage and sessionStorage, including:
- exported categories
- excluded UI preference flags
- excluded operational caches
- trust diagnostics keys
After clear, core app state resets in memory and nothing is written back to storage until you change guardrails, settings, or run another check.
- active basket and intake session keys
Nothing is silently retained under a documented `spendclear.*` key after this action completes.
## Financial Context
Financial Context snapshots are cached locally on your device. They are included in the main export and removed by Clear all local data. Server-side tokens and authenticated provenance endpoints are outside this local export bundle.
## What remains on Bacenik servers
Bacenik keeps only the account and service records needed for authentication and subscriptions, such as:
- email address
- authentication records
- session records
- subscription status
See `/privacy` for the authoritative policy language.
## What remains only on your device
Everything classified here as financial or behavioral remains on your device unless you export it or voluntarily send it elsewhere.