inventoryVersion: "1.0" # SpendClear User Data Rights This is the plain-English summary of what SpendClear stores locally today, what Bacenik stores server-side for account access, and what the in-product export and clear controls do. ## What SpendClear stores on your device Financial: - Guardrails, purchase-check history, period ledger entries, intake records, Financial Context snapshots, provider connection mappings, Category Intake sessions, active basket sessions or handoffs, and Debt Exit Nigeria data (debt map, stability snapshots, plan, check-ins, recovery notes, graduation state). Behavioral: - In-app feedback, Savings Clarity events, cooling-off reflections, and Debt Exit weekly check-ins. UI preferences: - Appearance and optional feature settings, plus small convenience flags such as dismissed hints. Telemetry: - Trust diagnostics use counts and violation types only. They do not include amounts. Operational: - Short-lived FX and tax-rate caches, plus pilot unlock flags when preview modes are enabled. ## What SpendClear never stores - Bank credentials in local storage. - Raw purchase-check financial inputs on Bacenik servers during normal operation. - Smart Scan or Category Intake camera frames on Bacenik servers during normal operation. - Passwords for SpendClear accounts. ## Export My Data `Export my data` includes all user-generated local categories that are classified for main export: - guardrails - history - settings - feedback - periodLedger - intakeRecords - savingsClarity - contextSnapshots - providerConnections - categoryIntakeSession - basketSession - basketHandoff - coolingOff - tripTaxRate - debtExitProfile - debtExitDebts - debtExitPlan - debtExitCheckins - debtExitRecovery - debtExitStability - debtExitGraduation - validationRollups (derived aggregates only — no per-check amounts) Manifest fields: - `exportVersion` - `inventoryVersion` - `exportedAt` - `appVersion` - `schemaVersion` - `containsFinancialData: true` - `categories` - `excludedCategories` - `data` Excluded categories are still disclosed in the manifest with the key, classification, and reason. ## Export Trust Diagnostics `Export trust diagnostics` is a separate JSON export. It contains: - trust session counters - trust violation types and status markers - governance metadata It explicitly does not contain: - purchase amounts - income values - email addresses ## Clear All Local Data `Clear all local data` removes every documented `spendclear.*` key in localStorage and sessionStorage, including: - exported categories - excluded UI preference flags - excluded operational caches - trust diagnostics keys After clear, core app state resets in memory and nothing is written back to storage until you change guardrails, settings, or run another check. - active basket and intake session keys Nothing is silently retained under a documented `spendclear.*` key after this action completes. ## Debt Exit Nigeria Debt Exit Nigeria (Premium Nigeria) stores debt map, stability snapshots, active plan, weekly check-ins, recovery notes, and graduation state locally on your device. These categories are included in Export my data and removed by Clear all local data. Debt Exit handoff session data and local telemetry counters are cleared but not included in the main export bundle (see manifest excluded categories). Bacenik does not receive debt balances or income figures during normal operation. ## Financial Context Financial Context snapshots are cached locally on your device. They are included in the main export and removed by Clear all local data. Server-side tokens and authenticated provenance endpoints are outside this local export bundle. ## What remains on Bacenik servers Bacenik keeps only the account and service records needed for authentication and subscriptions, such as: - email address - authentication records - session records - subscription status See `/privacy` for the authoritative policy language. ## What remains only on your device Everything classified here as financial or behavioral remains on your device unless you export it or voluntarily send it elsewhere.