Everyone sees it
The default for household money: groceries, bills, school fees. Full details, everyone.
You decide what your household sees.
We only see structure. The model only sees pseudonyms.
Every boundary visible. Every boundary adjustable.
Within your household: control, not secrecy
The amount rolls up. The details do not.
“Groceries ₹4,200, of which ₹800 personal.” The household math stays honest; the line items stay yours.
Invisible, even from totals
It exists only in your own view. No roll-up, no trace in anyone else’s numbers.
Just me
Planning a gift? Make the plan yours.
A plan can be for everyone, for some people, or just you. Its steps and its reminders stay in your view. The ledger entry you make when you buy the gift follows the privacy level you give it, like any other entry.
Nobody in your household can set up quiet tracking of you. Every reminder or summary that reads your data is one you can see, listed by name, with what it read. There is no configuration in which that list is hidden from you.
The glass box
Every read of your data, on a page you can open.
The privacy page in the web app lists who read household data, what they saw and when. This page and that page are the same feature in two mediums.
Who read itWhat they sawWhen
Weekly summary Totals for the week, 23 entries. No merchant names. Sun 19:00
Reminder: gas cylinder One reminder you set. Nothing else. Tue 09:00
Isha Opened the ledger. Shared entries only. Today 08:12
Monthly report Totals for August, by category. No line items. 1 Sep 09:00
From us, the company
We only see what you send.
No background collection: no inbox scanning, no reading of your other messages, nothing running on your phone.
Raw message text is deleted within 30 days.
A daily job drops the original wording once it is parsed. The structure stays: amount, category, date.
The model sees pseudonyms.
Names, phone numbers, emails and account tails are masked before any message reaches a language model, and put back after.
Identifiers are never spoken back.
Say “forget my UPI id” and it is deleted. Jirvo never repeats a stored identifier back in chat, not even to confirm it.
Leaving takes your data with you.
A member who leaves a household gets an export of their personal entries, and those entries are deleted. Shared entries stay, de-attributed.
What WhatsApp and Meta can see
Message metadata, as with any WhatsApp Business conversation. WhatsApp’s encryption ends at our webhook. We do not claim end-to-end encryption, because it would not be true.
The message content is processed on our servers to log the entry, and the original wording is deleted within 30 days. The full detail is in the Privacy Policy.
Privacy questions
Can my partner see everything I spend?
Only what you choose. Every entry is shared, personal (the amount rolls into totals, the detail does not) or private (invisible, even from totals).
Does it read my messages or my email?
No. It only sees what you send it, on WhatsApp or in the web app. There is no inbox connection.
Does it connect to my bank account?
No. It never asks for a banking login, has no access to your accounts, and cannot move money.
What happens to my data if I leave?
You get an export of your personal entries and they are deleted. Shared household entries stay with the household, no longer attributed to you.