Does my data leave my phone?

You deserve a straight answer. Here it is, without spin.

The only things that can leave the device

• Bank sync is an optional paid connection through Plaid and an Obsidian Ridge Labs relay. Some connected transactions may use Plaid enrichment for categorization; this path can carry merchant and amount information.
• Optional anonymous diagnostics, if you turn them on. These are event-name counts plus a hashed ID only, never your amounts, merchants, categories, chats, or balances. They are off by default.
• A one-time AI model download, if you choose to set up the optional Cedar model. The download is plain file requests with no account or financial data.

Manual records and local calculations do not require linking a bank. If you choose bank sync, Plaid and an Obsidian Ridge Labs relay process the connected data. Paid enrichment can also send merchant and transaction details to Plaid. Diagnostics are separately optional and off by default.