Does an AI Expense Tracker Need Bank Access?
The exact permission an AI expense tracker actually needs to work from email — and why that's a smaller ask than a bank login.
Quick answer
No — not necessarily. Most well-known expense trackers connect to your bank or card issuer, which means handing your financial-institution login to the tracker or to a third-party aggregator standing between you and your bank. An AI expense tracker that reads email instead never needs that: receipts, invoices, subscription renewals, and refund confirmations already land in your inbox, and reading them only requires read-only mail permission.
The two approaches, side by side
A bank-linked tracker's core promise — automatic capture of every card and bank transaction — depends on it having a live connection to your bank or card issuer. In practice that means entering your online-banking credentials into the tracker's own login screen, or into a third-party aggregator's consent flow that then hands the tracker a token to pull transactions on an ongoing basis.
A purchase, bill, subscription renewal, or refund almost always produces an email — a receipt, an invoice, a renewal notice, a confirmation. An AI expense tracker can read that evidence directly from the inbox it already arrives in, instead of asking your bank for a separate, parallel copy of the same information. The trade-off runs the other way from a bank connection: no financial-institution credential is ever involved, but only purchases that actually produce an email get seen.
The comparison
| Dimension | Bank-linked tracker | Numero |
|---|---|---|
| What you hand over | Bank or card login, often via a third-party aggregator | Nothing beyond a Google or Microsoft sign-in consent screen |
| Exact permission | Access to initiate transfers or read full account/transaction data | gmail.readonly, or Mail.Read + User.Read + offline_access for Outlook |
| Can it send, delete, or modify anything? | Varies by provider and permission scope | No — never requests a write, send, or delete scope |
| What's stored from the source | Transaction lines as reported by the bank/aggregator | Structured metadata only — never email body content or attachments |
| What it can't see | Purchases outside the linked accounts | Cash and in-person purchases with no emailed receipt |
What "read-only" actually means, in scopes
“Read-only” is a specific, checkable permission, not a marketing adjective. Numero requests exactly one Gmail scope — gmail.readonly— and nothing broader. For Outlook it requests Mail.Read (read messages), User.Read (resolve which account is connected), and offline_access (stay connected without asking you to sign in again every session). None of these can send a message, delete a message, or modify a label or folder.
Two separate approvals: logging in vs. authorizing a mailbox
Signing in to an account and authorizing that account's mailbox to be read are two different consent screens, asking for two different things — not one flow disguised as two steps. It's possible to be logged in without ever having connected a source at all.
The access token that results is itself sensitive, and it's encrypted at rest before it ever touches a database, not just protected in transit. What actually gets kept from a message matters just as much: Numero never stores email body content or attachments; it keeps only structured transaction metadata extracted from the message, not the message itself.
What Numero can and can't see, concretely
A subscription renewal email, a PDF invoice, an order confirmation, a refund notice — all seen, because all of them produce an email. A cash purchase at a coffee shop, or an in-person card tap with no emailed receipt — not seen, because no evidence ever reaches the inbox Numero is allowed to read. That's a real, deliberate limitation of reading from email instead of a bank feed, not a detail to gloss over.
Disconnecting
Disconnecting a source should mean the tracker immediately stops reading it, and Numero deletes its own stored access the moment you disconnect either provider. What happens next at the provider depends on what each one actually offers: Google provides a direct way to revoke a single app's access, so Numero calls that on disconnect. Microsoft doesn't offer an equivalent for revoking just one app's access without signing you out of every Microsoft app entirely — so for Outlook, Numero deletes its own copy and lets the now-unused token expire naturally instead of triggering that much larger side effect.
What Numero supports today
Gmail and Outlook only, using the read-only scopes described above — there's no bank, card, or account-aggregator connection anywhere in the product. If you'd rather not connect a mailbox at all, manual entry is a free feature that doesn't require connecting anything. See also the full Trust Center and how the extraction pipeline itself stays accurate.
Questions about does an AI expense tracker need bank access
They carry different risks, not a simple more-or-less. A bank-linked tracker's risk is concentrated in a financial-institution credential or token; an email-based tracker's risk is concentrated in mailbox access. Numero's read-only mail scopes can't send, delete, or modify anything, and the resulting access token is encrypted at rest.
The permission itself (`gmail.readonly`, `Mail.Read`) covers the whole connected mailbox — Numero doesn't get a narrower, receipts-only scope, because mail providers don't offer one. What Numero keeps from that access is the narrower thing: only structured transaction metadata, not email bodies or attachments.
Manual entry ("Quick Add") is a free feature and doesn't require connecting a mailbox — you can log a purchase directly instead.
Yes, on Numero's side: its own stored, encrypted copy of the access token is deleted the moment you disconnect. Whether the provider itself also invalidates the token right away depends on the provider — Google supports a direct revoke; Outlook's tokens are left to expire on their own instead, since Microsoft has no equivalent single-app revoke.
The permission covers the whole connected mailbox, so yes, Numero's read access isn't limited to financial senders. What changes is what gets kept afterward: Discovery discards anything that doesn't look financially relevant before an AI call is ever made, and only structured transaction metadata from confirmed financial evidence is ever stored.
Typically your online-banking or card-issuer login, entered either directly into the tracker or into a third-party aggregator's consent flow that then hands the tracker an ongoing token to pull transactions. That's a different category of credential than a read-only mail scope — it's tied to moving money, not just reading messages.
Connect an inbox, not a bank account.
Free to start, read-only Gmail or Outlook access, no bank login.