Trust & Security

Trust and security come first.

You trust Numero with access to your inbox. We protect that trust by using read-only access, looking only for financial emails, and keeping the facts instead of the email.

Google certified for Gmail accessCASA AL1 security passedSMS read on your phoneYour data is encrypted

Google certified for Gmail access

Numero passed the security review Google requires.

Before approving access to Gmail, Google requires apps like Numero to complete a security review. Numero passed the CASA AL1 assessment and received a Letter of Validation in 2026. The review checked that Numero can handle and delete Gmail data safely.

Gmail access

Approved by Google

Security review

CASA AL1 passed

Result

Letter of Validation
See the assessment details

Our promise to you

How Numero protects your inbox.

We only read

Numero cannot send, delete, edit, or mark an email as read. It never listens for new texts: it reads your SMS inbox on your phone only when you open the app, and never changes a message.

We look for financial emails

Numero first checks basic details to find likely receipts, bills, subscriptions, refunds, and other money-related emails.

We keep facts, not emails

Numero saves useful details such as the merchant, amount, and date. It does not save SMS text, the original email, subject line, or attachment. Bank SMS are parsed on your phone; only the facts leave it.

You stay in control

You can stop SMS tracking, disconnect Gmail, export your records, or delete your data from Settings whenever you choose.

Choosing an expense tracker

How to choose a safe expense tracker.

The safest choice is the one that asks for less, explains what it keeps, proves its security, and makes it easy to leave.

  1. 01

    Check what access it asks for

    Read-only access is safer than permission to send, edit, or delete. Numero asks for read-only Gmail access and permission to read SMS, never to send or delete them, and it never asks for your bank password.

  2. 02

    Check what it saves

    A trustworthy app should explain this clearly. Numero keeps financial details such as merchant, amount, and date, not a copy of the original email.

  3. 03

    Look for proof beyond promises

    Numero passed the CASA AL1 security assessment required for its Google-approved Gmail access and received a Letter of Validation.

  4. 04

    Make sure leaving is easy

    You should be able to disconnect and delete your data yourself. Numero puts both controls in Settings.

What happens to an email

We find the financial emails and keep only the details.

Numero first looks for messages that seem financial. It reads those messages one at a time, saves the useful details, and does not keep the original email.

  1. 01

    Find likely financial emails

    Numero checks simple details such as who sent an email and its subject. At this stage, it does not download the email body or attachment.

  2. 02

    Pick out the useful details

    If an email looks financial, Numero reads it to find details such as the merchant, amount, and date. Our AI provider may help with this step, but your email is not used to train general AI models.

  3. 03

    Keep the facts, not the email

    Numero saves the financial details in your account. It does not save the original message, subject line, email addresses, or attachment content.

Numero stores

  • Merchant name or domain
  • Transaction amount + currency
  • Purchase or payment date
  • Type of financial record
  • Subscription, warranty, or insurance details

Numero does not store

  • SMS message text and personal chats
  • Original email content
  • Email subject line
  • Email addresses inside the message
  • Attachments or PDF contents
  • Full card numbers, CVV, or OTP codes

Numero never saves the original email content. Read the Privacy Policy to learn how our AI provider handles an email while pulling out the financial details.

How we protect you

Security is part of how Numero works every day.

We protect sign-in, encrypt data, keep each account separate, and regularly test Numero for security problems.

Safe sign-in

Numero uses trusted sign-in methods and blocks repeated attempts that may come from bots or attackers.

Protected sessions

Your signed-in session is protected and regularly renewed. Signing out ends access to that session.

Your data stays yours

Numero checks who you are before showing or changing data. One customer cannot access another customer's records.

Encryption

Your data is encrypted while it travels and while it is stored. Gmail access details are also kept encrypted.

Careful data handling

Numero checks files and other information before using them and limits how much can be processed at once.

Ongoing security checks

We run security tests and scans regularly so problems can be found and fixed early.

Your data, your control

You decide what stays connected.

Export your data

Download the financial records Numero has saved for you.

See data rights

Stop SMS tracking

Turn off SMS tracking or remove a phone from Settings. Numero stops reading messages on that phone right away.

How SMS access works

Disconnect Gmail

Remove Gmail access from Settings. Numero stops reading as soon as you disconnect.

How access works

Delete your account

Permanently remove your account, Gmail connection, and saved financial data.

Delete account

Frequently asked

Direct answers before you connect.

Is Numero a safe expense tracker?

Numero is built to protect sensitive financial information. It reads bank SMS on your phone and uploads only the facts, uses read-only Gmail access, keeps financial details instead of original messages, encrypts stored data, and passed the Google-required CASA AL1 security assessment. You can stop SMS tracking, disconnect Gmail, or delete your data from Settings.

Does Numero read my texts as they arrive?

No. Numero never listens for incoming messages and does not ask for permission to receive them, so it can't catch an OTP or a private text the moment it lands. It reads your SMS inbox only when you open the app or import older history, and even then it skips OTPs and personal chats.

Is SMS expense tracking safe?

With Numero, your messages stay on your phone. Numero reads only transaction alerts from banks and businesses, skips personal chats and OTPs, and uploads just the facts: amount, date, merchant, and the last four digits. Message text, phone numbers, and full account numbers are never uploaded, and SMS content is never sent to any AI provider.

Which expense tracker is safest?

Look for an expense tracker that asks for the least access, clearly explains what it saves, has independent security proof, and lets you delete your data. Numero meets those checks with read-only Gmail access, limited storage, CASA AL1 validation, and direct account controls.

Can Numero read all of my email?

Google does not offer a financial-email-only permission, so its read-only permission covers the connected inbox. Numero first checks basic details and reads the full content only when an email looks financial. It cannot send, delete, label, or change your mail.

Is Numero approved by Google for Gmail access?

Yes. Google approved Numero's Gmail access after the required verification process. This included passing a CASA AL1 security assessment and receiving a Letter of Validation in 2026.

What does Numero actually store?

Numero stores useful financial details such as the merchant, amount, date, and type of record. It does not save the original email, subject line, email addresses, or attachment content.

Does Numero use AI to read financial emails?

Sometimes. After an email is identified as financial, OpenAI may help pull out details such as the merchant, amount, and date. The email is not used to train general AI models, and Numero does not save the original content. Our Privacy Policy explains this in full.

How do I remove my data?

From Settings, you can stop SMS tracking or remove a phone, disconnect Gmail, delete saved financial data, export your records, or permanently delete your account.

Your inbox stays yours.

Numero uses read-only access, saves only the financial details you need, and lets you disconnect or delete your data whenever you choose.