Consent principles
- Clear: you see why access is requested before connecting.
- Specific: access is limited to the stated purpose.
- Active: ARASH One does not enable optional access on your behalf.
- Reversible: you can disconnect at any time.
Gmail consent
ARASH One requests read-only access only after you choose to connect Gmail. Suggested entries still require separate confirmation before they become part of your ledger.
Enhanced receipt processing
On-device OCR is the default. Enhanced third-party processing is off by default and requires your own API key and deliberate activation.
Changing your mind
Disconnect a service in Settings, revoke provider permissions, or erase locally stored information. Revoking a connection prevents future access; erasing your ledger removes the financial records held on that device.