A few nights ago, Michael and I sat down with our household finances and came to a conclusion: We were spending more money than usual.
Now, I know what you're thinking. Well, Meredith, aren't we all?
But this wasn't the usual "we overdid it on takeout" realization. Our budget was still largely intact, and we were still saving money — we just weren't saving as much as we were expecting.
We combed through our transactions, checked the usual suspects, and compared a few months of statements. Nothing jumped out.
That's when Michael, ever the lawyer, made his case. "Why don't we just run everything through ChatGPT or Claude and see what it finds?"
Actually, that wasn't a bad idea.
Sorting through hundreds of transactions in search of a pattern is exactly the kind of tedious work AI does well, and it does it in seconds.
"And didn't ChatGPT just release something that lets you connect your bank accounts directly?" he added.
Yep. It did.
And while I could absolutely see the appeal of having a little AI financial detective constantly monitoring our accounts, I wasn't particularly enthusiastic about handing over access to every dollar we earn, save, invest, and spend.
Call me old-fashioned.
Or paranoid. (Then again, with tech's history of data leaks and recent stories of AI agents going rogue and breaking out of their sandboxes, I'd argue that a little paranoia has been earned.)
Still, I started wondering whether we could get the benefits of AI analysis without the standing connection. Turns out, we can. And depending on how much you're willing to share, there are several ways to do it.
Connecting vs. Uploading: The Distinction That Actually Matters
First, it's worth being clear about what "connecting your bank account" to an AI tool actually means, because it's easy to imagine something safer (or scarier, depending on your current feelings regarding AI) than what's really happening.
ChatGPT's Finances feature, which OpenAI launched in May 2026, links to your accounts through Plaid. According to OpenAI, the connection is read-only: ChatGPT can see balances, transactions, investments, and debts, but it can't see full account numbers, move money, pay bills, or make trades. So no, connecting ChatGPT to your bank account doesn't hand it spending control over your debit card.
That said, AI can spend money on your behalf when you give it that kind of permission. Microsoft's Copilot Checkout, built on Mastercard's Agent Pay, began letting consumers complete purchases in January 2026, and in June 2026 Visa and OpenAI announced a partnership to let agents in ChatGPT buy things within user-set spending limits.
Read-only is a feature of one particular connection, not a limit on AI in general. Whenever you link an AI tool to anything involving your money, read exactly what you're authorizing.
The bigger difference, though, isn't what the AI can do. It's how long it can see. A connection is ongoing: New transactions keep flowing in until you disconnect, the service sees everything in the linked accounts, and your data passes through two companies instead of one. OpenAI says synced data is deleted within 30 days of disconnecting, but anything you discussed in past conversations stays there until you delete those, too.
An upload, by contrast, is a one-time snapshot of only what you choose to share. Yes, an upload is still processed by that company and governed by its retention policies, but it gives you control over how much you share. It's not invisibility, but it's a meaningful difference.
What Can AI Actually Tell You About Your Spending?
Most banking apps already categorize your spending. They'll tell you that you spent $1,800 on groceries last month, which is helpful, but rarely news.
Where AI gets interesting is when you ask it to investigate. If your grocery bill has climbed from $1,200 to $1,800 a month over six months, AI can compare individual transactions to see whether you're shopping more often, spending more per trip, or switching to pricier stores. It can surface forgotten subscriptions, spending spikes in the week after payday, or an extra $400 a month in small purchases that never seemed significant on their own. The trick is figuring out how much information it actually needs to answer those questions.
Option 1: Give AI Your Spending Totals, Not Your Transactions
The most private approach is not to upload your statements at all. Instead, pull a few months of category totals from your banking app or budgeting software:
| Category | July | August | September |
|---|
| Groceries | $1,350 | $1,475 | $1,825 |
| Restaurants | $650 | $725 | $890 |
| Shopping | $800 | $1,100 | $1,250 |
| Subscriptions | $175 | $190 | $235 |
Illustrative figures
Then ask AI which categories grew fastest, where a 10% reduction would matter most, or how much you'd save in a year by returning to earlier levels. The analysis doesn't require knowing where you bank or where you shop. (The service will still know who you are if you're signed in, but a handful of category totals reveals very little about your life.)
The trade-off is that AI can spot a $475 jump in groceries, but it can't tell you whether that came from more trips, higher prices, or one particularly ambitious Costco run. For that, you'll need to share more detail.
Option 2: Give AI a Sanitized Version of Your Transactions
This is probably the approach I'd choose for our household.
Most banks and card issuers let you export transactions as a CSV file, which is essentially a spreadsheet. I'd download three to six months of history and build a new file with just four columns: Date. Merchant. Amount. Category. Then I'd generalize anything sensitive. AI doesn't need the name of my doctor or my children's daycare, so those become "Medical Provider" and "Childcare." Account numbers, card numbers, addresses, and transaction IDs come out entirely.
Why bother? Because even without your name attached, a detailed transaction history reveals where you shop, travel, see doctors, send your kids to school, and donate money.
One important caveat: Removing identifying information doesn't make a file anonymous. Unusual purchases or precise dates and locations can still make a spending history recognizable, and if you're signed in, the file is tied to your account regardless. Sanitizing reduces what you expose. It doesn't eliminate it.
Option 3: Use AI's Privacy Settings, But Understand What They Do
You might be thinking, Can't I just open an incognito browser window? Unfortunately, no. Incognito mode keeps your browsing history off your own device. It doesn't stop websites from receiving what you submit, and it certainly doesn't erase anything from a company's servers.
AI services do offer their own privacy features, though. ChatGPT's Temporary Chat keeps conversations out of your history and memory and out of model training, but OpenAI says it may keep a copy for up to 30 days for safety purposes. Claude's Incognito Chats work similarly: Anthropic says they're excluded from your history, memory, and model training, and retained for 30 days by default.
Separately, both services let you opt out of model training for your regular conversations, though those still stay in your history until you delete them.
In other words, "temporary" and "incognito" don't mean your information vanishes the moment you close the window. They mean it's kept out of your history and out of training, then deleted on a schedule. That's genuinely useful. It's just not the same as never having shared it.
Personally, I'd stack precautions: sanitize the file, turn off model training, and use a temporary or incognito chat. And because policies change, check the current settings before uploading anything sensitive.
Option 4: Keep Everything on Your Own Computer
If you want to go further, skip cloud-based AI entirely. Some AI models can be downloaded and run on your own computer, and when configured to work offline, they can analyze your files without sending them anywhere. That's about as close as you can get to a private AI financial analyst.
The catch is that setup takes some technical comfort, the analysis may be slower or less sophisticated than a leading cloud service, and you'll need to make sure nothing is quietly sending data out through connected tools. For a simple spending review, most people won't need to go this far. But it's worth knowing the option exists.
You Can't Prompt Your Way Into Privacy
There's one more misconception I want to address. You might be tempted to add something like this to your AI request: "Do not remember, store, share, or use any of this information after our conversation ends."
Sounds reasonable, right?
Unfortunately, that instruction doesn't override the service's actual data-handling policies. You can ask an AI assistant not to repeat sensitive details in its answers, but you can't make a company's servers delete your uploaded files by typing a command into a chat box. The same goes for connected accounts: Telling ChatGPT to "forget" your transactions doesn't revoke the connection. Only disconnecting does.
Real protection comes from the service's privacy controls, its retention policies, and the decisions you make before you share anything. So my rule is simple.
Never give AI information you wouldn't be comfortable having processed and/or saved by the company providing it.
And when possible, give it less.
Let AI Do the Math. You Decide What It Sees.
Michael and I still haven't found our leak. But we have a plan. We'll pull our recent transactions, strip out what doesn't belong in an AI conversation, and let the technology look for the patterns we missed.
Maybe it'll uncover a pile of forgotten subscriptions or a category that's been quietly creeping higher for months. Maybe it's not actually a leak at all but a math error from when I made the budget. Or maybe it'll confirm what we already suspect: that raising four-year-old twin boys is an extraordinarily expensive hobby.
Whatever the answer, I like using technology on our own terms, sharing what it needs for one job instead of everything, indefinitely.
Because AI has the potential to be a fantastic financial assistant.
But it doesn't need to be your banker.
And it certainly doesn't need the keys to the vault.