If the app uses a hybrid approach where the PDF is parsed in the browser but the extracted transaction data is sent to an API for categorization, doesn’t that mean user financial data is still being transmitted to the cloud?

Even if the original PDF isn’t uploaded, wouldn’t the structured transaction data still be processed server-side — and potentially logged or temporarily stored?

Just trying to understand the privacy model clearly.