Wafra records your spending from your bank's messages. The two platforms do that in genuinely different ways, so each has its own policy rather than one document hedging about both.
iOS gives apps no access to SMS, so automatic capture uses a Shortcut you build and a relay that discards message text and holds only an encrypted result your phone collects.
The app reads bank messages on the device. There is no server and nothing leaves your phone.