Privacy policy
Effective October 11, 2026
Personal Finance is a private web application run by one household for its own use. It is not offered to the public. This page explains what the application collects and how it is used.
Who can use it
Only the two people on the household’s allowlist can sign in. Anyone else who tries is refused and no account is created for them.
What it collects
- Sign-in details. When you sign in with Google, the application receives your email address, name and whether Google has verified the address. It does not receive your Google password and does not read your Google data beyond that.
- Second-factor details. Passkey public keys, an encrypted authenticator-app secret and hashed recovery codes, used only to check that it is you.
- Financial data from Plaid. When you link a bank, the application uses Plaid to read account names and balances, transactions, investment holdings and loan details. Plaid has its own privacy policy at plaid.com/legal. The application is read-only: it cannot move money.
- Your own settings. Rules, categories and edits you make to transactions.
How it is used
Only to show the household its own finances and to keep sign-in secure. The data is not sold, shared with advertisers or used for marketing.
AI assistants
A person in the household can connect an AI assistant (such as Claude or ChatGPT) so it can read the household’s accounts, balances, transactions, budgets and spending. This is off unless every person in the household has agreed, and any one of them can withdraw at any time, which disconnects every assistant. An assistant can only read; it cannot change anything or move money. What it asks for is sent to the company that runs it, which handles it under its own terms and privacy policy. Some assistants keep what they receive, learn from it unless that is turned off in their settings, or let people review it, and may keep it after you disconnect. This application cannot see or change that. Because the data covers everyone in the household, including a partner’s transactions, each person agrees for themselves. Connecting, disconnecting and each tool an assistant calls (with short search terms, never the answer) are recorded in the audit log.
Where it is stored
In a private database hosted by Turso, served by an application hosted on Vercel. Plaid access tokens and authenticator secrets stay on the server and are never sent to the browser. Sessions end after 30 minutes of inactivity and after 12 hours at most.
Keeping and deleting data
Data is kept while the household uses the application. Removing a bank disconnects it at Plaid and deletes its transactions. “Delete all data” on the Security page disconnects every bank and deletes the household’s financial data. Sessions end within 12 hours and the record of sign-ins and changes is kept for two years. To have your account and data deleted, email the address below.