Privacy Policy

1. Scope and operator

This Privacy Policy applies to the My Finances Android application (the “App”) and the My Finances public website (the “Site”). “My Finances,” “we,” “us” and “our” refer to the developer and operator of the App and Site. Questions or requests can be sent to myfinancesapp.support@gmail.com.

This policy does not replace the privacy policies of Google, your device manufacturer, an AI provider, GitHub Pages, Hugging Face, the Bank of Canada, your email provider or another service you independently choose to use.

2. Information the App handles

Depending on the features you use, the App may handle the following categories of information:

• Financial records: account names, institutions, account types, currencies, opening balances and dates, transactions, categories, descriptions, amounts, dates, transfers, card payments, notes and record status.
• Planning records: recurring rules and occurrences, budgets, goals and progress, daily reviews, card obligations, reminder preferences and schedules.
• Investment records: profiles, holdings, trades, valuation snapshots, security prices, foreign-exchange rates, registered-account activity and user-supplied contribution-room information.
• Import and document information: selected receipt or statement files, file name and type, file hash, local document reference, extracted text, merchant, date, amount, confidence, import history, duplicate fingerprints and links to approved transactions.
• Reports: report recipes, date ranges, account and section filters, delivery settings, generated summaries and stored standalone HTML reports.
• App settings: theme, time zone, dashboard preferences, reminder settings, lock settings, synchronization status and recovery preferences.
• Assistant information: text you enter, attachments you select, the structured action being reviewed and limited financial context necessary to interpret the request.
• Google account information, if connected: the selected account’s stable Google subject identifier, email address and display name, plus identifiers for App-created Drive files and the Sheets workbook.
• Cloud AI credentials, if configured: provider, model, endpoint and the API credential you enter. The credential is encrypted using Android Keystore and excluded from Sheets and portable backups.

The App does not ask for online-banking passwords and does not connect directly to financial institutions or initiate real financial transactions.

3. Information processed locally

The financial database is stored in the App’s private storage on your Android device. Calculations such as balances, income, spending, cash flow, budget progress, goal progress, investment summaries and reports use deterministic local rules.

Receipts and statements

CSV, XLSX and PDF statements are parsed locally. Receipt images and scanned PDF pages use on-device text recognition; local parsers suggest merchant, date, total and category. These results are editable, and no extracted transaction is committed until you approve it. Original files stay where you selected them unless you separately choose a Google Drive upload.

Local AI

The App is distributed without language-model weights. If you choose to download a compatible model, the model files are saved in private, non-backup app storage and inference runs on the device. The model can propose bounded actions, but exact-cent calculations, validation and final writes remain controlled by the App. Removing a model deletes its App-private model directory.

Approximate location

If you choose “Use location” for time-zone detection, the App requests one foreground approximate location reading and maps it to a time zone on the device. Coordinates are not stored in the financial database, uploaded to us or used for advertising. You can instead select a time zone manually or use the device time zone.

4. Google Sign-In, Drive and Sheets

Google features are optional. When you tap Connect Google, the App uses Google Identity Services and requests:

• openid, email and profile to identify and display the connected Google account; and
• https://www.googleapis.com/auth/drive.file to create and manage files created by the App or explicitly shared with it.

The App does not request unrestricted access to all files in your Google Drive. It does not embed a Google client secret or save an OAuth access token in its own database. It stores local connection metadata, including the Google account identifier, email and display label, so it can show which account is connected and reject accidental account switching.

Google Sheets synchronization

If enabled, My Finances creates or reuses a workbook called “My Finances Ledger.” Structured records may include accounts, categories, transactions and movements, recurring activity, budgets, goals, reviews, card obligations, investment records, foreign-exchange data, import and receipt metadata, deleted-record markers and report schedules. The workbook is human-readable and is not end-to-end encrypted.

Synchronization uses stable record identifiers, validation, checksums and a three-way review. When a Sheet change conflicts with a phone change, the App presents the candidates rather than silently overwriting one side. Routine changes can queue automatic synchronization while an account remains connected.

Google Drive files

The App can create a My Finances folder structure for:

• Backups: versioned ZIP packages containing a manifest, checksum and the Room-backed financial-data export. Credentials, downloaded AI models and original document blobs are not included.
• Documents: original statements or receipts only after you explicitly select a Drive upload action.
• Reports: report files created by an Apps Script workflow you separately install and authorize.
• Sheets: the synchronized My Finances workbook.

After a successful connected sync, the App may create no more than one automatic Drive backup in a rolling 24-hour period and retain the newest seven automatic packages. Manual packages are not removed by that automatic retention rule.

Scheduled email reports

Phone-independent report email requires you to manually install and authorize the project’s Apps Script in your workbook. That script reads the latest synchronized workbook, creates an HTML report in your Drive, sends it through your Google account and records delivery history. Apps Script and Gmail permissions are granted to that script separately from the Android App.

Disconnecting Google

Disconnecting asks Google to revoke the App’s granted access and clears local Google connection metadata. It does not delete the workbook, backups, reports or uploaded documents already stored in your Google account. You can delete those files in Google Drive. Revoking access does not automatically remove local App records.

Google API Limited Use

My Finances’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used to provide and improve user-facing App functionality, maintain security and comply with applicable law; it is not used for advertising.

5. Optional external AI providers

Cloud AI is off by default and there is no silent cloud fallback. You may choose to configure your own API credential for OpenAI, Anthropic, Google Gemini or a trusted HTTPS OpenAI-compatible endpoint. Consumer ChatGPT or Claude subscriptions are separate from API access.

When a cloud provider is active and you make an assistant request that needs model interpretation, the App sends data directly from your device to the selected provider. A request may include:

• the text you entered;
• instructions describing the App’s permitted finance tools;
• up to 12 relevant active accounts with stable ID, shortened name, institution, type and currency;
• up to 24 relevant categories with stable ID, shortened name and type; and
• up to six recent transactions with stable ID, shortened description, type, amount and date.

This context can include information that originated locally or was synchronized from your Google Sheet. The current cloud provider request is text-based; receipt images and statement files are not automatically uploaded to a cloud AI provider. The selected provider processes requests under its own terms and privacy policy and may charge your account. Review that provider’s retention and model-training controls before enabling it.

API credentials are encrypted using Android Keystore. Disconnecting a provider removes its encrypted credential, model and endpoint configuration from the App. You should also revoke or rotate the credential through the provider if needed.

6. Other network services

7. Android permissions

• Internet: Google identity, Drive/Sheets, optional cloud AI, requested model downloads, requested Bank of Canada rates and release checks.
• Approximate location: optional, one-time foreground time-zone detection. No background location permission is requested.
• Notifications: optional reminders and report-ready alerts. Lock-screen notifications use private, non-financial wording.
• Receive boot completed: reschedules enabled local reminders and report alerts after the device restarts.
• System document/photo access: Android pickers let you choose statement, receipt, backup and export destinations without granting unrestricted file access.
• Biometric/device credential: optional App lock uses Android’s system prompt; My Finances does not receive or store biometric templates, PINs, patterns or device passwords.

8. How information is shared

We do not sell your personal or financial information. The App does not contain advertising or third-party analytics. Information is disclosed only through features you initiate or enable, including:

• Google Identity, Drive, Sheets, Apps Script and Gmail for connected Google features;
• the external AI provider you select for assistant processing;
• Hugging Face for model downloads and the Bank of Canada for requested rates;
• another person or service when you export, share or email a backup or report; and
• legal or safety disclosures if required by applicable law.

Because the App has no developer-operated synchronization or analytics backend, we do not have a central copy of your local financial database to access or sell.

9. Retention, deletion and account removal

On-device records

Local records remain until you edit, move them to Trash, permanently delete them or remove the App’s data. Trash is designed to make deletion recoverable. Some linked records have integrity rules—for example, an approved receipt and its exact transaction move to Trash and restore together. Permanently deleting that transaction removes the linked receipt metadata, but never silently deletes the original user-owned photo or PDF.

Android system backup and device-transfer backup are disabled for the App’s private financial data. Uninstalling the App or clearing its storage ordinarily removes local records, settings, encrypted provider credentials and downloaded models. Files you exported outside App-private storage are unaffected.

Google records

Disconnecting Google does not delete App-created cloud files. Delete the My Finances workbook, backup packages, reports or uploaded originals from Google Drive if you no longer want them. Soft-deleted synchronized records can remain as deletion markers so another device does not silently recreate them. Permanent deletion and subsequent synchronization remove their active content according to the App’s integrity rules.

External AI and other providers

Retention by an external AI provider, Google, Hugging Face, the Bank of Canada, GitHub or your email provider is controlled by that provider’s terms and your account settings. Disconnecting a provider in My Finances stops future App requests but cannot erase information the provider already retained. Contact the provider or use its privacy controls for those requests.

Developer requests

My Finances does not maintain an end-user account database. Therefore, we generally cannot retrieve or remotely delete data that exists only on your device or in your Google/provider accounts. If you email support, we retain the correspondence as reasonably necessary to answer, maintain support history and meet legal obligations; you may request deletion by emailing us.

10. Security

The App uses measures designed to reduce avoidable exposure, including Android private storage, cleartext-network blocking, optional biometric/device-credential App lock, recent-app screenshot protection, private notification content, Android-Keystore encryption for cloud AI credentials, HTTPS network connections, stable-ID conflict review, backup checksums and hash verification for downloaded model artifacts.

No security method is perfect. Google Sheets and Drive files are protected by your Google account and are not end-to-end encrypted by My Finances. Exported backups and HTML reports can contain sensitive information and should be stored and shared carefully. Keep your device, Google account, API credentials and release files secure.

11. Your privacy choices

• Use the core finance app without connecting Google or an AI provider.
• Deny location and notifications and use manual time-zone and in-app review controls.
• Choose whether an original receipt or statement is uploaded to Drive.
• Review Sheet conflicts and imported document fields before applying them.
• Create a portable backup or HTML export for your own records.
• Disconnect Google, disconnect a cloud AI provider, remove downloaded models or revoke provider credentials.
• Move supported records to Trash, restore them or permanently delete them through the App.
• Delete App-created cloud files directly from your Google Drive.

12. Children’s privacy

My Finances is a general personal-finance tool and is not directed to children under 13 or the minimum age required to consent to digital services in their jurisdiction. We do not knowingly collect children’s personal information through a developer-operated account or analytics service. A parent or guardian who believes a child has sent personal information directly to support should contact us.

13. International processing

Local processing occurs on your device. Google, an external AI provider, Hugging Face, GitHub and other services may process information in countries other than yours. Their privacy policies and your account settings govern those transfers. Do not enable an optional service if its processing location or terms are unacceptable to you.

14. Changes to this policy

We may update this Privacy Policy when the App’s functionality, integrations or legal obligations change. The updated policy will show a revised effective date. Material changes affecting Google data or optional provider disclosures will be reflected in the App or release information where appropriate.

15. Contact