Effective October 1, 2026
Privacy policy
Household Finance Collector is a private personal-finance app used only by Andrew and Jess. This policy explains how its Gmail collector handles information.
Information the collector accesses
With the Google account holder's permission, the collector requests only the Gmail read-only permission:
https://www.googleapis.com/auth/gmail.readonly
This permission allows the collector to view Gmail messages and settings. It does not allow the collector to send, change or delete email.
The collector may retain relevant message content, headers, attachments and source identifiers needed to identify financial activity, preserve original evidence, prevent duplicate imports and support household review. It may also record collection checkpoints, source identifiers and errors.
How the information is used
Gmail information is used only to identify household transactions, receipts, refunds and financial notices; match source evidence to household financial records; find duplicates and collection gaps; and let authorized household users review the original source behind a result.
Collected Gmail information is not used for advertising, sold, rented or shared with data brokers. The current collector does not send collected Gmail information to a third-party AI service.
Storage and security
The Google refresh credential is stored on Andrew's Windows computer and protected with Windows Data Protection API for his Windows user profile. Relevant saved messages, attachments and derived financial evidence may be stored on that computer and on the household-controlled server that runs the private finance app. Access to the finance app is restricted to Andrew and Jess through an access gate and a separate app password.
These safeguards reduce risk but cannot guarantee absolute security. Backups may retain copies temporarily until they are replaced or deleted through the normal backup cycle.
Retention and deletion
Relevant collected messages and financial records are kept for household history, reconciliation and audit until the household chooses to delete them. Collection checkpoints and error records may be kept as long as needed to prevent duplicates and diagnose missed imports.
Removing the app's Google permission stops future Gmail access. It does not automatically delete copies already saved in the household app.
To request deletion of saved Gmail information, email ajjohns2003@gmail.com from an authorized household account with the subject “Household Finance Collector deletion request.” The household administrator will remove the requested saved information and related copies where technically possible, and identify any backup copies that remain until their normal replacement or deletion. This process does not change or delete messages in Gmail.
Revoke Google access
The Google account holder can revoke access at any time:
- Open Google Account third-party connections.
- Select Household Finance Collector.
- Remove its access.
After revocation, the collector cannot read new Gmail information unless the account holder authorizes it again.
Sharing and users
The app is for Andrew and Jess only. Gmail information is not made public or shared for advertising. Information may be disclosed only when the account holder directs it, when needed to protect the household system, or when legally required.
Changes
This policy will be updated before any material change to the Gmail permission, users, storage location, sharing or use of collected Gmail information. The effective date at the top shows the current version.
Contact
Questions, access requests and deletion requests: ajjohns2003@gmail.com.