Privacy Policy

FamilyLedger (AccountBook) — Household Expense Tracker

This Privacy Policy explains how FamilyLedger / AccountBook ("the App," "we," "us," or "our") collects, uses, shares, and protects information when you use our household expense-tracking mobile application, website (familyledger.us), and related services (together, the "Service"). The Service is operated by Jayden Shin ("Developer").

By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect only the information needed to run your household ledger. The categories below describe what we collect and why.

Account Information

• Your email address and authentication credentials (stored and managed by our authentication provider; we never store your password in plain text).
• Profile details you choose to provide, such as a display nickname, avatar preference, preferred language, currency, and notification preferences.
• Legal consent records, including the document type, version, and timestamp when you agree to our Terms of Service and Privacy Policy.
• Family group membership: when you create or join a household family group, we record which accounts belong to that group, the group owner, and each member's display nickname and calendar color.

Receipt Data

• Photos of receipts you capture or upload through the App (EXIF metadata is stripped before upload).
• Information extracted from those photos, including merchant name, purchase date, line items, amounts, and expense categories assigned automatically by an AI language model.
• Receipts extracted from a connected email account (see "Email Receipts" below), and expenses or cash balances you enter manually.

Financial Data from Linked Accounts

• If you link a bank or card account, we receive account and transaction data from our banking provider, including merchant or payee description, amount, posting date, account balances, and account identifiers needed to keep the connection in sync.
• We do not receive, see, or store your bank login credentials. Authentication with your financial institution is handled entirely by Plaid Inc. (see Section 3).

Email Receipts

• If you connect a Gmail account (using read-only scope gmail.readonly), we access only messages needed to identify and extract receipt or order-confirmation emails, and only after you authorize access through Google's sign-in consent screen.
• We do not read, store, or use the content of your other personal emails.

Device, Usage, and Subscription Data

• Device and app information needed to operate the Service, such as device platform, operating system version, and app version.
• A push-notification token if you enable notifications, used only to deliver the notifications you have turned on.
• Subscription status (for example, Free, Plus, or Pro plan) and purchase history provided by our subscription platform. We do not receive or store your full payment-card details; payments are processed by the Apple App Store or Google Play.

2. How We Use Your Information

We use the information above only to operate and improve the Service:

• To record, categorize, and summarize your household spending, including monthly totals, calendars, and category breakdowns.
• To synchronize your ledger across your devices and, where you have joined a family group, with the members of that group (see Section 4).
• To detect and merge duplicate expenses—for example, where the same purchase appears both as a receipt and as a bank transaction.
• To send service notifications you have enabled, such as weekly spending summaries. You can turn these off at any time in the App's settings.
• To manage your subscription, verify email ownership, and enforce plan features.
• To maintain the security of the Service, prevent abuse, and comply with legal obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

3. Financial Data and Plaid

Account linking is provided by Plaid Inc. When you connect a bank or card account, you enter your credentials directly into Plaid's secure interface; those credentials never pass through or rest on our servers. Plaid provides us with an access token, which we store in an encrypted secrets vault and use only to retrieve your account and transaction data for your ledger.

Plaid's handling of your information is governed by Plaid's own End User Privacy Policy, available at https://plaid.com/legal. You may disconnect a linked account at any time from the App's settings; disconnecting removes the stored token and stops further data from being retrieved. Transaction data already imported into your ledger remains until you delete it.

4. Family Sharing

The Service is designed for households. If you create or join a family group:

• Expense records in the shared ledger—including receipt data, amounts, categories, and bank transaction entries—are visible to all members of that family group.
• The bank and email accounts you personally connect are private to you and are not visible to other family members; only the resulting expense records are shared. Other members can see how many bank connections the family has in total, but not which institutions they are or who connected them.
• If you join another family group or are removed from a family group by its owner, your own spending records and connected accounts move with you to your destination or individual family ledger.

Only join a family group with people you trust with your spending information.

5. Service Providers We Share Data With

We share information only with the service providers needed to run the App, under terms that limit their use of the data to providing services to us:

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights and safety of our users. We do not sell personal information to third parties, and we do not share financial data with data brokers or advertisers.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account or request deletion, we delete or anonymize your personal information, including receipt images, connected tokens, and imported transactions, except where we are required to retain limited records by law. Backups containing deleted data are purged in the ordinary course of operations.

7. Security

We use technical and organizational safeguards designed to protect your information, including encryption of data in transit (TLS) and at rest, Row-Level Security (RLS) access controls that restrict each family's data to its authenticated members, EXIF stripping on uploaded receipt images, and encrypted vault storage of third-party access tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; you are responsible for keeping your account credentials confidential.

8. Your Choices and Rights

Regardless of where you live, you can:

• Access and update your account nickname, avatar, and expense records in the App.
• Delete individual receipts, transactions, or request full account deletion.
• Disconnect linked bank or email accounts at any time from the App's settings.
• Turn off push notifications in the App's settings or your device settings.
• Contact us at the address in Section 12 to request a copy of your data or assistance with any privacy request.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA") gives you the following rights:

• Right to know: request the categories and specific pieces of personal information we have collected about you, the sources of that information, and our purposes for collecting it.
• Right to delete: request deletion of your personal information, subject to legal exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, so no opt-out is required. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA. To exercise a California right, contact us using Section 12.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change, we will post the updated Privacy Policy in the App and on familyledger.us/privacy, update the effective date above, and where required, request your renewed consent.

12. Contact Us

If you have questions about this Privacy Policy or your information, contact us at:

Jayden Shin
200 Tudor Dr., Winchester, VA 22603
Email: gagebu.support@gmail.com