Privacy policy

Data we use and why

On the public website, we receive ordinary server request information such as IP address, browser information and the pages requested to deliver and protect the site. We do not run advertising or analytics cookies on this website.

If you create an account, we process your email address, authentication information, profile name and optional photo to sign you in and identify you to your household. The app stores the records you enter, accounts and payment methods you describe, plans, budgets, bills, IOUs, household membership, invitations and settings to provide the service. We also use service and security logs to troubleshoot abuse and reliability.

The app uses a session cookie to keep you signed in. It may keep app data and preferences on your device to support offline use and synchronize changes when a connection returns. These functions do not require an optional cookie consent prompt. Your browser settings can clear local data; doing so may remove changes that have not yet synced. If you attach a receipt photo to a record or proof to an IOU, the file is first saved in that browser on that device. The record and attachment reference can sync to your household, but the local file will disappear if you clear site data or lose the device. You can save a copy yourself. If you separately grant Google Drive backup permission, Money Sweetie uploads queued attachments from that device to your own Google Drive and keeps the resulting file ID with the record. A household member does not automatically gain access to a file in your personal Drive. Money Sweetie does not currently store these files in its own cloud.

Google sign-in uses your Google account identifier, email address, name and profile photo to create or access your Money Sweetie account. Gmail access is a separate, optional connection. If you connect Gmail, the Email Reader searches recent messages for possible financial transactions and reads the sender, subject, date, message content and a relevant receipt image when available. It uses this information to suggest a record for you to review, edit, save or ignore. The review queue stores the sender, subject, date, Gmail message ID and proposed record; saved records may retain a source message ID to avoid duplicates and let you reopen the original message from Gmail. It does not automatically turn every message into a financial record.

If you enable the separate Gmail setting to mark messages as read or archive them, Money Sweetie requests permission to modify Gmail. It changes a reviewed message only after its record has been saved and synchronized; if you are offline, that action can wait until you reconnect. You can leave this setting off.

Google Drive import and attachment backup are separate, optional features. Import records requests read-only Drive access to list Google Sheets, Excel and CSV files and download the file you select. That permission can read more than the selected file. Attachment backup requests the separate drive.file permission to create copies of attached receipt photos and IOU proof in your personal Google Drive. Money Sweetie sends those files through its server to Google, stores the returned file IDs in your records, and uses this permission only for files the app creates. If a backup cannot complete, the device copy remains and the app can retry when connected. You can revoke Google access in your Google account. Revoking access or deleting your Money Sweetie account does not automatically delete files already created in your own Drive; you can delete those from Drive.

To propose a record from a receipt or transaction email, Money Sweetie may send relevant receipt or email text, an attached receipt image when available, and limited account and transaction context to OpenAI for analysis. The proposed details are returned to the app for your review before you save a record. We use Google user data for these user-facing features, not for advertising, lending decisions or training a general AI model. Optional push notifications require your device’s permission and a subscription endpoint. We use that endpoint to deliver app alerts.

Website feedback

When you send website feedback, we store the message, topic, optional email address, page path and submission time so we can review your feedback and reply. We use a hashed network address for short-term abuse prevention. Feedback messages and contact details are normally retained for up to 90 days, then removed during routine cleanup. Contact support@moneysweetie.com if you would like your submission deleted sooner. Please do not include passwords or sensitive financial details.

Who can see it

Members of your household can see shared household data according to the app’s sharing controls. A private account or record is handled according to its selected visibility. Take care when inviting someone: they may gain access to shared history. If you leave a household, shared records may remain for its other members, with your departing profile anonymized where applicable.

We use hosting, database, authentication, delivery and, when enabled, Google and OpenAI to operate the service. They receive information needed for those functions as described above. We do not sell personal information or use it for cross-site behavioral advertising. These providers may process data in countries different from yours. Contact us for information about the safeguards used for a transfer that applies to you.

Your choices and rights

You can edit records and account settings, manage household sharing, disconnect optional services, and turn off push notifications. In the app, Settings → Account & privacy lets you export a backup and request account deletion. See how deletion works. Depending on where you live, you may also have rights to access, correct, erase, restrict or object to processing, and receive a portable copy. You can contact us about a request or a privacy concern using the contact below. We may need to verify your identity before acting.

Our bases for processing, where the GDPR applies, include providing the service you request, maintaining security and reliability, complying with legal obligations, and your choice to enable optional integrations. You can withdraw an optional connection or device permission at any time.

How long we keep data

We keep account and household data while needed to operate your account. Deleting an account removes its personal account state; shared financial history may be retained for remaining household members in anonymized form. Backups, security logs and information required by law may persist for a limited additional period under our operational or legal retention schedules. We review retention according to purpose and applicable obligations. We use access controls and other safeguards, but no online service can promise absolute security.

We do not knowingly offer accounts to children under 16. If you believe a child’s information was provided, contact us.

Website language and currency

Website language and animation preferences stay in your browser. Currency examples use your browser’s region and time zone, without requesting your precise location. We request daily exchange rates from Frankfurter; that service receives the normal connection information needed to answer the request. Additional languages opened through Google Translate are handled on Google’s translated website.

Contact and updates

Money Sweetie is responsible for this service. For privacy requests, email support@moneysweetie.com. We will update this page when practices change and show a new update date. Material changes may also be announced in the app.