Privacy — Finance Planner

The promise, and why it holds

Your plan is written to your own browser, and — if you turn syncing on — to a private corner of your own Google Drive. It never reaches our servers, in transit or at rest. There is nothing for us to lose, sell or hand over.

Where the data actually is

It is written to your device first: Every change goes into this browser’s own storage before anything else happens. That is not a cache of a server copy — it is the copy the app reads and writes.

Backups go to your Drive, not ours: Turn syncing on and the plan travels from your browser straight to your own Google Drive. Our server is not in that path: it never receives, proxies or stores the plan, in transit or at rest.

Hidden even inside your own Drive: The file is written to Drive’s app-private area rather than among your documents. Only this app, with the one narrow permission you granted, can read it.

No bank login, ever: Nothing here asks for a bank login, a card number or an account number, because nothing here connects to a bank. There is no credential to leak.

No trackers, no ad tech, no profile: No analytics scripts, no advertising pixels, no third-party fonts or CDNs. Nobody is building a picture of you out of this, because nobody is watching.

You can walk away with everything: Export the whole plan as JSON whenever you like, delete the Drive file yourself, or revoke this app’s access from your Google account. We cannot reach any of it.

What connecting a Google Drive grants

Syncing is optional, and off until you turn it on. When you do, Finance Planner keeps your plan in your own Google Drive so the same year opens on your laptop and on your phone. Here is everything that permission covers.

One permission, the narrowest Google offers: Finance Planner asks for the application-data folder in your Drive (the drive.appdata scope) and nothing else. That folder is hidden and private to this app: the permission cannot see, open or even list any other file in your Drive.

Your Drive holds the plan — we never do: The plan file travels from your browser to Google directly. Our server brokers the connection and stores your email address and whether a Drive is connected; the plan itself never reaches it, in transit or at rest.

Used to sync your plan, and for nothing else: Data obtained through your Google Account is used only to keep your own plan in step across your own devices. It is never sold, never used for advertising, and never used to train a model.

Yours to switch off: Disconnect the Drive from inside the app, or revoke access at any time from your Google Account permissions page. The file it wrote stays in your Drive until you delete it, because it is yours.

The one permission requested: https://www.googleapis.com/auth/drive.appdata