Privacy

Draft. This is a placeholder written by Claude, not legal advice and not reviewed by a lawyer. It must be replaced before anyone is charged.

The short version

Your budget is stored by your own browser, on your own device. We don't have a copy of it. (When optional sync arrives, it will travel between your devices encrypted with a key only you hold.)

What we actually hold

If you subscribe, our payment processor (Stripe) holds your email address and card details under their own terms; we see your email address and a record that you paid. That is the entire set of personal information we hold.

Beta applications

If you apply for the beta, what you type into the form is stored by our web host, Netlify, and emailed to us. We use it only to choose testers and contact you, and delete it on request.

Your bank connection

Bank data reaches your device through SimpleFIN, which you subscribe to directly. The key that grants read-only access is stored by your browser and is never sent to us. You can revoke it at SimpleFIN Bridge at any time, which stops access even from a device you no longer have.

If you turn on sync

Sync is optional. If you turn it on, your budget is encrypted on your device, with a key made from your passphrase, before it's sent to our sync server. The server stores it without being able to read it, and so do we. We keep a scrambled form of your email (so you can sign in) and of your sign-in secret, never the passphrase itself. We see how much encrypted data each device sends, and when. Deleting your sync account in Settings erases everything the server holds for you.

Analytics

The site measures page visits without cookies and without identifying anyone. The app itself sends us nothing.

Your rights

Under PIPEDA you may ask what we hold about you, ask for it to be corrected, or ask us to delete it. Write to hello@lastloonie.ca and we will answer within 30 days. Deleting your budget is something you do yourself, in Settings, because we never had a copy.