Privacy Policy

Brockmeier Finances is a private, self-hosted personal finance application operated by its owner for their own household use. It is not a public service, has no user accounts beyond its single owner, and does not offer its services to the general public. This policy describes what data the application handles and how it is protected.

The application stores, in a database controlled by the owner:

• Financial account data — balances, transactions, holdings, and institution names, retrieved through Plaid from accounts the owner has linked. Bank credentials are never seen or stored by this application; authentication happens directly with the institution through Plaid.
• Email and calendar metadata — if the owner connects Google services, the application uses read-only scopes and stores metadata only (sender, subject, snippet, event times). Full email bodies and file contents are not persisted.
• Documents — files the owner explicitly uploads to the vault.
• Settings and planning inputs — budgets, goals, and assumptions the owner enters.

• The database (Supabase/Postgres) is accessible only through server-side code using a service-role key. Row-level security is enabled on every table with no public policies, so the public API key can read nothing.
• Third-party OAuth tokens (for example, Google refresh tokens) are encrypted at rest with AES-256-GCM using a key that exists only in the server environment, never in the database.
• Login passwords are stored only as salted hashes, never in plaintext.
• The session lives in an httpOnly, secure cookie, never readable by client scripts.
• All traffic to a deployed instance runs over HTTPS.

The application relies on a small set of processors, each receiving only what its function requires: Plaid (account aggregation), Supabase (database hosting), Anthropic (the AI assistant — relevant financial context is sent to the Claude API when the owner uses the assistant), Google (optional read-only Gmail, Calendar, and Drive connections and optional sign-in), and the hosting platform serving the deployment. Each operates under its own privacy policy.

• Data is never sold, rented, or shared for advertising — there is no one to sell it to; this is a single-user tool.
• The application cannot move money, execute trades, or make payments; this exclusion is enforced in its code, not just policy.
• The AI assistant proposes; every change it wants to make requires the owner’s explicit approval.

This application is not directed at children and is not intended for use by anyone under the age of 13. It does not knowingly collect personal information from children under 13. If you believe a child’s information has ended up in an instance of this application, contact the owner at the address below and it will be deleted.

Data persists until the owner deletes it. Disconnecting a linked institution or Google account stops new collection; the owner can delete stored records and revoke third-party access at any time from the application’s settings and from the provider’s own security console (for example, Google account permissions or the bank’s connected-apps page).

Material changes to this policy will be reflected on this page with a new date. Questions: charliebrockmeier@gmail.com.