Privacy Policy – Financial Planner
Financial Planner (the "App") is a personal and small-business finance tracker for Windows. This policy explains what information the App handles, where it goes, how it is protected, and what you can do about it. It is written to be read, so it is deliberately plain.
1. Summary
- Your financial records are kept on your own computer, encrypted. We do not run a server, and we never receive your records or your passphrase.
- You sign in with your Google account. If you turn on Google Drive sync (Auto Sync is off until you choose it), an encrypted copy of your data file is stored in a hidden folder of your own Google Drive that only this App can open. Google cannot read it, and neither can we.
- The App has no advertising, no analytics and no tracking. It connects only to Google, and only for sign-in and sync.
- If you lose both your passphrase and your recovery key, nobody can recover your data. That is the price of privacy that does not depend on trusting us.
2. Information the App handles
| Information | Why | Where it is kept |
|---|---|---|
| Your records: currencies, accounts, liabilities, categories, transactions, cash-flow rules, history, settings. Everything is typed in by you. | The App's purpose: tracking income, expenses, balances and reports. | An encrypted data file on your computer. With sync on, the same encrypted file is also in your Google Drive. |
| Your name and e-mail address | Shown in the App. The e-mail address comes from your Google account. | Inside the encrypted data file. |
| Google account details: account identifier, e-mail address, name | To know who is signed in and to give each Google account its own separate data folder (named by a one-way hash of the account identifier). Your Google profile picture is not used or stored. | On your computer, in Windows secure storage, so the next start can skip the browser sign-in. |
| Google sign-in token (a "refresh token") | To keep sync working without asking you to sign in every time. | On your computer, in Windows secure storage. Never sent anywhere except back to Google. |
| Sync bookkeeping: a random device identifier, your Auto Sync choice, the time of the last sync, a fingerprint of the data file | To know whether this computer or Google Drive has newer data. | A small file next to your data on your computer. |
| Sync labels stored beside the Drive file: a revision number, a random check value, the data file's random identifier, a random device identifier, your computer's name and the time the data was last in use | To detect two devices changing the data at once and to warn you ("open on another device"). | Your Google Drive, in the hidden App folder. None of it is financial information. |
| A technical log of events and errors | To diagnose problems. | On your computer only. It is never uploaded. |
The App does not read your contacts, location, other files, bank accounts or messages, and it does not connect to your bank.
3. How your data is protected
- Your data file is encrypted with AES-256-GCM using a random data key. The key is stored only in wrapped (encrypted) form, protected by your passphrase and, separately, by a recovery key that is shown to you once at setup.
- Your passphrase is never stored. It is turned into a key (PBKDF2-SHA256, 1,000,000 rounds) when you unlock the App, and the wrong guesses are slowed down.
- The decrypted data exists only in the App's memory while you are logged in. The App locks itself after 15 minutes without activity, and when you choose Log out.
- The file uploaded to Google Drive is the same encrypted file, so Google can see that the file exists, its size and when it changed, but not what is in it.
- Because we hold no copy of your keys, we cannot reset your passphrase or open your data for you.
4. Google sign-in and Google Drive
The App uses Google's OAuth 2.0 sign-in in your web browser. It asks only for these permissions:
| Permission | What it gives the App | Why it is needed |
|---|---|---|
openid, email, profile | Your Google account identifier, verified e-mail address and name | To recognise you, show who is signed in, and recognise you again on your other computers |
drive.appdata | Access to a hidden "application data" folder in your Google Drive that belongs to this App only | To store and fetch your encrypted data file for sync and for restoring it on a new computer |
The App cannot see, list, open or change any other file or folder in your Google Drive. The hidden folder does not appear in your normal Drive view and does not use any meaningful amount of your storage.
What happens with sync
- When you save changes and Auto Sync is on, the App uploads the encrypted file a few seconds later. Auto Sync is off until you choose it (the App asks once); you can change it in the sidebar or in Settings → Google Drive Sync, or use Sync now to upload on demand.
- On a new computer, signing in with the same Google account downloads that encrypted file; you then unlock it with your passphrase.
- If two devices change the data at the same time, the App does not overwrite either one. It asks you which copy to keep and first saves the other one as an encrypted backup file on your computer.
Google user data: use and sharing
- Google account information is used only to sign you in and to label your account in the App.
- Data in the Drive app folder is read and written only to provide sync to you.
- We do not receive, transfer, sell or share Google user data, and we do not use it for advertising. Nobody working on the App can read your data: it reaches no server of ours, and what is in Google Drive is encrypted.
- The App's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Where your information goes
The App connects to the internet only to talk to Google (accounts.google.com, oauth2.googleapis.com and www.googleapis.com), only for sign-in and sync. It sends nothing to us or to any other company, and contains no analytics or advertising. If you export a report (CSV, Excel or PDF), the file is saved where you choose, and from then on you are responsible for it.
6. Keeping and deleting your data
- On this computer: your data stays until you delete it. Settings → Clear Data removes records (after you confirm with your passphrase). Uninstalling the App permanently deletes all of its data on that computer.
- In Google Drive: Settings → Google Drive Sync → Delete my cloud data removes the encrypted copy (after you confirm with your passphrase) and switches sync off. Uninstalling the App does not delete the Drive copy. You can also remove it from your Google account under Drive settings → Manage apps, or take the App's access away at myaccount.google.com/permissions.
- Start over: if you forget both your passphrase and recovery key, the unlock screen's "Start over" (after a fresh Google sign-in) deletes the encrypted copy in Google Drive first and then everything on this computer for that account, and you begin again with an empty App.
- Backup files made when you resolve a sync conflict stay on your computer in the App's data folder until you delete them; they are encrypted like the main file.
- Because there are no automatic backups of the App's own, deleting everything everywhere is permanent. Export any reports you want to keep.
7. Your responsibilities
- Keep your recovery key somewhere safe and separate from your computer. It is the only way back in if you forget your passphrase.
- Choose a passphrase others cannot guess, and keep your Windows account and Google account secure. Anyone who can use your unlocked, logged-in computer can see your data, which is why the App locks itself after 15 minutes idle.
- Log out on a shared computer.
8. Early-access period
While the App is in testing, Google limits sign-in to a list of approved test users, shows an "unverified app" warning, and expires saved sign-ins after about a week (you simply sign in again; your data and passphrase are unaffected). These are Google's rules for apps that have not completed Google's verification, not a sign that anything is wrong.
9. Children
The App is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect information from them.
10. Your rights
Your data is on your own computer and in your own Google Drive, so you can see, export, correct and delete it yourself, and you can withdraw the App's access to Google at any time. Under applicable data-protection laws you may have further rights; since we do not receive your records there is generally nothing for us to hand over or erase, but contact us and we will help where we can.
11. Changes to this policy
If we change this policy we will update the date above and, for material changes, tell you in the App or on our website before they take effect.
12. Contact
Naanayam Intellect & Solutions
Email: [email protected]
Website: NaanayamIntellect.com