This policy describes the private Financial Core Family application and its information-only website.
Through gmail.readonly, Financial Core can read messages and attachments in the two accounts personally connected by the owner. It uses message identifiers, dates, senders, subjects, content and relevant documents to detect and reconcile orders, payments, invoices, shipping and credit schedules. Message IDs and source references help prevent duplicate processing. gmail.send is requested only for the primary Gmail account to send reports and reminders to that account. The secondary Gmail connection does not request send permission.
Use and transfer of information received from Google APIs are limited to the user-facing purposes described here and subject to the Google API Services User Data Policy, including its Limited Use requirements.
Imported records, extracted evidence, source references and local backups are stored on the owner's computer. Some underlying financial and evidence records are stored in the local SQLite database and exported files; this policy does not claim that all such files are encrypted. OAuth credentials and certain protected source archives use Windows DPAPI. Local evidence remains until the owner removes it through an appropriate maintenance procedure; there is no general automatic deletion period implemented.
Google processes Gmail API requests and delivers self-addressed messages. Reports can contain the owner's financial summary. Configured bank providers and other connected services process their respective authorized requests under their own policies. The application does not publish the local database, source emails or financial interface on this website. It does not implement advertising or sale of Gmail data.
The owner chooses which accounts to authorize and may revoke Google access in their Google Account security settings. Revocation stops future authorized access; it does not automatically erase previously imported local records. The owner can request or perform local evidence removal separately, while preserving any required financial audit history.
No bank password or one-time bank code is collected through this website. Protecting the Windows session, local files and backups remains important. Access tokens can expire or be revoked. The application cannot guarantee uninterrupted access to Google or banks.
These static pages contain no financial dashboard, payment form, analytics script or application credentials. The selected hosting provider may process ordinary connection logs under its own policy. This policy should be reviewed if hosting or application behavior changes.