Privacy Policy

Chockful Budget is a private-use household budgeting and cash-flow planning application. This policy explains how it handles financial information and how its planned optional Gmail connection will handle Google user data.

Current status. Chockful's Gmail connector is not active. These public information pages cannot access your Google Account or financial records. A user must individually authorize Gmail in the private application when that feature is available.

Who uses this service

Only invited, authenticated household members can use the private budgeting application. Shared Household information is available to authorized household members. Owner-private Personal financial information and original private emails must stay separate unless the owner explicitly chooses to share selected information.

Google data and permissions

When an account owner separately connects Gmail, the application will request the gmail.readonly scope so it can read relevant Gmail messages and their attachments for financial-bill discovery. The openid and userinfo.email permissions identify which Google mailbox was authorized, so that access remains bound to the correct household member. The Gmail permission grants technical access to messages throughout the authorized mailbox, even though Chockful intends to focus processing on financial messages selected by user-defined filters and bounded searches. Gmail access does not permit sending, deleting, marking read, or modifying messages.

How Gmail information will be used

For an authorized account, Chockful may examine the sender, subject, date, text, and relevant attachments to classify potential bills, statements, receipts, subscriptions, and unrelated messages, identify due dates and amounts, compare recurring charges, and offer a private review queue. A proposed bill will not update a shared financial plan or mark a charge as paid until the owner explicitly approves the relevant changes. The owner can keep information private, add a bill to their own Personal plan, share selected bill facts with the Household plan, or dismiss it.

Storage and security

The private application stores household planning records and reviewed financial evidence on restricted server-side services. Before Gmail connection is enabled, OAuth refresh tokens must be encrypted at rest and restricted to the authorizing member; tokens must not appear in the public website, browser-visible financial pages, or public logs. The bill-discovery design minimizes copied email data: only necessary message identifiers, evidence, classification and extracted bill details should be retained, with any retained originals and attachments kept in owner-private storage. Financial data access uses authenticated household/member authorization. The public pages do not run email tracking, inbox scans, forms, or advertising analytics.

Sharing and external processors

Google operates Gmail and OAuth; Cloudflare hosts the application infrastructure, and Supabase supports user authentication. If the owner separately authorizes AI-assisted processing in a future Gmail feature, the application may send only task-relevant permitted email excerpts or attachments to the configured AI provider, with applicable processing disclosures. No Gmail content is automatically shared with another member. Chockful does not sell Google user data, use it for targeted advertising, or use it to train generalized artificial intelligence or machine-learning models. Google user data use is limited to providing or improving user-facing bill discovery and security, consistent with the Google API Services User Data Policy, including its Limited Use requirements.

Retention, access, and deletion

Authorized account owners should be able to pause or disconnect their Gmail connection to stop further collection, and can revoke access independently in their Google Account third-party connections. Gmail connection and deletion controls will be implemented before the Gmail feature is offered. Reviewed household bill entries may be retained as financial records independently of their source email after explicit approval. Backups may retain historical copies for operational recovery under applicable retention practices. For access or deletion requests while these features are being implemented, contact the operator using the address below.

Changes and contact

This policy will be updated when Gmail connection, retention controls, or any external AI processing are activated or materially changed. Questions, consent concerns, and requests to review or delete stored information can be directed to saundersallan@gmail.com.

This page does not grant access to the private app. Other members do not acquire rights to owner-private Gmail messages just because they share a household.