Privacy policy
This is a draft pending legal review. It has not been reviewed by a lawyer yet, and it will change before launch.
Grinance is a spending planner. This policy describes what personal data the app holds, where it lives, who processes it and what you can do about it.
What the app holds
The email address you sign up with; your display name, timezone, interface language and base currency, including its change history; and the plan items you enter with their labels, categories, amounts, currencies, directions, schedules and dates. Sign-in records: a passkey's public material, a password hash or a linked Google or Apple account identifier, plus session records while you are signed in. Grinance never connects to a bank and never holds account numbers, card numbers, balances or government identifiers.
Where the data lives
Grinance runs on Cloudflare. Your data is stored in Cloudflare D1, the application database, and exchange-rate snapshots in Cloudflare KV; sessions and sign-in records live in D1 as well. These are Cloudflare-hosted services, and the region follows Cloudflare's placement rather than a per-user choice.
Who processes the data
Cloudflare is the only processor: Workers to run the app, D1 for the database, KV for exchange rates and Email Service for sign-in codes, password resets and reminder emails. There is no third-party analytics, no advertising and no error reporter that captures your data. Exchange rates come from the European Central Bank's public feed, which receives nothing about you.
What reminder emails contain
A reminder email lists the labels and amounts of the plan items due that day, converted to your base currency. Turning reminders on therefore puts financial details into an inbox Grinance does not control, and the settings page says so before you turn them on.
How long it is kept
The reminder log, which records that a digest was sent, is pruned after 90 days. Plan items, categories and preferences stay until you delete them or delete your account. Deleting your account removes every row that belongs to you, and the session in your browser stops working.
Your rights
In settings you can export your plan items, categories and preferences as a JSON document, and you can delete your account permanently. Those two actions cover access, portability and erasure for the data the app holds. For anything else, write to the contact address below; Grinance answers privacy requests within 30 days.
Contact
[TO BE COMPLETED BY THE OPERATOR: contact email for privacy requests]