Who to contact

This policy covers Private Family Budget. Voxio Studio, based in Indianapolis, Indiana, United States, operates the service and is responsible for the platform’s processing described here. Contact us at contact@voxiostudio.com or through support. For an Etsy purchase, seller details are also available on your order receipt.

Information processed by the platform

• Account information: your account identifier, name, email address, verification and account status, and sign-in timestamps. Firebase processes authentication. Google sign-in does not give the app your Google password.
• Household and access records: household names, owner and member identifiers, names, emails, roles, workbook file IDs, invitation recipients and statuses, and security or administrative audit events.
• Purchase activation: Order references supplied by the seller, optional buyer email, access-code issuance and redemption status, access duration and expiration, and Stripe checkout-session and customer identifiers for direct website purchases. Full access codes are shown once and stored as hashes, not plaintext. Payment-card details are collected by Stripe for website checkout or by the marketplace for marketplace purchases; the app server does not receive full card numbers or card security codes.
• Support: the name, optional email, subject, messages, and private support-receipt records you submit. If you choose to include budget information in a support message, that text becomes part of the support record. Avoid sending financial details that are not needed to answer your question.
• Technical information: network requests may expose IP addresses, browser information, timestamps, and error or security information to the app server and its hosting providers. Temporary request limits use IP addresses.

Your budget workbook

Income, expenses, notes, balances, and other budget entries are stored in the family’s Excel workbook in Google Drive. In the Google Drive integration, workbook contents travel directly between your browser and Google, and are processed in browser memory. The platform’s account/admin APIs do not receive or store those workbook contents.

The platform does store the workbook’s file ID and household access records. This is not end-to-end encryption: Google stores the file, the app’s browser code processes it, and people with Google Drive permission may read it. Do not assume that deleting an app account deletes a Google Drive file or a downloaded copy.

Google permissions and tokens

Sign-in and Google Drive authorization are separate permissions. The Drive integration requests drive.file, which covers files you create or explicitly select with the app, rather than unrestricted access to your entire Drive.

The short-lived Drive access token is kept in memory and in the current browser tab’s session storage, scoped to your signed-in account. It is not sent to the app server, stored in platform metadata, or saved in persistent local storage. Logout clears this saved access. Google may require reconnection when access expires. The app does not request a server-held Drive refresh token.

Google data is used to provide the budgeting, file access, and sharing features you request. It is not used for advertising or training general-purpose AI models. Private Family Budget’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Why information is used and who receives it

Information is used to authenticate users, activate purchases, operate household permissions and invitations, save or load the selected workbook, answer support requests, show service notices, prevent abuse, and meet applicable obligations.

Household members receive information and workbook access according to their roles. Household owners can see membership and invitation details. Authorized administrators can see account, purchase, access, audit, and submitted support records; the admin interface does not provide a view of budget contents.

Google processes authentication and Drive requests. In the Google-hosted service, Cloud Run and Firestore process the website and platform metadata. Hosting and service providers may process technical records required to run and secure the service. Google-hosted fonts and sign-in/Drive libraries may also receive basic network request information when loaded. Stripe processes direct website payments and may receive payment, billing, and technical information under its own privacy policy (https://stripe.com/privacy). Etsy handles Etsy purchases under its own policies; this app does not automatically read your Etsy inbox or send invitation emails.

Information is not sold or shared for advertising. It may be disclosed when required by applicable law, to address security or fraud, or to service providers needed for the functions described here.

Cookies and browser storage

A necessary session cookie keeps you signed in. It is HttpOnly and SameSite, and Secure when the service is deployed over HTTPS. The app also uses browser storage for the selected household and month, an invitation being accepted, dismissed notices, optional reminder preferences, and the tab-scoped Drive access described above.

The currently implemented app does not initialize Google Analytics, advertising pixels, or nonessential tracking cookies. If those practices change, the policy and any required choices will be updated before use. Blocking necessary storage can prevent sign-in or Drive access from working.

Sharing links and retention

Active invitation tokens are hashed for lookup and also encrypted so an authenticated household owner can recover the same link for copying. Recovery is restricted to the owner. Accepted, revoked, or expired links cannot be copied as active invitations. Some invitation history, purchase, support, and security metadata remains to operate the service and document access changes.

Account records are retained while needed to provide the account and shared service. After a deletion request, information may still need to be retained for unresolved purchases, security, disputes, or legal obligations. Retention depends on the record and applicable requirements; the app does not promise automatic deletion on a fixed schedule. Technical backups may take additional time to cycle out.

Google Drive files and copies held by family members remain under those account holders’ control and are governed by Google’s storage and retention practices.

Your choices and requests

You can download your workbook, manage family members, revoke pending invitations, log out to clear tab-stored Drive access, and remove Google permissions in your Google account connections. Manage group, inherited, and public file access in Google Drive itself.

Contact contact@voxiostudio.com or use support to request access to, correction of, or deletion of platform account data, or to ask how your information is handled. We may need to verify your identity and clarify whether an action affects other household members. Applicable rights and exceptions depend on your location. You may also have rights to object, restrict processing, or contact a relevant privacy authority.

We do not automatically delete your workbook when processing an app-account request. Do not share passwords or access tokens to verify your identity.

Security, location, and children

Access checks, hashed purchase codes, encrypted recoverable invitation tokens, and secure session settings help protect the service. No system can guarantee absolute security. Contact support about suspected misuse.

Google and hosting providers may process information in countries other than your own. Storage locations and applicable transfer arrangements depend on the services used; we do not promise that all processing stays in one country.

Accounts must be used by people who can lawfully use the service. Household owners should not create accounts for children or share a child’s personal information without appropriate authority. Contact us if you believe information has been provided without required permission.

Policy updates

Changes will be reflected in the date above. Material changes to information practices will receive additional notice or choices where appropriate. The current policy does not authorize unrelated future advertising, tracking, or data use.