PRIVACY

Your financial information stays under your control.

Last updated 17 September 2026

What The Finance Friend handles

Public calculator inputs remain in the open browser page and are not saved by The Finance Friend. When you sign in, the service receives the stable account identifier, email address and optional display name supplied by ChatGPT.

Your private workspace can contain accounts, transactions, assets, liabilities, reminders, review decisions and audit history. Unsaved edits are protected by a recovery copy in your browser. That active copy is removed once the private server confirms the latest save. If the save cannot be confirmed, the recovery copy is kept so your latest changes are not silently lost. Browser recovery copies are not encrypted; anyone with access to that browser profile may be able to read them. Use your own trusted device and encrypted downloads for long-term backups. The server copy remains linked to your account so the workspace can persist across devices.

If sync detects conflicting edits, it pauses for an explicit choice. Both versions are retained in owner-isolated browser storage before that choice is applied. Those retained versions remain after sign-out until you delete them in Sync recovery, remove the workspace on that browser, or clear browser data. An encrypted download is needed to keep a copy outside that browser.

Statements and documents

Statements selected for transaction extraction are processed in your browser. The workspace stores the extracted transactions and a minimal import diagnostic containing the selected date, description and amount fields plus the reason a row was accepted or excluded. Unrelated source columns and the original file are not uploaded by that import flow. New Document Vault uploads are paused during the friend test. Existing vault documents remain available to download or delete.

How information is used

Information is used only to provide the workspace, document vault, calculations, review workflow, backup, security and support. The controlled beta does not load advertising analytics and does not sell financial information.

Public website analytics

With your optional permission, we use Cloudflare Web Analytics to measure public page views, visits and performance. You can decline or withdraw permission on the cookies page without losing access to the workspace. Cloudflare processes page and referring-page addresses, browser and device information, approximate country and performance measurements. It does not use cookies, browser storage or fingerprinting to identify visitors or track them across websites.

The analytics script is excluded from pages served to signed-in users and from browsers with financial recovery copies. Automatic tracking of movements within the workspace is disabled. We do not send calculator inputs, financial records, uploaded files or ChatGPT account details to analytics, and do not use session recordings or advertising trackers. Read more about Cloudflare Web Analytics.

Retention, export and deletion

You can export transactions, export the audit trail and download an encrypted workspace backup. Removing the workspace while signed in requests deletion of the server workspace and every owned vault document before removing the browser copy. Keep an encrypted backup first if you may need the records later.

Bank connections

Bank connections are not enabled. We do not currently receive data directly from your bank. Before this changes, we will identify the account-information provider, explain what data is shared and for how long, and provide connection and disconnection controls. You will authorise access with your bank. The Finance Friend will not ask for your online banking password.

Your choices and rights

You can correct records in the workspace, export a copy and request deletion. Depending on the circumstances, data protection rights can also include access, restriction, objection and portability. Use the beta support route for requests the workspace cannot complete. You can also raise a data protection concern with the Information Commissioner’s Office.

Security and limitations

Access checks are applied on the server using your account identifier. Vault files are never given public addresses and download only through a route that checks ownership. No service can promise absolute security; report unexpected behaviour through the beta support route.