Privacy Policy

Version 2026-08-02 · Effective August 2, 2026

This Privacy Policy describes how Easy Choice Finance (“the Service”), operated by Easy Choice Solutions (“we”, “us”), handles information when you use the Service. By creating an account or using the Service, you acknowledge this Policy. Also see our Terms of Use.

1. Information we collect

Account data — email address, display name, password hash, timezone, optional two-factor authentication settings, and email-digest preferences.
Household finance data — accounts, balances, transactions, categories, budgets, bills, income/paychecks, transfers, reconciliations, invitations, merchant rules, holidays, savings goals, and related notes you or household members enter.
Bank connection data (optional) — when you link a bank or card through our bank-sync provider (currently Plaid): institution name/identifiers, provider Item and account identifiers, account mappings to your local accounts, sync cursors/status, provider balances when returned, and transactions pulled via sync (treated like other ledger data). Access tokens are stored encrypted at rest. We do not store your bank login password.
Uploads — receipt images/PDFs you attach to transactions (stored on the server and served only to authorized household users).
Technical data — session information, IP address and user-agent when you acknowledge legal terms or sign in (for security and audit), webhook/request logs needed to operate bank sync, and other server logs required to run the Service.

2. How we use information

To provide household budgeting, imports, optional bank sync, matching/review, reports, notifications, and email digests you enable.
To authenticate you, protect accounts (rate limiting, lockouts, 2FA), and record legal acknowledgements.
To invite members, manage household membership, and (for site admins) administer program accounts (invite, edit, lock, or disable).

We do not sell your personal or financial data. Client-side receipt OCR (when you use “Scan receipt”) runs in your browser via third-party scripts; scanned content is not sent to our servers for OCR processing.

3. Sharing

Within your household. Members can access shared financial data according to their role (owner, member, or read-only). Invite only people you trust with that information.

Bank sync providers. If you connect a bank or card, necessary information is shared with Plaid (and, through Plaid, your financial institution) to authenticate the link and retrieve account/transaction data. Plaid’s own privacy practices apply to that processing — see Plaid’s legal policies. Disconnecting a bank connection removes or invalidates stored access tokens for that link; historical transactions already saved in your household ledger remain unless you delete them or delete the account under the rules below.

Email. We use SMTP providers you configure for this deployment to send transactional mail (invites, password reset, digests).

4. Email

We send transactional email needed for the Service (invitations, password reset, optional digests). Digest frequency is opt-in in Settings.

5. Retention and deletion

Data is retained while your account and household exist. You may delete your account in Settings. Solo-household data (and associated receipt files) may be permanently purged; shared households are left for remaining members. Acknowledgement records may be removed or anonymized with your account. Server backups, if any, may retain residual copies for a limited operational period.

Site administrators may disable (soft-block) or temporarily lock an account without deleting household financial data. A disabled account cannot sign in until an administrator re-enables it.

There is no guarantee that deleted or missing data can be recovered. See the Terms of Use for limitation of liability.

6. Security

We use industry-common practices such as password hashing, HTTPS (when configured on the host), CSRF protection, household scoping, encrypted secrets at rest (for example 2FA and bank access tokens when APP_KEY / sodium are configured), optional 2FA, and authenticated bank webhooks. No method of transmission or storage is 100% secure.

7. Children

The Service is not directed to children under 13. Do not create an account for a child under 13.

8. Changes

We may update this Policy. The version identifier above will change when material updates are published. Significant changes may be noted in the Service or invite materials.

9. Contact

Privacy questions can be directed to your household administrator or the operator of this deployment of Easy Choice Finance.