Family Financial Tracker

Privacy Policy

Last updated: 23 June 2026

Never enter real bank details. This service only needs balances and amounts. Never enter account numbers, BSBs, card numbers, PINs or online-banking passwords. We never ask for them and never need them.

1. Who we are

Family Financial Tracker ("the Service", "we", "us") is operated by Charles Hunter Rollo Green (ABN 71 439 451 912), based in Queensland, Australia. You can contact us at admin@familyfinancialtracker.com.

2. What we collect

  • Account details: your first and last name, email address, and a password (stored only as a salted hash — we never see or store your actual password).
  • Financial information you choose to enter: asset and liability names, balances and amounts, share tickers and quantities, budget figures, property addresses you add, and transactions extracted from statements you import.
  • Technical information: your IP address and basic request data, used only to protect the Service against abuse (rate limiting) and to keep it running.

3. What we do not collect

We do not collect or store bank account numbers, BSBs, credit or debit card numbers, PINs, or online-banking credentials. The Service has no connection to your bank and cannot move money. If you enter such details anyway, you do so against our instructions and at your own risk.

4. How we use your information

Only to provide the Service: to run your account, show your figures back to you, send sign-in codes, fetch market prices for tickers you enter, and process payment for access. We do not sell your information, and we do not use it for advertising or profiling.

5. Statement imports

When you upload a bank or credit-card statement, it is sent to our server, read to extract the transaction lines (date, description, amount), and then discarded. We do not keep the uploaded file. The transactions you choose to keep are saved to your account.

6. Storage and security

  • Your data is stored separately per account and is only accessible when signed in to that account.
  • Passwords are stored as salted scrypt hashes. Sign-in requires a second step: a code sent to your email.
  • The site is served over HTTPS, with secure, HTTP-only session cookies and standard security headers.
  • Stored data is encrypted at rest using AES-256-GCM.

Honest limitations: encryption at rest protects backups and stored copies; it does not protect against a compromise of the running server. As the operator, we have the technical ability to access stored data in order to run and support the Service. No online service can promise perfect security.

7. Third parties we rely on

  • Railway — hosting and data storage.
  • SendGrid — sending sign-in and password-reset emails (receives your email address).
  • Yahoo Finance — delayed market prices for tickers you enter (receives the ticker, not your holdings).
  • Stripe — payment processing. Card details are entered directly with Stripe and never reach our servers.

8. Keeping and deleting your data

We keep your data for as long as your account exists. You can export a copy at any time from Settings → Export to file, and you can permanently delete your account and its data from Settings → Close account and delete my data. Deletion is immediate and cannot be undone. Residual copies may persist in backups for a short period before being overwritten.

One thing is kept after deletion, and only where the account is closed before any payment has been made: a one-way hash of the email address (not the address itself) together with the date a new signup becomes possible again, so that the one-per-person free trial cannot simply be restarted. It holds no name, no financial data and nothing that can be read back to recover the address, and it is deleted automatically once the 3 months have passed.

9. Your rights

You may request access to, or correction of, the personal information we hold about you, and you may ask us to delete it. Contact admin@familyfinancialtracker.com. If you are unhappy with how we handle your information, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes

If we change this policy we will update this page and the date above. Significant changes will be notified by email where practical.

← Back to Family Financial Tracker