Privacy Policy

The short version

CalmExpense helps you turn bank CSV files into a clean spending dashboard that lives inside your own Google Sheets. We do not connect to your bank, we do not read your transactions on our servers, and we do not sell or share your data. The only personal detail we store is the email address you use to create an account.

Who we are

CalmExpense ("we", "us", "our") provides the CalmExpense personal finance dashboard and the website at calmexpense.com. For any privacy question you can reach us through our contact page.

Data we collect

We keep the amount of personal data we hold to an absolute minimum.

• Account email address. Used to create your account, sign you in, send you a verification link, handle password resets, and send essential account emails.
• Account name (optional). If you choose to enter a name at signup, we store it so we can address you properly.
• A securely hashed password. Your password is stored only as a one-way hash. We can never see or recover your original password.
• Basic account status. Whether your email is verified, when your trial started, and whether you hold a paid license, so we can give you the right level of access.
• Support messages. If you contact us, we keep the message and your email so we can reply.

Data we never collect

This is the heart of how CalmExpense is different. The following data never reaches our servers:

• Your financial data. Your transactions, balances, categories, and reports are generated and stored inside your own Google Sheets, on your own Google Drive. We do not receive a copy.
• Bank credentials. We never ask for and never store your online banking username, password, or any bank login. CalmExpense does not link to your bank.
• Uploaded CSV files. Your bank statement files are processed inside your own Google environment, not uploaded to us.
• Browsing and tracking data. We do not run Google Analytics or any third-party tracking or advertising pixels, so we do not build a profile of your behaviour across the web.

How your spending data is stored

CalmExpense runs as a Google Sheets and Google Apps Script tool inside your own Google account. When you use the dashboard, your data is written to a spreadsheet that you own and control on your own Google Drive. You can open it, export it, or delete it at any time without involving us. Because the data lives with you, removing our access does not risk losing your records.

Google account access

To set up your dashboard, CalmExpense may request permission to create and edit the specific spreadsheet it manages for you. We use that access only to build and update your dashboard. We do not read unrelated files in your Drive, and you can revoke access from your Google account settings whenever you like.

Payments

When you purchase CalmExpense, payment is handled by Stripe, a PCI-compliant payment processor. Your card details are entered on Stripe and are never seen or stored by us. We receive only confirmation of a successful payment so we can unlock your license. Stripe processes this information under its own privacy policy.

Cookies

We use only the small number of cookies needed to run the site securely. These include a session cookie to keep you signed in and a security token used to protect forms against cross-site request forgery. We do not use advertising cookies or third-party tracking cookies, and there is no cross-site profiling.

Emails we send

We send only essential account emails: email verification, password resets, and occasional messages about your trial or license. These are transactional, not marketing blasts. If we ever send anything optional, it will include a clear way to opt out.

Your rights

Depending on where you live, you may have rights under laws such as the EU and UK GDPR, the California Consumer Privacy Act (CCPA), and Singapore's Personal Data Protection Act (PDPA). Because we hold so little data, honouring these rights is simple:

• Access. Ask us what account data we hold about you and we will tell you.
• Correction. Ask us to fix an inaccurate email or name.
• Deletion. Ask us to delete your account and the account data we hold.
• Portability. Your spending data already lives in your own Google Sheet, which you can export at any time.
• No sale of data. We do not sell your personal data to anyone, so there is nothing to opt out of.

To exercise any of these rights, contact us through our contact page.

Deleting your data

You can delete the spreadsheet CalmExpense created at any time from your own Google Drive, and you can revoke our access from your Google account settings. To close your CalmExpense account and remove the account email and related records we hold, contact us and we will process the deletion.

Data retention

We keep your account data for as long as your account is active. If you ask us to delete your account, we remove your account data promptly, except where we must keep limited records (such as proof of a purchase) to meet legal or accounting obligations.

Children

CalmExpense is intended for adults managing their own finances and is not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

If we update this policy, we will change the date at the top of this page. Significant changes will be communicated clearly. Continuing to use CalmExpense after an update means you accept the revised policy.