Privacy Policy

• Account information: email address, password (encrypted)
• Financial records you enter: transaction amounts, vendors, dates, categories, mileage logs, home office and utility inputs
• Receipt files: images and PDFs you upload and attach to transactions
• Optional API keys: if you choose to connect a third-party AI provider (OpenAI, Anthropic, or Gemini) for the receipt-scanning feature, that key is stored encrypted
• Payment information: handled entirely by our payment processor at checkout — we do not store your card details ourselves

Your data is used solely to operate the App for you: storing your records, generating your calculations and exports, and displaying your dashboard. We do not sell your data. We do not use your financial data to train any AI model.

Your data is stored on Lovable Cloud, our managed hosting platform, which provides a managed PostgreSQL database for your records and a private object-storage bucket for your receipt files. Both are hosted in the United States and encrypted at rest and in transit (TLS). Access is enforced at the database level by row-level security policies scoped to your user account, and receipt files are stored in a private bucket where every file path is owner-scoped — no other customer, and no anonymous visitor, can read your rows or your files. Any AI provider key you save is additionally encrypted by us with AES-256-GCM before it is written to the database, so it is never stored in readable form.

We retain your data for as long as your account is active. When you delete your account from the settings page, the deletion runs immediately: your transactions, mileage log, settings, stored AI key, uploaded receipt files, and login record are erased from our live database and storage at the moment you confirm. Residual copies in encrypted infrastructure backups roll off automatically and are fully purged within 30 days. You can request a copy of your data or request deletion at any time by contacting business@mikegarveyjr.com.

We do not share your data with third parties except:

• Our payment processor, to complete your purchase
• Our hosting/infrastructure providers, to operate the App
• The AI provider you personally choose to connect (only if you use the optional receipt-scan feature — see our Third-Party AI Disclosure for details on this specific case)

You may request access to, correction of, or deletion of your personal data at any time by contacting business@mikegarveyjr.com.

We may update this policy periodically. Material changes will be noted with an updated "last updated" date.

Privacy questions: business@mikegarveyjr.com