Privacy policy
Personal Financial Advisor
01Who this covers
Personal Financial Advisor (“the app”) is an application built and operated by Michael Galluppo (“I”, “me”). Once a day it reads bill-related emails from a connected Gmail account, combines them with bank and card transactions, asks an AI model for budgeting advice, and writes a report to a Google Sheet that belongs to the user.
This policy explains what Google user data the app accesses, how it is used, where it is stored, who it is shared with, and how to have it deleted.
02Google data the app accesses
The app requests only the two Google permissions it needs:
| Permission (scope) | What the app does with it |
|---|---|
| gmail.readonly | Searches for bill-related emails (for example invoices, statements and payment reminders) received in the last 7 days, up to 50 messages per run. From each matching message it reads the sender, subject, date and message text to extract the amount due, the due date and a short excerpt. The app cannot send, delete, label or modify email. |
| spreadsheets | Creates and updates tabs in the user’s own Google Sheet to write the daily report: dashboard, transactions, monthly summary, bills and subscriptions, and advice. |
Emails that do not match a bill-related search are never retrieved.
03How the data is used
Google user data is used only to provide the app’s single feature: a private daily financial report for the user who connected the account. Specifically, the extracted bill details are:
- combined with the user’s transaction data to calculate totals, due dates and cash-flow alerts;
- sent to an AI model to generate spending and savings recommendations (see section 05);
- written to the user’s own Google Sheet.
Google user data is never used for advertising, never sold, never used to build profiles for anyone else, and never used to determine creditworthiness or for lending.
04Limited Use
Personal Financial Advisor’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Google user data is transferred to others only as needed to provide the feature described above, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to the user. No person reads Google user data unless the user gives explicit permission for specific messages, it is needed for security purposes such as investigating abuse, or it is required to comply with applicable law.
05AI processing
To produce recommendations, the extracted bill details (sender, subject trimmed to 120 characters, amount, due date and an excerpt of at most 400 characters) are sent to Anthropic’s Claude API. Anthropic processes this data to return a response and, under its commercial API terms, does not use API inputs or outputs to train its models.
Google user data is not used to develop, improve or train generalized or non-personalized AI or machine-learning models, by me or by anyone I share it with.
06Sharing
Google user data is shared only with:
- Google, when the report is written back to the user’s own Google Sheet;
- Anthropic, as the AI model provider described in section 05.
It is not shared with any other person, company or service.
07Storage and security
- The app runs on the user’s own computer. There is no separate app server or database that holds email content.
- OAuth tokens and API keys are stored in the macOS Keychain, not in files. The OAuth client file is deleted after the first sign-in.
- Email content is held in memory only for the duration of each daily run. The extracted bill details persist only in the user’s own Google Sheet.
- Local run logs record activity such as the number of bill emails found. They are kept on the user’s computer and are not shared.
- All connections to Google and Anthropic are encrypted in transit with TLS.
08Retention and deletion
Extracted bill details remain in the user’s Google Sheet until the user edits or deletes them; deleting the Sheet removes them. Email content is not retained between runs.
To stop the app accessing your Google account at any time, revoke its access on your Google Account permissions page. Revoking access immediately invalidates the stored token, so the app can no longer read Gmail or write to Sheets. You can also email me to request deletion of any data, and I will confirm deletion within 30 days.
09Children
The app is not directed to children under 13 and does not knowingly collect their data.
10Changes
If this policy changes, the updated version will be posted on this page with a new “last updated” date. Material changes to how Google user data is used will require renewed consent before the app uses data in the new way.
11Contact
Questions or deletion requests: m.galluppo@gmail.com