Privacy policy
Effective 18 October 2026
Personal P&L is a private app that one household uses to track its own spending. It is not offered to the public. Only invited household members can sign in, and nobody else can create an account. This policy explains what information the app holds and how it is handled.
What information the app holds
- Your name and email address, used to sign you in.
- Account details: account names, the bank or card company, and the last four digits of account numbers. Full account and card numbers are never stored.
- Transactions: dates, amounts, descriptions, and the categories and notes you add.
- Basic technical logs kept by our hosting providers, such as sign-in times, for security.
Where it comes from
Transactions come from files you download from your bank and upload yourself. When a bank connection is added, transactions will also come from your banks through Plaid, with your permission. You sign in to your bank through Plaid, so the app never sees your bank username or password. Plaid's handling of your information is described in the Plaid End User Privacy Policy.
How it is used
Only to show the household its own finances: lists of transactions, categories and reports. It is never sold, rented, shared for advertising, or used for any other purpose.
Who can see it
Signed-in members of your household, and no one else. The database itself refuses to show one household's data to anyone outside it. Our service providers store and run the app on our behalf: Supabase (database and sign-in, in the United States) and Vercel (website hosting). Plaid provides bank connections. We do not otherwise share your information unless the law requires it.
How it is protected
Signing in needs a password and a code from an authenticator app. All connections are encrypted (TLS), and stored data is encrypted. Access to the systems behind the app is limited to the owner and also protected by two-factor sign-in. More detail is in our information security policy.
Your consent
The app only collects what you choose to give it. Signing in confirms you agree to this policy. Each file is imported only when you press Import, after seeing a preview. A bank is connected only when you choose to connect it, after Plaid shows you what will be shared and asks for your permission. You can withdraw consent at any time by disconnecting a bank, undoing an import, or asking for your information to be deleted.
How long it is kept, and deleting it
- Transactions and accounts are kept while the household uses the app.
- You can delete any import yourself at any time, which removes its transactions straight away. You can also ask for all of your information to be deleted, and it will be removed within 30 days.
- Disconnecting a bank stops new transactions being collected and cancels the app's access through Plaid straight away.
- If the household stops using the app, all of its information is deleted within 30 days.
- Technical logs are kept by our hosting providers for a short time and then deleted automatically.
- This policy is reviewed at least every three months, alongside our information security policy, to make sure it is followed and still meets applicable privacy laws.
Contact
Household members can send questions and requests, including deletion requests, directly to the app's owner. If this policy changes, the date at the top will change and household members will be told.