Novice Money Privacy Notice

Version 2026-10-23.1. Published October 23, 2026.

This notice describes information handled by Novice Money. It is separate from the EULA / Terms of Use, and is not a request for blanket consent. Contact Novice Money support at support@novicemoney.com about privacy or deletion.

Information handled and its sources

• Account information you supply: email address, display name, optional phone number, and sign-in and recovery settings. Authentication records include password hashes, confirmation state, and any enabled two-factor authentication or recovery material.
• Household membership, invitations, roles, preferences, and the Terms version and UTC time of an explicit acceptance.
• When site referrals are enabled: the recipient email supplied by an inviting user, the inviter's identity, invitation dates and status, and attribution of a registered and email-confirmed account. A referral does not share household information or grant household access.
• Financial information entered or imported by you or authorized household members: account names and balances, transactions, amounts, dates, payees, descriptions, categories, schedules, reconciliation records, import mappings and history, and saved financial snapshots.
• Operational and security information generated during use, including request/IP information used by security controls, session identifiers, errors, and records of account or household changes and removal activity.

Account and authentication information is needed to provide a signed-in account. The financial information available depends on what you and other authorized household members choose to enter or import.

Why information is used

The application uses this information to authenticate users, enforce household permissions, maintain financial records, produce balances and forecasts, process imports and exports, provide recovery and account messages, and investigate errors or misuse. Security and change records support protecting access and understanding changes. Optional reminder preferences are separate from Terms acceptance and can be managed independently.

Sign-in and request-protection cookies support sessions and protection against forged requests. They are distinct from optional email choices. Disabling required cookies may prevent sign-in or submission of account forms.

A site invitation identifies the inviting member by their display name and offers a link to create a separate account. Its invitation-preference link lets the recipient stop further site referral invitations without changing account-security messages or financial reminders. A minimal hash of the normalized recipient address records that preference. Merely opening an invitation does not count as a registration.

Who can receive information

Authorized household members can access shared financial information according to their roles. Administrators and support personnel may access information needed for account administration, security, maintenance, or a support request. Only share a household with people you trust.

Application and database hosting systems store information used by the service. Configured email providers process recipient addresses and message contents to deliver confirmation, recovery, invitation, removal-approval, or enabled reminder messages. Novice Money supports SendGrid and SMTP delivery; the provider used depends on the deployment. Your email provider also handles messages it receives. Contact support for the providers and processing locations applicable to your account.

If you authorize an AI connection through OAuth, your chosen AI provider receives the approved financial results it reads from the selected household. Access follows your existing household permissions, is read-only, and excludes transaction memos and another member's private information.

You or a household Owner can revoke the connection. Revocation stops future access to Novice Money; it does not erase information already retained in an external conversation or provider system.

Novice Money keeps minimal access metadata, such as the connection, tool, time and outcome, not AI conversations or financial response contents. This history defaults to 30 days of retention, globally configurable by administrators. The maintenance heartbeat removes eligible history in bounded batches.

Exports you download, or copies another authorized household member keeps, are outside application control. Information may also need to be disclosed to meet an applicable legal obligation. This notice and Terms acceptance do not grant unrestricted permission to sell information, use it for advertising, or process it for unrelated purposes.

Retention, backups, and permanent removal

Account and financial records are stored to support ongoing use. Some transaction-change history can be removed under the household's retention settings; that setting is not a retention limit for all account or financial information. Saved application snapshots and system recovery backups are separate copies. An ordinary financial reset or restore is not a privacy-erasure request.

Site referral records are not part of financial snapshots. Approved personal-data or account removal deletes referral records identifying that user as inviter or registered recipient, records addressed to their current email, and the matching invitation-preference hash. Email-provider records and independently retained system backups require the separate handling described below.

Deleting your application account permanently purges every household where you are an Owner, including households with other Owners. All members, including co-owners, lose access to those household financial records. Other members' application accounts and unrelated households are not deleted.

In households where you are an Editor or Viewer, account deletion removes your access and leaves the household finances for the other members. Removing financial data while keeping the account retains the email, authentication, and security information needed to operate that account. Review the removal scope and retained information before approving an action.

Application removal is permanent and has no in-app undo. It does not mean information disappears immediately from system backups, provider systems, exports, or other environment copies. Backup expiry, provider handling, and any information retained for security, deletion enforcement, or legal obligations require separate handling. A request being received or queued is not confirmation that all removal is complete. Contact support for the scope, status, and any retention limits or exceptions applicable to your request.

Access, correction, export, and requests

You can review and correct available account settings and use permitted financial export functions. For access, correction, export, or deletion requests, contact support@novicemoney.com. We may need to verify your identity and authority over affected records. Do not send passwords, recovery codes, or unnecessary financial details by email.

Depending on applicable law, you may also have rights to object to or restrict processing, withdraw consent where processing relies on consent, or complain to a relevant privacy authority. Terms acceptance does not waive statutory rights or replace any separate consent required by law.

Security and notice changes

Access controls and authentication help protect information, but no system can promise absolute security. Report suspected unauthorized access to support. This notice has its own version and publication date so changes can be identified separately from the Terms. A published change is not, by itself, your consent to a new purpose of processing.