Privacy Policy

This Privacy Policy explains how Levi Dance (ABN 25 326 112 806) (“we”, “us”, “our”), the operator of Family Budget (the “Service”), collects, uses, discloses and protects your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Family Budget is a private household budgeting tool that is currently in an invite-only alpha. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

1. What personal information we collect

We collect only what we need to run a household budget for you:

• Account identity. When you sign in with Google, we receive your name, email address, profile picture and your Google account identifier. We request only the basic “openid email profile” permissions — we do not access your Gmail, Google Drive, contacts or any other Google data.
• Household information. The names, and where you invite them the email addresses, of the household members you add to a budget, together with the roles and category-visibility settings you assign them.
• Financial information you enter. The budget data you type into the Service: category (envelope) names and allocations, income sources and amounts, transactions (amounts, dates, descriptions and categories), bank/credit account names and balances, savings goals, and recurring bills. This is entered manually by you — the Service does not connect to your bank and does not import your real bank feed.
• Billing information. The alpha is currently free, so no billing information is collected. If we introduce paid subscriptions and you take one out, payments are processed by Stripe: we would store a Stripe customer identifier and your subscription status (for example trialing, active, past due or cancelled). We do not receive or store your full card number — Stripe handles card details directly.
• Technical and usage information. If you enable push notifications, the browser/device push subscription needed to send them. We use an essential session cookie to keep you signed in. Our servers process your IP address transiently for rate-limiting and security, and we may collect diagnostic error reports to fix faults.
• Acceptance records. When you agree to these documents, we keep a record of it — your email address, which version you accepted, the date and time, and your browser's identifier — so we can show that agreement was given.

2. How we use your information

• To provide, operate and maintain the Service and your budget.
• To run the household features you use — shared budgets, member permissions, approvals, and the nightly pay-cycle roll-over and reminder processes.
• To send you notifications and reminders you have enabled (such as upcoming or overdue bills).
• To manage your subscription, trial and billing.
• To respond to your support requests and communicate with you.
• To keep the Service secure, prevent abuse, and diagnose and fix errors.
• To comply with our legal obligations.

We do not sell your personal information, and we do not use your financial data for advertising or profiling.

3. Cookies

We use a single essential cookie to keep you signed in (a NextAuth session cookie). It is required for the Service to function. We do not use advertising or third-party tracking cookies.

4. Who we share it with

We do not sell your data. We share it only with the service providers (“sub-processors”) we rely on to run the Service, and only as needed:

• Google — sign-in and authentication.
• Supabase — the database that stores your budget. Your data is hosted in a data centre in Sydney, Australia.
• Vercel — application hosting and delivery. Vercel operates globally and may process requests on servers located outside Australia.
• Stripe — payment processing, only if and when you take out a paid subscription.
• Sentry — error monitoring, where enabled, to help us find and fix faults. We limit the information sent to what is needed to diagnose an error.

We also rely on infrastructure that supports the Service but does not receive your personal information: Healthchecks.io (anonymous uptime monitoring of our scheduled jobs — it receives only a signal that a job ran, never any of your data) and GitHub (where our source code is stored and from which the Service is deployed).

We may also disclose information if required by law, or to protect the rights, safety or property of you, us or others.

5. Overseas disclosure

Your budget data is stored in Australia. However, some of our sub-processors (such as Vercel, Stripe and Sentry) are based in, or operate infrastructure in, countries including the United States. By using the Service you consent to your personal information being handled by these providers, which may involve disclosure outside Australia. We take reasonable steps to use reputable providers with appropriate safeguards.

6. How we protect your information

• All traffic to the Service is encrypted in transit (HTTPS).
• Each household's budget is logically isolated so one household cannot access another's data.
• Access to production systems is restricted and protected by authentication.

No online service can be completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

7. Retention and deletion

We keep your personal information for as long as your account is active. You can export your budget data at any time from the Service. If you close your budget (using the reset/delete function) or ask us to delete it, we delete the associated budget data from our active database.

Some limited records are retained where we are required to, or need to, keep them — for example billing records for tax purposes, and a minimal log of processed payment events kept to prevent duplicate billing. These are retained no longer than necessary.

8. Your rights: access and correction

You may access most of your information directly in the Service, and edit or delete it there. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing levi@levidance.com.au. We will respond within a reasonable time. We may need to verify your identity first.

9. Children and family members

Account owners are adults: you must be 18 or over to create a budget or hold a subscription. We do not market the Service to children and children cannot sign themselves up.

However, a budget owner may invite their own child as a household member so the family can share a budget. Where a member is under 18, the budget owner acts as that child's parent or guardian: they decide to invite the child, consent on the child's behalf to this Policy and to the child's information being handled as described here, and control what the child can see and do. We rely on that parental consent for any minor member. If you are a parent or guardian and want a child's information removed, contact us at levi@levidance.com.au and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the version and effective date at the top of this page, and where appropriate we will notify you in the Service.

11. Contact and complaints

For any privacy question or request, or to make a complaint about how we have handled your personal information, contact us at levi@levidance.com.au. We are based in Tasmania, Australia. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.