Privacy policy

EZ Family Money Manager is operated by Michael Nesmith in Tennessee, United States. The service is offered to users in the United States. For privacy questions or requests, contact support@ezfamily.org.

An account creator must confirm that they are at least 18 years of age, reside in the United States, and agree to this Privacy Policy and the Terms and Conditions before creating a household.

The parent or adult household Organizer determines who is eligible to be invited and is responsible for their invitations and the information they choose to share with invited members. Invited members do not complete a separate age check. The parent or Organizer must obtain any consent or authority required by applicable law before inviting someone or sharing information.

We record adult-account confirmations, agreement versions, and submission times, not birth dates or identity documents. These are self-declarations, not verified age or verified parental consent. The Child role describes restricted permissions, not an age. Existing age-group declarations may remain in account history; they are not a separate eligibility check for parent-authorized invitations.

Account and household information: names, email addresses, authentication identifiers, household memberships, invitations, roles, adult and U.S.-residency confirmations with submission times, any legacy eligibility declarations, preferences, and records of Privacy Policy acceptance, Terms acceptance, invitation responsibility, and email choices.

Information you enter or upload: accounts, balances, income and expenses, budgets, goals, transfers, side-hustle and mileage records, receipts, bank statements, and related notes or attachments. Documents may include names, addresses, account identifiers, and sensitive financial details.

Connected financial accounts: if you choose Plaid, we receive the account, balance, transaction, and connection information made available through that connection. We store an encrypted Plaid access token to maintain the connection. We do not ask you to enter a bank password into EZ Family Money Manager; Plaid handles its bank-connection flow.

Billing information: Whop processes new subscriptions; Stripe continues processing existing Stripe subscriptions. We handle customer email and billing identifiers, subscription status, plan and payment-related metadata needed to administer billing. Full payment-card details are handled by the billing provider rather than stored in the app.

Support and technical information: Help Assistant questions and recent conversations, authentication/session information, error and security logs, and usage information associated with operating and protecting the service.

We use information to provide household financial views, calculations, reports and exports; maintain optional bank connections; authenticate users and apply permissions; process receipts and statements; administer subscriptions; respond to support and privacy requests; troubleshoot problems; and protect the service.

We use optional email preferences to determine whether you want product news and tips or optional service alerts. Required security, billing, and other necessary account communications are separate from these optional choices.

We do not display advertising inside the financial app or sell your household financial records. With your permission, Google Ads on our public marketing pages helps measure the effectiveness of our advertising. We do not send private household financial records to Google Ads, enable personalized advertising, or enable enhanced conversions that send contact information.

This app is designed for shared households. Other household members may see records according to their assigned role, record visibility settings, and the app's permissions. Organizers can manage certain household settings and invitations. Review those permissions before adding someone or uploading a document.

Clerk account settings manage your personal sign-in identity. Changing an account name or email does not automatically rename a household display name, change a household role, delete shared records, or update every independent service provider's records.

Clerk provides authentication and personal account/security controls and processes sign-in identifiers, credentials or identity-provider information, and associated session/security data.

Plaid provides optional financial-account connections and processes the information needed to connect and synchronize the accounts you select.

Whop processes new payments and subscriptions, and Stripe continues processing existing Stripe subscriptions. The applicable provider receives customer and billing information needed for checkout, billing management, and payment administration.

Replit and its infrastructure services provide hosting, databases, file storage, AI integration access, and published-app visitor analytics. Stored app records and technical information are processed by these services to operate the app.

OpenAI services accessed through Replit process Help Assistant messages and statement-extraction inputs as described below. Resend, when email delivery is configured, processes recipient addresses and message content for enabled email delivery.

Providers receive information needed for their functions. Their own terms, privacy notices, and retention rules may also apply. We may disclose information when required by law, to protect the service or people, or as part of a business transfer, subject to applicable law.

The Help Assistant sends your question and recent help conversation to an AI service through Replit. Household financial records are not automatically attached to Help Assistant requests. Do not paste passwords, full account numbers, or sensitive financial details into it. It is intended for product help, not financial, legal, or tax advice.

When you request AI-assisted bank-statement extraction, text from the statement and, when needed, rendered images of its pages are sent to the configured AI service. These inputs may contain personal and financial information shown on the statement. Review documents before uploading, and use manual entry if you do not want statement content processed by AI.

AI providers process requests under the applicable service terms and configured privacy settings. The temporary-original retention rule below applies to the app's stored statement PDF, not a guarantee that every provider request, log, or backup is erased within that same period.

Connecting a bank is optional. Plaid presents its connection flow and applicable notices. Disconnecting through the app requests removal of the Plaid connection so future syncing stops. Previously imported transactions remain in household history unless the relevant records or household are later deleted.

Plaid handles information under its own privacy notices. Disconnecting through this app does not promise deletion of records independently held by your bank or Plaid.

Authentication and session technologies keep you signed in and protect access. Cookies also support selected-household and interface preferences, such as navigation layout. Browser storage may help coordinate household changes and interface state between sessions.

Published-app visitor analytics and app usage events help us understand visits and feature use. This may include visited pages, referrers, approximate country, device/browser information, and technical network or IP information. These usage analytics are separate from the optional Google Ads tag described below.

On public welcome, sharing, privacy, and terms pages, an optional Google Ads tag can use advertising cookies and process advertising-click identifiers, browser/device information, and technical network information to measure our advertising. It does not load before you choose Allow, and it does not load on sign-in, sign-up, invitation, checkout, account, or private household financial pages. Personalized advertising and enhanced conversions are disabled. Google processes information under its own privacy terms at https://policies.google.com/privacy.

With optional advertising permission, after the billing provider confirms a free trial has started, we can open a fresh public welcome page to report that trial start to Google Ads. Our server issues an opaque signed receipt valid for up to 30 minutes; this browser temporarily holds it outside the URL. A stable opaque conversion key prevents repeated confirmations from counting as new trials. We do not send names, contact details, financial amounts or records, internal account or provider identifiers, private page URLs, or the receipt itself to Google. The conversion uses a fixed $1 measurement value, not a charge or a household financial amount.

This public-page-only method relies on permitted advertising cookies to connect an ad visit with a confirmed trial. It misses visitors who decline or withdraw permission, block storage or advertising, or do not reach the public confirmation page. We do not upload conversions or retain advertising-click identifiers on our server. Withdrawal clears pending trial measurement in this browser, and we check permission again before reporting. Previously allowed visitors are asked again when this trial-measurement choice is introduced.

Choose Allow or Decline in the public-page advertising notice. You can change your choice using Advertising privacy on those public pages. We remember the choice in this browser for up to 180 days; it is separate from your email preferences and account privacy acknowledgement. Declining does not prevent you from using the service. Withdrawing permission stops future tag loading and attempts to remove this site's Google Ads cookies; it does not delete information already processed by Google. A browser privacy signal requesting no sale or sharing is treated as Decline.

Browser settings may limit cookies or storage, but doing so can prevent sign-in or other app features from working. Email choices do not control necessary session technologies or service-provider technical logs.

We retain account and household information while needed to provide the service and for applicable operational or legal requirements. Disconnecting a bank does not erase previously imported records. Cancelling a household plan does not automatically delete your personal Clerk account or records belonging to another household.

New original bank-statement PDFs are temporary review files. Review access ends when the statement is confirmed or discarded, or 24 hours after upload, whichever comes first. After review access ends, the original is not available for download. Physical deletion is handled by cleanup processes that may retry if a provider operation fails. Extracted financial records, review history, and supported undo history are retained separately.

Older statement originals may remain under legacy retention until an Organizer authorizes the temporary-retention change for those files. Acknowledging this privacy policy is not that separate authorization. Receipts are separate from temporary statement originals.

If a subscription or subscribed trial is cancelled, household access continues until the stated access-end time. The Organizer then has a 30-day export period for available household data and receipts. After that deadline, cleanup is designed to remove household records and stored receipts and revoke active Plaid connections. Failures may require retries; do not wait until the deadline to export.

Independently held provider records, backup copies, security logs, billing records, and information retained to satisfy legal obligations may follow separate operational, contractual, or legal retention requirements. We do not promise immediate removal of every copy or a fixed deletion period for all such records.

For a personal-information access or deletion request outside the app's controls, email support@ezfamily.org. We may need to verify identity and authority, especially for shared households. Another person's rights or a legal obligation may limit what can be deleted.

You may choose whether to connect a bank, disconnect it, export available records, and use supported editing controls. Sign-in details and security controls can be managed through Clerk in Account settings where enabled.

You can opt into or out of product news and tips and optional service alerts separately in Account settings. These choices start unchecked and are not required to acknowledge the policy. Bank-connection repair emails also require the separate Organizer setting for the relevant household. Turning off optional service alerts prevents those optional repair emails as well.

Necessary security, billing, and account/service communications are not marketing subscriptions and may still be sent. Messages already dispatched may arrive after a preference change. We do not change optional email choices merely because you acknowledge an updated privacy policy.

Depending on applicable U.S. law, you may have rights to request access to, correction of, deletion of, or a copy of personal information, and to appeal certain decisions. Email support@ezfamily.org to make a request. We will evaluate it under applicable law, verify identity when appropriate, and explain applicable limitations.

We use authenticated access, household permissions, private-file access controls, encrypted Plaid access tokens, and our providers' security protections. No method of storage or transmission can be guaranteed completely secure. Protect your account and review the information you share with household members.

Parents and adult Organizers are responsible for deciding whom to invite, obtaining any consent required by law, and choosing what information to share. Invited members have only their assigned permissions and do not undergo a separate age check. An invitation is not independently verified parental consent. Minimize information about children in household records.

Contact support@ezfamily.org with concerns about children's information or unauthorized sharing. We will evaluate requests under applicable law. A parent's acceptance of responsibility does not eliminate the service's legal obligations or anyone's statutory rights.

We may update this policy as the service or applicable requirements change. We will post a revised effective date and provide additional notice when required by law. The app records the policy version you acknowledge; acknowledgement of a new version does not grant optional email permission.

Privacy requests and questions: Michael Nesmith, Tennessee, United States. Email: support@ezfamily.org.