Privacy Policy

1. Introduction

Welcome to TCFlow ("we", "our", or "us"). TCFlow is a personal finance tracking application that helps you monitor income, expenses, budgets, and overall cashflow. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using TCFlow, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.

2. Information We Collect

2.1 Information from Google Sign-In

When you sign in with Google, we receive the following from Google's OAuth 2.0 service:

• Your Google account name
• Your Google account email address
• Your Google profile picture URL
• A unique Google account identifier (used as your user ID)

We do not request or store OAuth access tokens, refresh tokens, or any Google Drive / Sheets scopes. Authentication is identity-only.

2.2 Financial Data You Enter

All financial data you enter — transactions, budgets, categories, accounts, and settings — is stored in a private Turso database (hosted on Turso's infrastructure) that is isolated to your account. No other user can access your data.

2.3 Session Data

We store a short-lived, encrypted session cookie in your browser to keep you signed in. This cookie contains only your name, email, picture URL, and Google user ID — no tokens. It expires after 7 days and is deleted when you sign out.

2.4 Server Logs

Our hosting provider may collect standard server logs including IP addresses, browser type, pages visited, and timestamps. These are used for security and performance monitoring only.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you via Google OAuth 2.0 (identity only — no Drive/Sheets access)
• Create and manage your personal finance records in the database
• Maintain your session so you stay signed in
• Display your name and profile picture within the app
• Generate AI-powered financial insights via Google Gemini (your raw data is summarised into aggregated metrics — individual transactions are never sent)
• Provide, maintain, and improve the TCFlow service

We do not use your data for advertising, profiling, or any purpose other than providing the TCFlow service to you.

4. Data Storage and Security

4.1 Your Financial Data

Your financial data is stored in a Turso libSQL database — a distributed, edge-hosted SQLite service. Each user's data is isolated by a unique user ID and is never commingled with other users' data. You can export or delete your data at any time from within the app.

4.2 Session Security

Session cookies are encrypted using a server-side secret key, marked HttpOnly (inaccessible to JavaScript), and transmitted only over HTTPS in production.

4.3 No OAuth Token Storage

Unlike earlier versions of TCFlow, we no longer store or use Google OAuth access or refresh tokens after the initial sign-in. Your Google account is used only to verify your identity. No Google APIs are called after login.

4.4 No Third-Party Data Sharing

We do not sell, trade, rent, or share your personal information with any third parties, except as required by law or as necessary to provide the service (e.g., Turso for database hosting, Google for sign-in authentication).

5. Google API Services

TCFlow uses the following Google APIs:

• Google OAuth 2.0 — for authentication and identity only
• Google Gemini API — to generate AI financial summaries (optional, only if a Gemini API key is configured)

TCFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only request the minimum scopes necessary:

• userinfo.email — to identify your account
• userinfo.profile — to display your name and picture

We do not request spreadsheets, drive.file, or any other Google API scopes.

6. Your Rights and Choices

• Export your data: Use the CSV export feature in the Transactions page to download all your transaction history at any time.
• Delete your data: Contact us and we will permanently delete all your records from the database within 30 days.
• Revoke Google access: Visit Google Account Permissions and remove TCFlow. This prevents future sign-ins but does not automatically delete stored data.
• Sign out: Use the sign-out button in the app to clear your session cookie from your browser immediately.

7. Children's Privacy

TCFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of TCFlow after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out: