Privacy policy - The Adams Family Finance Dashboard

Effective date: 2026-09-21

Who this policy covers

The Adams Family Finance Dashboard is a private, self-hosted application operated by one household for its own financial records. It is not a commercial service and offers no public registration, advertising, sale of personal information, or sharing for advertising.

Only authorized household adults use the dashboard. They may maintain records for dependent accounts, such as education savings. Dependents do not have sign-in accounts, and the application does not solicit information from the public or from children.

Automatic financial connections

The dashboard supports automatic account connections through Plaid. When the household owner authorizes this feature and you choose to connect an account, you select accounts through Plaid Link and the financial institution's consent process. The dashboard can then retrieve supported transactions, balances, and investment holdings automatically, without requiring file uploads. Optional CSV/OFX imports remain available. Data availability and freshness depend on the institution and Plaid; values are not necessarily real-time. Test connections use simulated data.

Only the household identity that started a connection can manage, reconnect, synchronize, or disconnect it. Financial views are shared with the other authorized household adult; they are not private to the person who linked the account.

Information the application handles

Financial records: account names, types, identifiers and masked account labels; balances, currencies, transaction dates, descriptions, merchants and amounts; investment security identifiers, quantities, prices, values and cost basis when available.
Household records: account ownership labels, including dependent labels, categories, budgets, imported financial files and records you enter or correct.
Connection records: the initiating sign-in identity, institution and account identifiers, setup and authorization records, synchronization status and timestamps, encrypted access tokens and temporary connection credentials, and recovery records.
Ledger reconciliation records: reviewed destination mappings and records of intended, completed or uncertain updates, which can include financial details needed to avoid duplicate or conflicting entries.
Authentication information: the Google sign-in identity and email address used to access the dashboard, and local account authentication information for the household's ledger tools. The dashboard does not receive your Google password.
Technical and security logs: sign-in and request metadata such as the authenticated email when available, client IP address, request time, method, path, response status and duration. Rejected requests can be logged without an identified user.
Browser state: sign-in session information and temporary connection or return-flow state used to complete account linking. This is not advertising tracking.

Bank sign-in and consent take place through Plaid or the financial institution, not a dashboard banking-password form. The dashboard stores connection tokens rather than your bank login password. Its request-audit records do not include request or response bodies.

How information is used

Information is used for the household's financial reporting, budgeting, net-worth and spending views, investment summaries, maintaining accurate records, connection recovery, security, troubleshooting and privacy requests. The application does not initiate bank payments or transfers through this Plaid integration.

Where separately enabled and mapped, posted bank transactions can be reconciled into the household's Firefly III ledger. Investment holdings remain snapshots in the dashboard, not invented trades. Ghostfolio does not receive native holdings snapshots from this integration; an optional, explicitly reviewed account-value record is separate from investment positions and performance.

Authorized household users can see household financial information. Service providers involved in operating the application include:

Plaid: account linking and financial-data retrieval, including processing information supplied during connection and consent.
Google: sign-in and identity verification.
Cloudflare: access authentication and network delivery, processing identity and request metadata and handling traffic needed to deliver the service. If this policy page is hosted by Cloudflare, it also handles ordinary requests for this page.
Raspberry Pi Connect: authorized remote administration, which can involve device and connection metadata and information viewed during an administrative session.
GitHub: private software maintenance and release operations, including associated operator and release metadata; it is not used as the household's financial ledger.

Firefly III and Ghostfolio are household-operated recordkeeping applications, not a statement that financial records are sent to those projects' developers or to their hosted services.

Providers process information under their applicable terms and privacy policies. Plaid's own collection, use, sharing, retention and choices are described in the Plaid End User Privacy Policy. Disconnecting this dashboard does not itself establish deletion of information held independently by Plaid or a financial institution.

Disconnecting a financial connection

Disconnect requests revoke the connection at Plaid before the dashboard deletes the connection's locally stored encrypted access token and cached account, transaction and holding data. If removal cannot be confirmed, the application reports the problem and retains encrypted recovery information rather than claiming that removal succeeded.

After confirmed disconnect, automatic exports from that connection stop. Existing Firefly III ledger records, Ghostfolio account-value records, destination mappings and reconciliation recovery records are retained. Connection setup and authorization history and security logs can also remain. Disconnect is not a request to erase the household's canonical financial records or every copy of the data.

Signing out, pausing synchronization or allowing an authorization to expire is not the same as revoking the Plaid connection. You can also review connection choices with Plaid or your institution.

Retention and separate deletion requests

Household ledger and investment records are generally kept while needed for the household's financial history. Some records have no automatic expiry. A fixed retention schedule for all records and backups has not yet been adopted; this policy does not promise automatic pruning or a particular deletion deadline.

Request deletion separately from disconnecting. The operator reviews the records involved and the steps needed across the dashboard, Firefly III, Ghostfolio, imported files, connection history, logs and recovery records. Archiving an account or hiding it from a view is not deletion. There is no single automatic process that guarantees erasure from every service.

Deleted active records can remain in backup copies until the copies expire or are deliberately removed. Backup expiry and removal must be verified; immediate erasure from backups and a fixed maximum expiry time are not promised here. A request is not described as complete across backups while relevant copies remain. This policy makes no claim that offsite backups are operating.

The operator will explain the request's scope, any records that must remain, the applicable backup limitations and the status of deletion. Providers' independent retention and deletion processes may require a separate request to those providers.

Security

The dashboard uses authenticated household access and encryption for stored Plaid connection credentials. Security controls require ongoing review; no measure guarantees absolute security. This policy is not a certification of complete multi-factor authentication or access-control enforcement.

This public policy page

This page does not provide access to the private dashboard. It contains no scripts, analytics, advertising, third-party web fonts or contact form, and does not itself set cookies or use browser storage. Its hosting provider may process ordinary connection and request metadata, including IP addresses, to serve the page. Following the Plaid link or using the email link takes you outside this page.

Your choices and contact

Authorized household members may request access to, correction of, or deletion of their information, or help disconnecting a connection. Do not send banking passwords, access tokens or full financial account details by email.

Questions or requests: ian@nomad-analytics.com

Changes

The operator may update this policy when the application's use of information changes. The effective date identifies the approved version. Changes to retention, sharing or other described data practices require a fresh policy review.