Your household owns its records.
BudgetBridge is designed to keep detailed financial information in the Head of Household’s Google Drive instead of building a central warehouse of household statements.
Effective 5 August 2026Who operates BudgetBridge
BudgetBridge is an open-source household budgeting project maintained by Desmond Peris. Support and privacy requests can be submitted through the project’s GitHub issue tracker. Do not include bank statements, API keys, account numbers, or other sensitive financial details in a public issue.
Information BudgetBridge processes
| Information | Why it is used | Where it is kept |
|---|---|---|
| Google account ID, email, display name, and profile image | Sign-in and household membership | Cloudflare D1 operational database |
| Household ID, role, shared code, file references, and job status | Sharing, authorization, and statement-processing progress | Cloudflare D1 |
| Household plan, AI memory, encrypted AI settings, statements, and reports | Budgeting, review, portability, and optional AI assistance | Head of Household’s Google Drive |
| A working copy of the household plan | Fast loading, resilience, and device use | The current browser’s local storage |
Google permissions
BudgetBridge requests openid, email, profile, and drive.file. The drive.file permission lets BudgetBridge work with files it creates or files the user explicitly selects. It does not grant general access to every file in Google Drive.
AI and OpenRouter
The Head of Household may connect a household-owned OpenRouter API key. The key is encrypted before being stored in Google Drive and is not returned to the browser. BudgetBridge accepts free-model routes for normal use and does not silently fall back to a paid model.
The finance coach receives the question a user chooses to send and a reduced household summary rather than the raw transaction ledger. The unfamiliar-table helper receives an anonymous layout pattern made from placeholders, not real dates, amounts, account identifiers, or merchant descriptions. OpenRouter and the selected model provider process requests under their own policies.
Bank statements
Uploaded statements are saved in the household Drive folder. BudgetBridge may read statement text on the current device, use Google Drive text recovery for scanned documents, and save analysis reports in Drive. Account numbers and raw merchant-rich transaction rows are not intended to be stored in Cloudflare D1.
Sharing within a household
Household members may see information allowed by their role. The Head of Household controls the Drive storage and the household code. Share the code only with people who should join the household.
Retention and deletion
Drive files remain until the Head of Household removes them. Browser data remains until it is cleared. Minimal operational records remain in D1 until the household is deleted or a deletion request is completed. See the data deletion instructions.
Security
BudgetBridge uses HTTPS, signed secure sessions, narrow Google scopes, encrypted secrets, request-size limits, same-origin browser requests, and security headers. No internet service can promise perfect security. Users should protect their Google and OpenRouter accounts and avoid sharing exported backups carelessly.
Children and financial information
BudgetBridge is a household tool managed by adults. It is not directed to children for independent account creation. A household may record education or dependant information, but should enter only what is necessary.
Changes
Material changes will update the effective date and be recorded in the public repository history.