Privacy and your data
Updated October 9, 2026. Money Alone is a personal finance app by MS Product Studio. Contact: ms.product.studio@gmail.com.
What the app accesses
With your permission, the app uses your Google email and account identifier to identify the connection and avoid mixing files from different accounts. Drive permission is limited to files you create or select in the app (drive.file). The app reads and updates these files and displays their names and dates to help identify them.
Where your data is stored
Accounts, cards, transactions and preferences are stored locally in this browser and in a CSV in your Google Drive when you connect a file. CSV reads and writes happen directly between your browser and Google over HTTPS. We have no financial database on the server. Cloudflare stores your Google identifier and email, browser sessions and encrypted tokens to renew the connection. The encryption key is separate from the database. Your browser only receives a protected session cookie and a temporary access token in memory.
The site is hosted on Cloudflare. Google and Cloudflare may process technical data needed for authentication, storage and service delivery under their policies. Financial data is not sent to Money Alone's own server, used for advertising, sold or shared for model training.
The session lasts up to 180 days without use and is extended while you use the app. Google may revoke authorization. Expired sessions are deleted during maintenance triggered by new logins. The session cookie is required for the Drive connection and is separate from advertising technologies.
Advertising and your choices
Money Alone uses Google AdSense for ad spaces, subject to Google's approval and availability. Google and other ad providers may store and read cookies and use identifiers, IP addresses and browser information to deliver, measure and, based on your choices, personalize ads using visits to this and other sites. We do not provide balances, transactions, CSV files, Drive tokens or the connection email as advertising or targeting parameters.
When shown, Google's consent message lets you accept, reject or manage purposes and providers. You can revisit your choice through the privacy options link on the page. You can also manage personalized ads in Google My Ad Center and other providers' choices at YourAdChoices. Refusing does not prevent use of financial features.
See how Google uses information on partner sites. You can also block or delete cookies in browser settings; clearing this site's data removes the session and local copy of your records.
Sync and control
Each change is immediately protected in this browser's IndexedDB. The app uses one connected CSV in Google Drive, syncing every three minutes while open, visible and online, with a Sync now option. Sync resumes on reopening or reconnecting. A closed browser does not send changes: pending changes recover when reopened in the same browser. Clearing site data before upload can delete unsynced changes. Differences require your choice before continuing. Anyone with access to the CSV can read it; you control sharing in Drive.
Revocation and deletion
Disconnecting removes this browser's session and credentials from the active database without disconnecting other devices. Removed records may remain temporarily in Cloudflare backups under its retention policy. You can revoke all devices in Google connections. You can disconnect in the app and revoke authorization in your Google account connections. To delete data, remove the CSV in Drive and exported copies, and clear this site's browser data. Disconnecting does not delete files. Export a copy before clearing the browser if you want to keep your records.
Use of Google data
Use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including Limited Use requirements. Data is only used to provide the financial organization and synchronization you request.
Contact and support
When you submit the contact form, your name, email, type and message are sent to the studio through Cloudflare. We do not attach your CSV or financial data. Temporary metadata limits abuse; the content is kept only in the email received by the studio.