Privacy and data use

Account information includes your name, email address, profile image when supplied by Google, authentication method, and active sign-in sessions. Site administrators can maintain an email access list and review recent sign-in and access-control events. Those administrative logs do not contain receipt contents or financial values.

Household records can include expenses, merchants, dates, amounts, categories, payment-method descriptions, notes, students or beneficiaries, academic terms, budgets, receipts, eligibility reviews, reimbursements, and an audit history of important changes.

If you connect a financial institution through Plaid, MyCrumbs may receive the institution and account names, masked account identifiers, account type, balances, and read-only transaction details such as date, amount, merchant, description, pending status, and Plaid category. MyCrumbs does not receive your bank username or password.

Information is used to provide the household ledger, attach receipts to expenses, reduce manual entry, suggest categories, track available funding and possible 529 records, create exports, prevent duplicate imports, and protect access to household data.

Imported transactions and OCR suggestions are reviewable. A category suggestion is not a financial, legal, or tax determination.

Connected-account access is read-only. MyCrumbs does not use Plaid Transfer, Payment Initiation, or another product that can move money. Plaid access tokens stay on the server and are encrypted before database storage. They are never returned to the browser.

Disconnecting an institution will revoke its Plaid Item and stop future synchronization. Previously imported records remain in the household ledger until they are separately removed so exports and audit history do not change silently.

A new connection does not synchronize transactions until a household owner chooses at least one account to include. MyCrumbs does not retain transactions from excluded accounts. It keeps basic account details for excluded accounts so the owner can revise that choice. Cancelling before making the first selection revokes the Plaid connection and removes the pending institution, its account details, and any associated bank-feed data from MyCrumbs.

Plaid End User Privacy Policy

Production receipts are stored in private object storage and retrieved through an authenticated MyCrumbs route. Household membership is checked before a receipt can be viewed or removed.

Uploaded receipt images are rotated, resized when necessary, stripped of embedded metadata, and re-encoded before storage. MyCrumbs stores the smaller processed image rather than the original image bytes. PDFs are size- and format-checked but are retained in their submitted format. Per-file, daily-upload, and household-storage limits reduce accidental or abusive storage use.

When you choose receipt reading, the receipt is sent to Amazon Textract for extraction. Suggested merchant, date, total, line items, and category remain editable before saving. MyCrumbs does not use receipt contents to train a custom model.

When AI-assisted suggestions are configured, MyCrumbs sends a limited set of extracted text lines, merchant candidates, purchased-item descriptions, and the household's available category names to Amazon Bedrock in the same AWS Region. The receipt image is not sent to Bedrock. Model output is validated and remains a suggestion that you can change before saving.

MyCrumbs uses service providers only to operate the application, including hosting and private file storage, PostgreSQL database hosting, Google authentication, Resend email delivery, Amazon Textract receipt extraction, Amazon Bedrock receipt suggestions when enabled, and Plaid financial connectivity when enabled.

MyCrumbs does not sell household or connected financial data, use it for advertising, or disclose it to data brokers. Information may be disclosed when legally required or when necessary to protect the application and its users.

You can correct imported or extracted expense information from the ledger. Household owners control membership. Connected institutions can be disconnected from account settings once financial connections are enabled.

Financial audit records are retained when an expense is voided rather than silently rewritten. Requests to delete an account or its associated household data should be sent to privacy@mycrumbs.app. Identity and household ownership may need to be verified before deletion.

MyCrumbs uses authenticated server-side authorization, private document retrieval, encrypted transport, restricted service credentials, and short-lived production AWS credentials. No system can guarantee absolute security; report suspected unauthorized access promptly.

529 labels and reviews are organizational records only. MyCrumbs does not determine whether an expense is legally qualified and does not provide tax, investment, or legal advice.

MyCrumbs is intended for adults managing their own household records. Student or beneficiary information should be limited to what the household needs for recordkeeping. The service is not directed to children and should not be used by a child to connect a financial account.

Questions, access requests, or deletion requests can be sent to privacy@mycrumbs.app. Material changes to this notice will update the date shown above.