Updated November 4, 2026. DoMyFinance is an owner-operated finance tracker for invited users. For privacy questions, access requests or deletion requests, contact abogs1910@gmail.com.
Google sign-in provides your verified email, Google account identifier and basic profile name. We use these to authenticate you, check the owner's email whitelist and keep your workspace separate. The app requests only OpenID, email and profile access. It does not request access to Gmail messages, contacts or Google Drive.
Your workspace stores information you enter: financial accounts, transactions, loans, profile name, activity history, recoverable deleted records and optional image attachments. Images selected for upload are resized and re-encoded in your browser. The app does not connect to your bank or move money.
Records are stored on an Amazon Lightsail server in Singapore. Financial workspace content, activity history, image filenames and image contents are encrypted at rest using AES-256-GCM with keys derived per user. HTTPS protects transport. Encryption is managed by the server and is not end-to-end encryption; the server operator controls the keys. Email addresses, routing identifiers, attachment metadata and session identity are not separately encrypted by the application.
Other users cannot access your records through the app. The whitelist owner manages access, and removing an email blocks further data requests. The app uses a secure session cookie lasting up to 24 hours and a short-lived sign-in cookie. Google processes authentication under its own privacy policy. Cloudflare provides domain registration and DNS; Amazon provides hosting.
You can export your records and edit or recoverably delete entries. Deleted entries may remain in the app's restore history. Record exports contain attachment references rather than image files. Contact the owner about permanent deletion, account access or retained backups. Records remain stored until removed by the operator; losing access or signing out does not delete them.
No advertising or third-party analytics scripts are included in this deployment. Network providers and server software may process connection information needed to deliver the service.