Privacy Policy – Life CFO (invite-only beta)

Life CFO is a household record-keeping web app at life-cfo.com. It is run by Emily Manungo, a sole trader in Tasmania, Australia (ABN 75 107 976 704). "We" and "us" in this policy mean Life CFO.

Contact: admin@life-cfo.com

Life CFO helps a household keep one shared record of its bills, income, renewals, dates and notes. People add their own figures by typing, pasting, photographing a receipt or bill, or uploading a bank file or spreadsheet. Life CFO does not connect to banks, ask for banking passwords, move money or give financial advice.

Account details

• Your email address and sign-in details. Your password, if you use one, is held in scrambled (hashed) form by our sign-in provider. We never see it.
• Your invite code.

Confirmations at sign-up

• That you are 18 or older and live in Australia.
• The name you type to accept the terms, and a copy of the terms you accepted, with the date.
• Your birth year, used once to check you are 18 or older. We don't save it.
• Your browser's time zone and language, which may be read to show a warning if they don't look Australian. We don't save them.

What you and your household add

• Household names, bills, income, renewals, due dates, reminders, notes, decision notes and categories.
• Photos of receipts or bills, and the text read from them.
• Rows from a bank file (CSV): only the date, description and amount, plus an account nickname you choose.
• Rows from a spreadsheet that you confirm.
• Questions you ask in Ask and the answers shown, if you use it.

Information about other people. What you add may include information about other people, such as your partner, children, pets, or people and businesses named in a transaction or receipt. See "Information about other people" below.

Usage and technical information

• Simple usage events stored in our own database: signing up, finishing setup, using the brain dump, inviting a household member, and a daily note that a household opened the app. We use these counts to see whether the beta is useful. We don't use a separate analytics company or advertising trackers.
• Technical logs kept by our hosting providers, such as IP address, browser type, time and error details. These keep the service running and secure.

Waitlist. If you join the public waitlist, we collect only your email address.

What we don't collect

• Bank logins or passwords.
• Account numbers, BSBs or running balances from bank files. These are removed before anything is saved.
• Tax file numbers or government ID numbers. Please don't type them in.

We use personal information to:

• create and run your account and household
• show your household the information it has added
• read receipts and organise or summarise your own figures, but only if you've turned AI on (see below)
• keep the service secure and fix problems
• see whether households keep using the beta, using counts only
• email you about your account, such as sign-in links, household invites and important service or policy changes
• email waitlist members when a place opens
• respond to requests and complaints, and meet legal obligations.

We don't sell personal information, use it for advertising, or use it to recommend financial products. We don't use automated programs to make decisions that significantly affect your rights or interests.

Life CFO is shared by a household, so you may add information about other people.

• Only add information about someone else if you are allowed to. Let other adults in your household know you use Life CFO and that this policy explains how their information is handled.
• Before you upload a bank file, you confirm that you are allowed to share that account's transactions with everyone in your household.
• Avoid adding more about other people than the household needs. For example, don't add children's health details.

Everyone you invite to your household can see and edit what's stored for that household. This includes entries, photos, imported rows, reminders and decision notes. Only invite people you're comfortable seeing this information. A household owner can remove a member on the Household page.

AI is off unless two things are true: you've turned it on in Settings, and we've switched it on for the beta. If AI is on, the text, photo or household figures needed for the task are sent to an AI provider, OpenAI or Anthropic, in the United States. They're sent to read a receipt, organise a brain dump, summarise or explain your figures, or answer a question in Ask.

• These providers don't use the information to train their models under their standard business terms.
• They may keep it for up to 30 days for safety and abuse monitoring, and longer if their systems flag it or the law requires.
• AI can be wrong. Always check figures it reads or organises before you confirm them.
• AI in Life CFO lists, organises and explains your own information. It doesn't give recommendations or financial advice.
• You can turn AI off at any time in Settings. Turning it off stops future sending. It doesn't recall information already sent.

Photos are stored privately for your household. Only signed-in members of your household can view them, through short-lived links.

• Photos can show card digits, addresses, loyalty numbers or other people's names. Please crop or cover anything you don't need.
• You can delete a photo at any time.
• A photo is read by AI only if AI is on, as described above.

You choose when to upload a file.

• Life CFO reads the file while processing your upload and doesn't keep the file itself.
• From a bank file, it saves only the date, description and amount of each row. Account numbers, BSBs and balances are removed.
• From a spreadsheet, rows are saved only after you confirm them.
• We never ask for your banking password and never log in to your bank.

We share personal information only with the service providers who help us run Life CFO, and only as needed:

We may also disclose information if the law requires it, or to protect someone's safety.

Your household information is stored in Singapore, and some processing happens in the United States, as listed above. We choose established providers and use their security settings. These providers aren't bound by Australian privacy law, though, and we can't guarantee they'll handle information exactly as the APPs require. By using Life CFO, you agree to your information being handled overseas as described here. If you don't want that, please don't use Life CFO.

• Data is encrypted in transit (HTTPS) and at rest by our providers.
• Database rules let each household's members see only their own household's data.
• Photos are kept in a private storage area.
• Only the operator can access admin tools, using multi-factor authentication.
• We keep collection to a minimum. For example, raw bank files and birth years are not stored.

No online service is perfectly secure. Please use a strong, unique password, and don't share your sign-in.

If we suspect a data breach, we'll act quickly to contain it and will assess it within 30 days. If it's likely to cause someone serious harm, we'll tell the people affected and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, including what happened and what you can do. We do this even though, as a small business, the Notifiable Data Breaches scheme may not legally apply to us.

• See and correct: you can view and edit your household's information in the app at any time.
• Download: you can download a copy of the information your account can see from Settings. Photos are listed but not included in the download. Ask us if you need copies.
• Delete: you can delete your account from Settings. This removes your sign-in, your profile, your terms records, your usage counts, and any household (including its photos) where you are the only member.
  • If you share a household, the information that household holds stays for the other members.
  • If you're the only owner of a household with other members, you'll need to make someone else an owner, or remove the members, before you can delete your account.
• Ask us: you can email admin@life-cfo.com to ask for access to, or correction of, any personal information we hold about you, including if you aren't a user but think a user has added information about you. It's free.
  • We'll reply within 30 days, and may need to confirm your identity first.
  • If we can't do what you ask, we'll explain why in writing.

We send account emails, such as sign-in links, invites and important notices, because they're needed to run the service. We send waitlist and product update emails only to people who asked for them. Every one of these includes a way to unsubscribe, and we act on it within 5 working days.

If you have a privacy concern, email admin@life-cfo.com.

• We'll acknowledge it within 7 days and aim to respond fully within 30 days.
• If you're not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

If we make a significant change, we'll show it in the app and ask you to review it before you keep using Life CFO. The date at the top shows the latest version.