Privacy policy

Last updated 27 October 2026

Fernando Family Hub is a private household app. The Fernando family runs it for its own members. It is not offered to the public, and an account can only be created from an invitation sent by the household owner.

What the hub keeps

• Your name, email address and a hashed password, so you can sign in.
• Household records you add or approve, such as accounts, transactions, bills, receipts, statements, savings and the documents behind them.
• Settings, notifications, and an activity log of changes for undo and audit.

Google data

The hub connects to Google only when the owner chooses to connect an account:

• Gmail (read-only). The hub reads messages from senders the owner has approved (for example banks, card issuers and utility companies) to find bills, receipts and statements. It keeps the sender, date, subject, relevant text and attachments. It never sends, deletes or changes email.
• Google Drive (only files the hub creates). The hub uploads encrypted backup copies of the household's stored documents into its own folder and can read them back to restore a file. It cannot see any other file in your Drive.

The hub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide these household features to the household that connected it. It is not sold, not used for advertising, and not shared with anyone outside the household except as described below.

Where it is stored

Everything is stored on the family's own private server. Documents are encrypted at rest, Drive backups are encrypted before they leave the server, and connection tokens are encrypted and never shown in the app.

Reading documents with AI

To read a statement, bill or receipt, the hub first uses text extraction on its own server. When that is not enough, the document's text or image may be sent to an AI model (Anthropic Claude or OpenAI Codex) under the household owner's own subscription, only to extract the amounts and details shown back in the app. These providers process the content under their own terms. The hub does not use your data to train AI models.

Your choices

• Disconnect Gmail or Drive at any time in the hub's Settings → Connections, or remove the hub's access in your Google Account permissions. Disconnecting deletes the stored tokens.
• Ask the household owner to delete your account or any record or document. A deleted document is removed from the server. Its encrypted backup copy stays in the hub's own Google Drive folder until it is deleted there.

Changes and contact

If this policy changes, the date above changes with it. For questions or deletion requests, contact the household owner, using the email address shown on Google's sign-in screen for this app.