Privacy Policy

Because you have an account:

• Your email address and name.
• A password, stored only as a hash we cannot reverse — or, if you sign in with Google, a link to your Google account instead of a password.
• Whether your email address has been confirmed, and when you last signed in.
• If you asked for an invitation: the address, name and note you sent, so we can answer you.

Because your household uses it:

• Everything anyone in the household types in — accounts and their balances, transactions, budgets, recurring bills, chores and who completed them.
• Who is in the household, their roles, and invitations sent.
• The household's name, currency and language, and a timestamp of when something in it last changed.

What we do not collect:

• Anything from your bank. There is no bank connection in this product — no account numbers, no automatic transactions, no credentials.
• Payment or card details. The product is free and there is no billing.
• Analytics, advertising identifiers, or tracking of any kind. There are no third-party scripts on these pages.
• Your household's financial data is never sent to an AI service. No feature does this.

Run the product for you, and email you about it — invitations, password resets, address confirmation, and occasional notices about the service itself, such as a change to these documents.

We do not sell personal information, share it for advertising, or use it to build a profile of you. We do not use your household’s data to train anything.

Operator access: running the platform means seeing accounts, email addresses and which households exist, and it means being able to delete them. It does not mean reading what is inside a household. The database enforces that separation, rather than us promising to be careful — a household’s financial data is only readable by a session belonging to one of its members.

These companies process data on our behalf, under their own terms, and this list is exhaustive:

• Vercel — Hosting and content delivery

  Runs the application and serves every page. Sees requests, IP addresses and anything in them.

• Neon — Database

  Stores everything in your household — accounts, transactions, budgets, bills, chores — plus your name and email address. Hosted in the United States.

• Resend — Email delivery

  Sends invitations, password resets and address confirmations. Sees the recipient address and the contents of those messages, which never include your household's financial data.

• Google — Sign-in, only if you choose it

  If you sign in with Google, Google tells us your email address, name and profile picture, and knows you use this product. If you sign in with a password instead, Google is not involved.

We will also disclose information where the law requires it. If that ever happens and we are permitted to tell you, we will.

Data is stored in the United States. We keep it while your account exists, because the product is a record of your household’s money — deleting last year’s transactions after a set period would break the thing you are using it for.

Server logs, which include IP addresses, are kept by our hosting provider for a short period and are not used for anything else.

Email heydavidelliott@gmail.com from the address on your account and we will delete it. Self-service deletion is not built yet; this is done by hand in the meantime, which is why it is worth saying plainly rather than burying.

What deletion removes:

• Your account, your password or Google link, and your sessions.
• Your membership of every household.
• Any household where you were the only member, and everything in it — accounts, transactions, budgets, bills and chores.

A household with other people in it is kept: it is not only yours to delete. Ask the same address for a copy of your data and we will send it; an export feature is not built yet either.

Only an adult can create a household. A parent or guardian may invite someone aged 13 to 17 into theirs, and in doing so accepts these terms for them — we collect the same things for that account as for any other, and the adult who invited them can see it and can remove the account.

Pitch In is not for anyone under 13, and we do not knowingly create an account for one. A household can record chores against a child without that child having a login, which is the intended way to include a younger family member. If we learn that someone under 13 has an account, we will delete it and what it holds. If that design changes, this section changes first.

Connections use HTTPS. Passwords are hashed. Each household’s data is separated at the database level rather than by application code remembering to filter it, and the application connects with a restricted database role that cannot bypass that separation.

Two things we do not have yet, said plainly because their absence is the honest state of an early-access product: two-factor authentication and independent security certification. If there is a breach affecting your data, we will tell you by email and comply with the notification laws of Michigan, United States and your own state.

Two, and both are there to sign you in. One keeps you signed in. The other is set only if you turn on two-step verification and tick “don’t ask again on this device”, and it is what remembers that for 60 days.

Neither is used to track you. There are no advertising cookies and no analytics cookies — nothing on this site measures what you look at — which is why there is no cookie banner. Your choice of light or dark mode, and whether amounts are blurred, are kept by your browser rather than by us and never reach our servers.

When this policy changes in substance, the version number above changes, and the next time you open Pitch In it tells you so and links you here. We tell you in the product rather than by email on purpose: a message can land in a spam folder and never be seen, whereas a notice on the page is one you actually get. Pitch In is the controller of this data. Write to heydavidelliott@gmail.com with any question about it, including a request to see, correct or remove what we hold. See also the terms of service.