Privacy Policy

Liftoff Cash (“Liftoff,” “we,” “us,” or “our”) provides tools that help people create and review household cash-flow plans. This Privacy Policy explains what information we collect, why we use it, how we protect it, and the choices available to you.

Information we collect

Account information

When you create an account, we collect your email address and authentication information. Passwords are stored as salted cryptographic hashes, not as readable passwords. If you sign in with Google, we receive your verified email address and a Google account identifier.

Plan and workbook information

We collect the information you enter to build a plan, which may include income amounts and dates, account balances, bills, payment methods, grocery budgets, savings preferences, and plan names. We also create annual-plan data, workbook previews, validation results, and downloadable workbook files from that information.

Technical information

We use an essential session cookie to keep you signed in and may process standard server information needed to operate and secure the service, such as request timing, error type, and network or device information supplied with a request. We do not currently use advertising cookies, analytics pixels, or session-replay tools.

How we use information

• Authenticate accounts and maintain secure sessions.
• Save drafts and generate, validate, display, download, restore, and export cash-flow plans.
• Provide support, investigate failures, protect accounts, and improve reliability.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, use financial plan information for advertising, or initiate payments or transfers.

Google data and Google Sheets export

Google Sign-In provides only the identity information needed to authenticate your account. If you separately connect Google Drive, Liftoff requests limited permission to create a Google Sheet from a workbook when you choose Export to Google Sheets. We do not use that permission to browse or analyze unrelated files in your Drive.

Google access and refresh tokens are encrypted before storage. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How information is shared

We share information only as needed to operate the service, at your direction, or when legally required. Service providers may process data for hosting, database, network, security, email, or Google integration functions. When you export to Google Sheets, the selected workbook is sent to Google at your request and is then governed by your Google account settings and Google’s policies.

We may disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud or security incidents, or complete a business reorganization subject to appropriate safeguards.

Storage, security, and retention

Plan payloads, draft payloads, and generation rollback snapshots are encrypted with authenticated encryption before database storage. Session and OAuth credentials receive additional protections appropriate to their purpose. Access to generated workbooks requires an authenticated account.

Saved plans remain until you delete them or request deletion. For each plan, we retain the current and immediately previous successful workbook generation; an older generation is removed after a newer one succeeds. Temporary source files used during successful generation are deleted immediately. Abandoned generation folders are scheduled for cleanup after a short safety window. Sessions normally expire after 30 days.

No system can guarantee absolute security. We maintain safeguards intended to reduce unauthorized access, disclosure, alteration, and loss.

Your choices

You may export or delete individual saved plans through the plan manager. You may also request access to, correction of, export of, or deletion of account information, or request disconnection of Google access, by contacting [email protected]. We may need to verify your identity before completing a request. Certain information may be retained when required for security, fraud prevention, legal compliance, or resolving disputes.

You can also revoke Liftoff’s Google access from your Google Account permissions. Revocation stops future API access but does not automatically remove information already stored by Liftoff; contact us if you also want that information deleted.

Children’s privacy

Liftoff is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to the service.

Changes to this policy

We may update this policy as the service changes. We will post the revised policy here and update the date above. If a change materially alters how we use information, we will provide additional notice when appropriate.

Contact

Questions or privacy requests can be sent to [email protected]. General support is available at [email protected].