Privacy Policy

Almanac (almanac.report) is operated from Australia as a sole-trader business. Privacy questions and requests: hello@almanac.report. We handle personal information in line with the Australian Privacy Principles.

• Account details:your email address, a password (stored as a hash by our authentication provider, so we never see it), and your email preferences, such as whether you've opted in to our newsletter.
• If you sign in with Google:this is optional. Google sends us your name, email address and profile picture, and they are stored with your login record by our authentication provider. We use the email address to create your account and sign you in, and we treat it as verified because Google has already confirmed it. That is all it is used for: Almanac does not display or use your name or picture, and we don't pass what Google sends us to anyone other than the authentication provider that stores it for us. Signing in with Google gives us no access to your Gmail, contacts, files or any other Google data, and we never receive your Google password. It is deleted with your account.
• Newsletter signups: you can subscribe to the blog newsletter without an account. If you do, we store your email address, when you signed up and which page you signed up from. You are only added once you click the confirmation link we email you, and every newsletter has a one-click unsubscribe link.
• How you found us:the website that referred you (or a campaign tag in the link you followed) and the first page you landed on, recorded once when you create your account, so we can tell which posts and links bring people to Almanac. It isn't used for advertising and isn't shared.
• Content you give us: order-confirmation emails you forward or paste (processed to extract items, prices, dates and order numbers), plus subscriptions, client tags, invoices and business details (such as your business name and ABN) you enter. Invoices you create can include client contact details you enter (their name, email address and postal address); this is personal information about other people that we store so we can generate and display the invoice for you.
• Billing records:your card details go directly to Stripe. We never see or store card numbers. We store only Stripe's identifiers for your customer and subscription, and your plan status.
• Technical basics:the operational logs any web host keeps (IP address, request times, and the URL requested, which for your spreadsheet feed includes your feed token) to run and secure the service. We currently use no third-party analytics or advertising trackers, and our only cookies are the ones that keep you signed in. Our sign-in page runs a bot check (Cloudflare Turnstile), which looks at technical signals from your browser, such as your IP address, to tell people apart from automated abuse. We also keep a few small preferences in your browser's own storage, such as your light or dark theme and which tips you've dismissed, along with the how-you-found-us note described above.

Emails you forward to your personal Almanac address are received by our inbound email processor (Postmark) and parsed to extract order details. The extracted purchase records are stored in your account, where you can edit or delete them. The raw email is not stored in your Almanac account; it is retained temporarily on Postmark's systems in the United States (under their standard retention, currently around 45 days) and then deleted. We never use your email content for anything other than providing the service to you.

We use a small set of infrastructure providers to run Almanac:

• Supabase: our database and authentication, hosted in Sydney, Australia.
• Vercel: web hosting and delivery (a US company with global infrastructure).
• Postmark: inbound email processing (US).
• Stripe: payment processing (US, with Australian operations).
• Resend: sends our emails to you: email verification, newsletter confirmations, plus the monthly digest and budget alerts if you leave them switched on. It receives your email address and the content of those emails, which for the digest and alerts includes your spending totals by category (US).
• Cloudflare: the bot check on our sign-in page (US, with global infrastructure).
• Google: only if you choose to sign in with Google, to confirm who you are. Google learns that you signed in to Almanac, and nothing about what you do in it (US).
• ImprovMX: email routing and forwarding for our almanac.report addresses (US).

Because some providers operate overseas, limited personal information may be disclosed outside Australia (mainly to the United States) in the course of running the service. We choose established providers with strong security practices, and we don't permit them to use your data for their own purposes.

To provide the service you asked for; to secure it and prevent abuse; to bill paid plans; to answer your messages; and to send service emails (like sign-in links or notices about your subscription or these policies). We don't send marketing email without your consent, we don't sell personal information, and we don't use it for third-party advertising.

Almanac isn't designed for children. You should be at least 16 to create an account (and 18 to buy the Business plan). We don't knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email hello@almanac.report and we'll delete it.

• Access & export: your data is visible in the app, and Download all my data in Account gives you everything we hold about you in one file, free on any plan: purchases, subscriptions, invoices, business details, budgets and preferences. Purchases and subscriptions also export as spreadsheets (xlsx download, live CSV feed), and invoices print to PDF. Invoices and business details from a past Business subscription stay viewable, printable and deletable after that plan ends.
• Correction: every record can be edited or deleted in the app.
• Everything else:for personal information that isn't visible in the app (such as operational logs or billing identifiers), email us and we'll give you access to it or correct it.
• Deletion:delete your account yourself, instantly, from Account. That cancels any paid plan, deletes your customer record with Stripe, and permanently removes your purchases, subscriptions, invoices, profile and login from our database. If we can't reach Stripe to cancel your plan, nothing is deleted and you're asked to try again, so an account is never removed while it is still being billed. What can't be erased on the spot is set out under Retention below. If you would rather we did it for you, email hello@almanac.report and we will, within 30 days.
• Feed token: your spreadsheet feed URL contains a personal token. Because the token travels in the URL, it can appear in server logs and browser history, so treat the feed URL like a password. If it leaks, regenerate it in Account, which stops the old link working straight away.
• Newsletter:if you opted in, you can turn it off anytime in Account, and every newsletter includes a one-click unsubscribe link. This doesn't affect essential service emails like sign-in links and billing notices, which we still need to send you.

All traffic is encrypted (HTTPS). Each account's data is isolated with row-level security and per-account scoping. Access to production systems is limited to the operator. No online service can promise perfect security, but if a data breach ever occurs that is likely to result in serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

We keep your data while your account is active. When you delete your account, your records are removed from our database immediately. What remains is limited to: the minimal records we and Stripe are legally required to keep (such as records of payments); raw forwarded emails until Postmark's retention window passes (around 45 days, as described above); and provider logs and backups, which age out on a rolling basis.

If you have a privacy concern, email us first. A human reads it and we'll respond within a reasonable time. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). If we make material changes to this policy, we'll notify you by email or in the app before they take effect.