Privacy and security

Only what you and your family put in, plus what it takes to run your account:

• Expenses: amount, store, date, category, who paid, how, the split, and any note.
• Receipt photos and the words read off them.
• Voice notes and what was said in them.
• Documents you save to the Vault, such as insurance cards, IDs and school forms.
• Journal entries, check-ins (doctor, dentist, therapy, school) and your list of providers.
• Calendar events and Discover favourites, trips and searches.
• Your email address, the name you chose, your profile photo, and when you signed in.

Your family, and only your family. Every record is locked to one family inside the database itself, so a member of one family cannot reach another family's records even by mistake. A person joins a family only with the invite code a member gives them.

The people who run GreenBug.ai do not open family records. If you ask us for help with a problem, we look only at what we need to fix it, and only with your say-so.

We never sell or rent your records, and we never share them with advertisers.

• Encrypted in transit and at rest. The site only works over https, and the database and file storage encrypt everything they hold.
• Locked at the database. Every table and every file is guarded by a rule that checks your sign-in and your family before it answers.
• Written down. Who signed in, who added or changed something, and who opened, downloaded or exported what. Your family can read this list under Settings, and it is never edited.
• Automatic sign-out. After 15 quiet minutes the app signs you out on its own, so a phone left on a table does not stay open on your records.
• Strong passwords. At least 14 characters.
• Short-lived file links. A receipt or document opens through a private link that dies after five minutes.
• Alert emails carry no details. When a family member adds something, the others get an email saying only what kind of thing it was and who added it. The store, the note, the file and the words stay inside the app.
• Browser rules. The site tells every browser which code may run and which servers may be talked to, and nothing else. It cannot be shown inside another site.

GreenBug.ai runs on a few outside services. Each one sees only what its job needs:

• Supabase hosts the database and the files, in the United States, encrypted.
• Cloudflare serves the site and runs the public search pages.
• Email alerts go out through an ordinary mail account and carry no details, as said above.
• Claude (Anthropic) reads receipts and tidies voice notes only if you paste your own key under Settings. Only the receipt or the words you ask it to read are sent, and only when you tap the button. Without a key nothing is sent anywhere.
• Voice typing happens on your own phone. The clip is kept in your family's storage; it is not sent to an outside service to be typed up.
• OpenStreetMap, Wikipedia and Open-Meteo power Discover. They receive the place you search for, never your family's records.

• See it. Everything is in the app, always.
• Take a copy. Settings has a spreadsheet export of every expense, and every receipt and document downloads with one tap.
• Fix it. Every expense, note, event and provider can be edited.
• Delete it. Delete any item, or delete your whole account under Settings. When you are the last member, the whole family's records go with it, for good.
• See who looked. The activity list under Settings.
• Ask us. Write to theorangelegacy@gmail.com and a person answers.

If we learn that your family's records were seen by someone who should not have seen them, we will email you within 60 days of finding out, tell you what happened, what was seen, and what we are doing about it.

You can record a voice memo and send it in chat. The clip is stored the same way as any other attachment: in a private place, reachable only by the people in that family. GreenBug.ai does not listen to your memos.

Recording rules are not the same everywhere. In some places every person in the conversation has to agree before you record. Following the law where you are is up to you, not GreenBug.ai, and nothing here gives you permission to record anyone. If you are not sure, ask a lawyer.

GreenBug.ai is built to the safeguards in the HIPAA Security Rule: access control, audit controls, integrity, person authentication, automatic logoff and transmission security. GreenBug.ai is a tool families use to keep their own records. It is not a doctor, a hospital, a health plan or an insurer, and it never decides who is covered for what.

When this page changes, the date at the top changes with it.