What this site stores, who can see it, and what to keep in mind before you share something.
The site is run by a single administrator, who is the only person operating it. Like the operator of any server, the administrator technically has access to everything stored here: the database, uploaded files and backups.
The administrator has no interest in disclosing your data, does not sell it or pass it to anyone, and looks at it only when needed to keep the site running or when you ask for help.
Your data is stored readable by the server - it is not end-to-end encrypted.
You can give another person's account read-only access to a note (optionally with everything inside it) or to a property in the finance section. You can see who has access and revoke it at any time, but whatever that person already read, copied or downloaded can't be taken back.
If the person has no account yet, they get an invitation by email and can create their own, separate account with it.
Photos taken with a phone or camera usually carry hidden metadata - the device model, the time and often the exact GPS location where the photo was taken. The site keeps that metadata as it is, so anyone you share a photo with can read it. Remove the location before uploading a photo whose location is private.
The site sends emails only when needed: to confirm your address, to reset a password, to invite someone you share with, and to tell people when access is granted, revoked or about to expire. Reminders and the same sharing notices also appear in the notification bell.
Deleted items go to the trash first and are removed for good after 30 days. Copies may remain in backups made by the administrator for a while longer. To delete your account with all its data, write to the administrator.