Privacy Policy
Last updated: July 30, 2026
Left Unspent is operated by Mongeon Consulting & Systems LLC, a Vermont limited liability company. Left Unspent is a trade name of Mongeon Consulting & Systems LLC.
This policy covers both leftunspent.com (the marketing site) and app.leftunspent.com (the app). They behave differently, so where it matters we say which one we mean.
Questions about anything here: support@leftunspent.com
1. The short version
We hold your email address, whatever financial figures you choose to type in, and your billing status. We do not connect to your bank, we never see your card number, and we do not sell or share your data with anyone for advertising.
Deleting your account removes all of it, immediately, except billing records we are required to keep.
The rest of this document is the detail behind those sentences.
2. What we collect
When you create an account. Your email address. If you sign in with Google, Google also gives us the profile information attached to your Google account, which typically includes your name and profile picture. We ask Google for no additional permissions beyond your basic profile and email.
Automatically, when you sign in. Our authentication provider records the IP address and browser user agent associated with each session. This is standard session security data. We do not read it, use it, or analyze it, and it is deleted with your account.
What you enter in the app. Income, expenses, reserves, goals, debts, account balances, assets, and liabilities. These are figures you type. We do not import them from anywhere.
Billing information. Your subscription status, plan, and trial dates. Your payment card is handled entirely by Stripe. We never receive, see, or store your card number.
If you subscribe to the newsletter.Your email address, and if you used the calculator's save feature, the single calculated figure it produced.
Usage analytics. Aggregate page views through Vercel Web Analytics, which is cookieless and does not identify you.
3. What we do not collect
Plainly, because these are the things people ask about:
- We do not connect to your bank. There is no bank login, no account linking, and no transaction import. Nothing in the product asks for banking credentials.
- We do not collect transactions. No merchant names, no purchase histories, no spending records.
- We never see your card number. Stripe handles payment details and we receive only a customer reference and a subscription status.
- We do not store passwords. Sign-in is passwordless, by emailed code or Google.
- We do not use advertising cookies, tracking pixels, or cross-site trackers.
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
The calculator on our marketing site sends us nothing. The figures you type into it stay in your browser. If you choose to save your result by email, we receive your email address and the single calculated number, never the figures you entered to produce it.
4. Why we hold it
To run the product you signed up for: to show you your One Number, to keep your figures available between visits, to sign you in, to bill you, to email you about your account, and to keep the service working and secure.
We do not profile you, target you, or make automated decisions about you.
5. Who else processes it
These are the companies that handle your data on our behalf. Each receives only what it needs to do its job.
| Company | What it does | What it receives |
|---|---|---|
| Supabase | Database and authentication | Your email, your Google identity if you use it, every figure you enter, and session records including IP address |
| Stripe | Payments | Your email address, an account reference, and your payment details, which go directly to Stripe |
| Vercel | Hosting and analytics | Standard server request data, and cookieless aggregate page views |
| Resend | Sending email | Your email address and the message content, for account emails such as sign-in codes |
| Cloudflare | Bot protection on the sign-in page | Your IP address and the challenge interaction, when you visit the sign-in page |
| Sentry | Error monitoring | Technical error details. It is configured NOT to send personal information, IP addresses, or cookies |
| Buttondown | Newsletter, only if you subscribe | Your email address, and the calculated figure if you used the calculator's save feature |
| Sign-in, only if you choose it | Standard OAuth sign-in information |
That is the complete list. If it changes, this page changes.
6. Cookies
The marketing site sets no cookies. None at all. Our analytics is the cookieless kind.
The app sets two. One remembers which month you are viewing. The others keep you signed in. Both are limited to app.leftunspent.com and are not sent to the marketing site. Neither is used for tracking or advertising.
7. How long we keep it
Your data stays until you delete your account. Nothing expires on a schedule and nothing is purged automatically.
When you delete your account, deletion is immediate and complete. Every row of your financial data, your account record, your sign-in identities, and your session history are removed at once. This is enforced by the database itself, not by a cleanup job that might fail.
Two things survive, and both are deliberate. Stripe retains your payment and invoice records, which we are required to keep for tax and accounting purposes. And we keep an internal log of billing events that contains no personal information, only event identifiers and timestamps.
If you delete your account while subscribed, the subscription is cancelled at the same moment, immediately, and there are no further charges. Access ends then rather than at the end of the period you have already paid for.
8. Where it is processed
Your data is processed in the United States. If you are outside the United States, using Left Unspent means your information is transferred to and processed there.
9. Your rights
You can ask us to give you a copy of the information we hold about you, correct it, or delete it. Depending on where you live, you may have additional rights under local law, including the right to object to how we process your information.
Deletion you can do yourself, immediately, from the account page in the app. It takes effect at once.
For access or correction, email support@leftunspent.com. We handle these requests by hand and will respond within the time the applicable law requires. There is no self-serve export today; if you want your data, ask and we will assemble it for you.
We do not require you to justify a request, and we will not treat you differently for making one.
10. Security
Every account's data is isolated at the database level, so one account cannot read another's, and that isolation is enforced by the database rather than by application code. Sign-in is passwordless, so there is no password of yours to steal from us. All traffic uses HTTPS.
No system is perfect, and we would rather say so than imply otherwise. If something goes wrong that affects your data, we will tell you.
11. Children
Left Unspent is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email support@leftunspent.com and we will remove it.
12. Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top. If a change is significant, we will email you rather than rely on you noticing.
13. Contact
Mongeon Consulting & Systems LLC
PO Box 131
Randolph, VT 05060
support@leftunspent.com