Skip to main content
TabNinjaSign in

TabNinja Privacy Policy

Effective September 21, 2026.

Who we are

TabNinja is operated by Homestead Found LLC, a limited liability company formed in California, USA ("we," "us," or "our"). This policy explains how we handle personal information for TabNinja, including its website, accounts, personal money records, and shared expense features. It does not cover separate products operated by the same company.

Contact: admin@homesteadfound.com. Please include "TabNinja Privacy" in the subject line.

Information we handle

  • Account information: email address, name or display name, profile preferences, authentication identifiers, and account/session status. If you choose email-and-password sign-in, our authentication service processes your credentials. Never send your password to support.
  • Google sign-in information: if you choose Google sign-in when available, Google provides your account identifier and basic profile information, such as your email, name, email verification status, and profile image if supplied. Our authentication service processes this information to sign you in and associate you with your TabNinja account. Google sign-in does not give TabNinja access to your Google password, Gmail messages, Drive files, or contacts. We do not request access to those services for sign-in.
  • Records you enter: transaction amounts, currencies, dates, categories, descriptions, notes, recurring items, budgets or planning inputs, goals, and other information you choose to save through available features.
  • Shared records and information about other people: Group names, participants, invitations, expenses, allocations, recorded payments, membership roles, and edit history. People entries can contain names, email addresses, payment handles, and notes. Another user may enter information about you even if you do not have a TabNinja account.
  • Imports and exports: information you select for import, related review records, and export history. Supported imports are parsed on your device; accepted records can subsequently sync to our servers. Importing is not a connection to your bank. Downloaded exports become copies you control.
  • Technical and support information: device identifiers used for sync, session information, sync operations and errors, security/audit events, service-email delivery information, and messages you send to support. Our hosting and authentication providers also process connection information, such as IP addresses, request times, and browser/device details.

Only enter information you are entitled to use. Avoid adding unnecessary sensitive information, account passwords, or full payment-card details to notes or imported files.

Why we use information

We use information to authenticate accounts, provide requested features, save and synchronize records, manage access to Groups, communicate about accounts, handle support requests, resolve sync problems, protect the service, and meet applicable legal obligations. Required account details are necessary to provide an account; optional records and profile details depend on what you choose to enter.

Currently, we do not sell your financial data to anyone. We do not sell other personal information or share it for cross-context behavioral advertising. We do not use Google sign-in information to target advertising, and we do not use your financial records to market our other products.

Product usage and improvement

We may use information about how TabNinja is used, such as feature interactions, usage frequency, performance, and error events, to understand usage trends, troubleshoot problems, and improve the product's functionality, usability, and reliability. When this information is linked to an account or device, it is handled as personal information under this policy. Any additional tracking remains subject to applicable notice and consent requirements.

This product-improvement purpose does not authorize selling your financial data, publishing financial datasets, or analyzing the contents of your financial records for unrelated purposes.

Your device and cloud synchronization

TabNinja stores records on your device using browser storage so supported features can work offline after authentication. Browser storage also holds preferences and sync identifiers. Cookies and related session storage support sign-in and security.

Supported records synchronize with our servers when a valid connection and session are available. A record marked as saved on your device is not necessarily backed up to the server. Clearing browser data or losing a device can permanently remove changes that have not synchronized.

Signing out does not delete your saved local records or your server account. Use a trusted device and protect access to its browser profile. Clearing site data removes local copies in that browser, but does not itself delete server records or copies on other devices. Check sync status and save any needed export before clearing storage.

You are responsible for securing your device and local copies. Use appropriate device and browser protections, such as a strong device passcode, screen locking, current operating-system and browser updates, device encryption where available, and careful control of shared-device access. Protect downloaded exports and any backups you keep as well.

We do not control your device's security or guarantee that locally stored records or exports will be protected against unauthorized local access, malware, device theft, or loss. These limitations do not remove our own responsibilities for the security of TabNinja or our obligations under applicable data-protection law.

When information is shared

Within Groups. Authorized Group members can see the shared records and history their roles permit. Joining a Group does not itself give members access to your separate personal money records. Other members may already have downloaded or retained shared information; changing access does not erase their existing copies.

With service providers. We use providers for application hosting and delivery, cloud data storage, account authentication, account-email delivery, and support communications. They process information needed for their respective functions. For example, account-email delivery involves recipient addresses, message content, and delivery information, not general access to your financial ledger. Google processes sign-in information when you choose Google sign-in under its own privacy policy. Google sign-in is not a financial-data integration. Our business email service processes messages you send to our support inbox.

For support, safety, or legal requirements. Authorized personnel may access information when needed to support you, operate or secure TabNinja, investigate misuse, or comply with applicable law. We may disclose information when legally required or reasonably necessary to protect rights and safety, subject to applicable law.

If the business changes. Information may be transferred as part of a lawful merger, acquisition, or transfer of TabNinja, subject to applicable notice, consent, and privacy requirements. This is not permission to use Google data beyond its applicable restrictions.

Where information is processed

TabNinja is intended initially for users in the United States and may be accessed from other countries. Our production database is hosted in the United States. Hosting, authentication, email, and support providers may process information in other locations. Using TabNinja from abroad can therefore involve international transfers, and local protections may differ. This statement does not waive rights or replace transfer safeguards required by applicable law.

Retention and deletion

We retain information for the purposes described above, considering whether your account is active, whether records are needed for a shared Group, security and dispute-resolution needs, and applicable legal requirements. We will delete or de-identify information when it is no longer needed for those purposes, subject to required retention.

Removing a record from the app is not necessarily immediate erasure of all copies. Sync deletion markers, revision or audit history, other members' copies, and provider backups may remain for their applicable purposes and retention periods. We do not promise instant erasure from every device or backup. This does not allow indefinite retention without a valid purpose.

For account closure or a privacy deletion request, contact admin@homesteadfound.com. There is currently no self-service account deletion button. We will explain the request process, verify identity as appropriate, and identify any lawful retention limits. Removing TabNinja's connection in your Google account does not itself delete your TabNinja account or previously stored records.

Your choices and rights

You can update supported profile details, edit records you control, and use available export tools. Feature-specific exports may not include every piece of account or operational information we hold.

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, object to or restrict processing, withdraw consent where processing relies on consent, or appeal a decision. Send requests to admin@homesteadfound.com, including "TabNinja Privacy" and enough detail to identify your request. Do not send passwords or unnecessary sensitive documents. We may need proportionate identity verification and will respond as required by applicable law. You may also contact a relevant privacy regulator where that right applies.

Security, age, and changes

We use access controls and technical safeguards intended to protect information. No service, device, or transmission can be guaranteed completely secure. TabNinja is not an end-to-end encrypted vault in which only you can access server data.

Accounts are for people 18 or older, and of legal age to agree to the Terms where they live. We do not knowingly offer accounts to minors. If you believe a minor has created an account, contact us so we can investigate and take appropriate action.

We will update this policy when our practices change and show the effective date. For material changes, we will provide an appropriate notice and obtain consent where required before using information in a new way. Questions can be sent to admin@homesteadfound.com.