Privacy Policy

Last updated: November 10, 2026

1. Introduction

IncomeSync L.L.C. ("IncomeSync," "we," "us," or "our") respects your privacy.

This Privacy Policy explains what information IncomeSync collects, where that information is stored, how it is used, when it may be shared, and the choices available to you when you use the IncomeSync Windows application, our website, and related services.

In short:

• Your household financial information stays on your own Windows computer. It is never uploaded to IncomeSync and is never used for advertising.
• You can use the free version of IncomeSync without an account. An account is needed only for paid plans.
• Our website uses advertising cookies and similar technology on some pages, to measure and improve our advertising. Section 9 explains what they collect and how to opt out.
• The app sends a few anonymous usage counts, such as "setup finished," which you can turn off. Section 8 explains them.

2. Using IncomeSync Without an Account

The free version of IncomeSync works without an account. You do not need to give us your name or email address to use it.

When you use IncomeSync without an account, IncomeSync receives only the anonymous app usage counts described in Section 8 (unless you turn them off), and the technical information any internet service receives when the app checks for updates or loads help pages (Section 13). Everything you enter stays on your computer.

If you later create an account to use a paid plan, the information in Sections 5 and 6 applies from then on.

3. Information Stored Locally on Your Computer

IncomeSync stores the information you enter in the application locally on your Windows computer, including information about:

• your household and the people in it;
• jobs, pay, tax, and benefit settings;
• paychecks;
• bills;
• debts;
• financial calculations; and
• other information you enter into the application.

Local financial information is encrypted using AES-256-GCM. The encryption key is protected by Windows for your Windows account, so the file cannot be read from another account or another computer.

This information is never uploaded to IncomeSync. The only exception is information you choose to send us yourself, such as a screenshot attached to a support request (see Section 11).

4. Backups and Recovery Keys

IncomeSync saves an encrypted backup on your computer each time you close the application and keeps your 10 most recent backups.

Uninstalling IncomeSync does not delete your backups. They remain in the IncomeSync-Backups folder in your Windows user folder, so you can restore them if you reinstall.

The recovery key is generated on your computer.

The recovery key is not sent to or stored by IncomeSync.

IncomeSync cannot view, recover, reset, or recreate your recovery key.

You are responsible for securely storing your recovery key and keeping access to your backups. Because IncomeSync does not keep a copy of your data, your backups and recovery key are how you move your data to a new computer.

Anyone who obtains both a backup and its recovery key can open that backup.

5. Accounts and Sign-In Information

An account is needed for paid plans. You can create one with your Google account or with your email address.

Signing in with Google. IncomeSync uses Google Sign-In and Google Firebase. IncomeSync receives and keeps:

• your name;
• your email address;
• your profile picture;
• your Google account identifier; and
• your sign-in times.

Signing in with email. You create an account with your email address and a password. IncomeSync receives and keeps your email address, an account identifier, whether you have confirmed your email address, and your sign-in times. Your password is handled by Google Firebase, which stores it only in a protected (hashed) form; IncomeSync never sees or stores your password. Account emails, such as the email to confirm your address or to reset your password, are sent through Google Firebase.

6. Subscription and Billing Information

Paid plans purchased through the IncomeSync website are sold through Link (Stripe Managed Payments), a Stripe service. You enter your card and billing address on Stripe's checkout page, and Stripe keeps them. Stripe also uses your billing address to calculate sales tax, and handles this information under its own privacy policy.

To manage your plan, IncomeSync keeps:

• your Stripe customer and subscription identifiers;
• your plan and its price;
• your subscription status;
• any trial end date and your next billing date;
• whether your subscription is set to cancel;
• the date you accepted our Terms of Service and the version you accepted; and
• a record of each payment: the amount, currency, and date.

IncomeSync never receives your card details and does not keep billing addresses or phone numbers.

7. Information IncomeSync Does Not Collect

IncomeSync never asks for or keeps:

• payment-card numbers or other card details;
• bank-account login credentials;
• Social Security numbers;
• phone numbers or mailing addresses; or
• your employers, job titles, pay, or any other household financial details.

Your identity (Google or your email), your payment details (Stripe), your subscription records (Firebase), and your finances (your computer) are held separately, so no single system holds your finances together with who you are and how you pay. None of your household financial details are ever given to advertising partners.

8. App Usage Counts

The IncomeSync application sends a short, anonymous message to our servers when certain steps happen, so we can see which parts of the app people use and where they get stuck. Examples: the app was opened, setup was finished, a screen was opened, or an upgrade was started.

Each message contains the name of the step, the application version, the Windows version, the date, and a random installation identifier created on your computer. The identifier lets us count how many installations reach a step without knowing whose they are. It is not linked to your name, email address, or account, and it is never sent to advertising partners.

These messages never include amounts, names, or anything you enter in the application.

You can turn usage counts off at any time in Settings. We keep the counts for about two years and use them only in totals.

9. Our Website: Visit Counts, Cookies, and Advertising

Visit counts. When you open a page on incomesync.app, the page tells our server which page it is, the domain of the website that linked you there (for example, facebook.com), and the campaign tag in the link, if any. We add these to daily totals: the number of visits and page views, and which pages, websites and campaign tags they came from. We don't use cookies for this, we don't keep your IP address or browser details with these counts, and the totals can't be connected to you. If your browser sends a Global Privacy Control or Do Not Track signal, your visit isn't counted. The totals are kept for about two years.

Advertising cookies and pixels. Some pages of our website use the Meta Pixel, a tool from Meta Platforms, Inc. (the company behind Facebook and Instagram). We use it to:

• measure whether our ads lead people to our website and to download IncomeSync;
• show IncomeSync ads to people who have visited our website; and
• reach people who may be interested in IncomeSync.

On the pages where it runs, the Meta Pixel may collect the address of the page you're on and the page that sent you there, your IP address, information about your browser and device, cookie identifiers, and actions you take on the page, such as clicking a Download button. Meta may connect this information with your Meta account if you have one, and uses it under its own data policy.

Where it doesn't run. The Meta Pixel runs only on our marketing pages, such as the home page, feature and pricing information, download pages, landing pages, and the blog. It does not run on the paycheck and overtime calculators, the live demo, the sign-in, checkout, or account pages, or the contact form, so nothing you type on those pages is sent to Meta. We have turned off features that would send Meta your email address or other form entries. The IncomeSync application itself does not use advertising cookies or pixels.

Your choices. Use Your Privacy Choices (also linked at the bottom of every page) to turn advertising cookies off for this browser. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out, and the Meta Pixel does not load. Visitors from the European Economic Area, the United Kingdom and Switzerland are asked for permission before it loads. You can also manage how Meta uses information for ads in your Meta account's ad settings.

10. Firebase and Technical Account Information

IncomeSync uses Google Firebase for sign-in, website hosting, its database, and server functions. These services are located in the United States.

The IncomeSync database holds:

• the account and subscription information described in Sections 5 and 6;
• the app usage counts described in Section 8;
• the website visit totals described in Section 9;
• support requests you send (Section 11); and
• crash reports, if you turn them on (Section 12).

11. Support Requests, Bug Reports, and Screenshots

If you submit a support request or bug report, IncomeSync receives what you write and, if you choose to include them, recent application logs and screenshots. Application logs record what the app did, such as backups and errors, and do not contain your financial figures.

Screenshots show whatever was on your screen, which may include pay or bill information, so check them before sending.

Only the IncomeSync developer can view support requests and screenshots.

Screenshots are deleted from our servers when the issue is resolved, and are never kept longer than 30 days after submission.

The rest of a support request is kept while your account is open, so we can follow up. Support requests sent without an account are kept for up to one year.

12. Crash Reports

Crash reporting is optional and is off unless you turn it on.

A crash report contains the error, where in the application it happened, and the application version.

Before a crash report is sent, IncomeSync removes amounts, other numbers, and email addresses from it. Crash reports never include your household records.

13. Technical Logs and Security Information

Our hosting and server providers record limited technical information to operate, secure, and troubleshoot the Service:

• IP address;
• request information;
• timestamps; and
• application or browser information.

These logs are kept for up to 30 days, unless a specific security incident or legal obligation requires keeping them longer.

14. Google Calendar Integration

Google Calendar integration is optional and is part of paid plans.

If you turn it on, you authorize IncomeSync to access the Google Calendar permissions shown on Google's consent screen.

IncomeSync creates a separate "IncomeSync" calendar in your Google account and adds events to it, which may include:

• paydays;
• person or job information;
• paycheck amounts;
• bill names;
• bill amounts;
• bill due dates;
• subscription renewal information; and
• optional reminders.

Google limits IncomeSync to the calendars it creates: IncomeSync cannot see or change your other calendars or their events.

Google Calendar access tokens are stored on your computer, and calendar requests go directly from the application to Google. They do not pass through IncomeSync's servers.

Events IncomeSync creates become part of your Google account and are governed by Google's terms and privacy policy. Anyone you give access to that calendar can see them. We assume that the Google accounts you connect belong to you or to people who have authorized you, and that you control who can access them.

You can disconnect Google Calendar in the application at any time and choose whether to delete the IncomeSync calendar. You can also revoke IncomeSync's access from your Google Account settings.

15. Google User Data and Limited Use

IncomeSync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. IncomeSync uses Google user data only to provide the features you turn on.

We do not use Google user data for advertising, we do not share it with advertising partners, and we do not let humans read it except with your consent, for security purposes, or to comply with the law.

16. How We Use Information

IncomeSync uses information under its control to:

• sign you in and keep your plan active;
• process payments and handle billing questions;
• respond to support requests and fix bugs;
• understand how the app and website are used, from the counts in Sections 8 and 9, so we can improve them;
• measure and improve our advertising, through the advertising cookies described in Section 9;
• protect the Service against fraud and abuse;
• send you important service information, such as changes to these policies; and
• keep records of your Terms acceptance and comply with legal obligations.

IncomeSync does not sell your personal information for money. Our use of advertising cookies on our website may count as "sharing" or "targeted advertising" under some state privacy laws; Section 23 explains your right to opt out. Your household financial details are never used for advertising.

17. Sharing of Information

IncomeSync uses these service providers and partners:

• Google Firebase: sign-in (including sign-in emails), the database for account and subscription records and usage counts, hosting, and server functions (United States);
• Stripe (including Link): payments, subscription billing, and sales tax, including your card and billing address. For these, Stripe acts independently under its own privacy policy;
• Meta Platforms, Inc.: advertising measurement and advertising, through the Meta Pixel on our marketing web pages only (Section 9). Meta uses this information under its own data policy; and
• Google Calendar: only if you turn on Calendar sync.

IncomeSync may also disclose information when reasonably necessary to:

• comply with law or respond to valid legal process;
• protect rights, property, or safety;
• investigate fraud or abuse;
• address security incidents; or
• enforce our agreements.

18. User-Controlled Sharing

You decide what leaves IncomeSync. If you share a backup, give someone a recovery key, share a screenshot, share a calendar, export information, or otherwise disclose information to another person or service, that information goes where you send it.

Once information has been shared outside IncomeSync, it is outside our control, and its protection depends on the accounts, devices, and people you have shared it with.

19. Retention and Deletion

• Account and subscription information is kept while your account is open.
• You can close your account at any time from your account page. This immediately cancels your subscription and permanently deletes your account and support requests from our servers. We keep a record that an account was deleted, without your personal details.
• Closing your account does not affect data on your computer. To remove it, uninstall IncomeSync and delete the IncomeSync-Backups folder.
• App usage counts and website visit totals are kept for about two years, as described in Sections 8 and 9.
• Information collected by the Meta Pixel is kept by Meta under its own data policy.
• Screenshots are deleted as described in Section 11.
• Technical logs are kept for up to 30 days, as described in Section 13.
• Stripe keeps billing records, such as invoices, as required for tax and accounting purposes.

20. Security

Your IncomeSync data is encrypted on your computer, as described in Section 3.

Data sent between the application, the website, and our servers is encrypted in transit (HTTPS). Database rules limit each person to their own records.

Our Security page explains these protections in more detail.

No software, device, network, or electronic transmission is completely secure. You are responsible for securing your own computer, Windows account, Google account or email account, backups, and recovery key.

21. Children's Privacy

IncomeSync is intended for individuals who are 18 years of age or older.

IncomeSync does not knowingly collect personal information from children under 18.

If we learn that we have collected personal information from a child under 18, we will delete it.

22. Your Privacy Rights

You can ask to access, correct, export, or delete the personal information IncomeSync keeps about you. Much of this you can do yourself:

• if you sign in with Google, your name, email address, and profile picture come from your Google account;
• your card and billing address can be changed in Stripe's billing portal (Manage Billing on your account page);
• you can turn off app usage counts in Settings and advertising cookies with Your Privacy Choices; and
• you can close your account yourself, as described in Section 19.

For anything else, see Section 27. Depending on where you live, privacy laws may give you additional rights, and we will honor them where they apply.

23. California and Other State Privacy Rights

IncomeSync does not sell personal information for money. Our use of advertising cookies on our website (Section 9) may be considered "sharing" of personal information for cross-context behavioral advertising under the California Consumer Privacy Act ("CCPA"), or "targeted advertising" under other state privacy laws.

In the past 12 months, the categories of personal information this may involve are internet or other electronic network activity on our marketing web pages, identifiers such as IP addresses and cookie identifiers, and general device information, shared with Meta Platforms, Inc. for advertising.

You have the right to opt out of this sharing and of targeted advertising. To opt out:

• use Your Privacy Choices on any page of our website; or
• turn on Global Privacy Control in your browser, which we honor as an opt-out; or
• email support@incomesync.app.

Depending on your state, you may also have the right to know, access, correct, and delete personal information, and to appeal a decision about your request by replying to our response. We will not discriminate against you for exercising these rights.

We do not use or disclose sensitive personal information for purposes that would require offering a right to limit its use, and we do not knowingly sell or share the personal information of anyone under 16.

24. Data Breach Notification

If IncomeSync experiences a security incident involving your personal information, we will notify you as required by applicable federal and state law.

25. Third-Party Services

Google, Firebase, Stripe, Meta, and Google Calendar keep information under their own privacy policies and terms, which you can review to learn how they handle information.

26. Your Choices

You can:

• use the free version of IncomeSync without an account;
• turn off app usage counts in the application's Settings;
• turn off advertising cookies on our website with Your Privacy Choices, or with Global Privacy Control;
• keep your website visits out of our visit counts by turning on Global Privacy Control or Do Not Track in your browser;
• choose whether to turn on Google Calendar integration, and disconnect it at any time;
• choose whether to turn on crash reporting;
• decide what to include in support requests;
• manage or cancel your subscription;
• close your IncomeSync account; and
• control what information you export or share.

27. Privacy Requests

Send privacy requests to support@incomesync.app. If you have an account, send it from the email address on your account, so we can identify it.

We will respond within the time required by law, and in any case within 45 days.

28. Changes to This Privacy Policy

If we make material changes to this Privacy Policy, we will notify account holders by email, show a notice in the application, and post the updated policy here.

The "Last updated" date at the top of this policy is the date it takes effect.

29. Contact

Email: support@incomesync.app