Last updated: 8 July 2026
1. Who we are
Finance Tracker (“the app”) is a private, internal financial dashboard operated
by Adstract Media & Marketing (“Adstract”, “we”, “us”), a company based in
Blackburn, United Kingdom. It is used solely by Adstract’s directors to view
Adstract’s own business finances and the directors’ household finances in one
place.
The app is not offered to, sold to, or made available to any third party or
member of the public. There are no external customers.
Data controller: Adstract Media & Marketing, 16 Strawberry Bank, Blackburn,
BB2 6AA, United Kingdom. Contact: [email protected].
2. What data the app accesses
The app connects to third-party services on a strictly read-only basis. It
never writes to, modifies, or initiates transactions in any connected account.
From QuickBooks Online (via the Intuit Accounting API), the app reads:
- The chart of accounts (used to organise spending categories).
- Customers and invoices (amounts, dates, status, and reference numbers).
- Credit-card accounts and their balances and posted transactions.
The app also connects, read-only, to the directors’ Starling and Monzo
bank accounts to read balances and transactions.
The app does not access payroll data, does not move money, and holds no
payment-card primary account numbers.
3. How we use the data
The data is used for one purpose only: to display an accurate, up-to-date view
of Adstract’s and the directors’ finances to authorised users, for budgeting,
forecasting, and tax planning. The data is not used for marketing, is never
sold, and is never shared with or disclosed to any third party.
4. Where data is stored and how it is protected
- Financial data is stored in a Cloudflare D1 database on Cloudflare’s network.
- Access credentials (the tokens used to connect to QuickBooks, Starling, and
Monzo) are encrypted at rest using AES-GCM; the encryption key is held only
as a server secret and is never stored in the database or source code. - The application is protected by two independent layers of authentication:
Cloudflare Access at the network edge, and passkey (WebAuthn) sign-in with
signed, HTTP-only session cookies at the application layer. - All traffic is served over HTTPS.
5. Data retention
Financial data is retained for as long as the relevant connection remains
active. When a connection is disconnected, future syncing stops. Data may be
deleted on request at any time.
6. Your rights
As the data relates to Adstract and its directors, the directors may at any
time access, correct, export, or delete the stored data. Requests should be
sent to [email protected].
7. Disconnecting QuickBooks
You can disconnect QuickBooks at any time, either from within the app’s
Connections screen or from within QuickBooks Online (Settings → Apps →
Disconnect). On disconnection, the app stops syncing and the stored QuickBooks
credentials are cleared.
8. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top
reflects the most recent change.
9. Contact
Questions about this policy or the data we hold: [email protected].