Google account access
Privacy notice
Last updated 5 October 2026
This notice covers the Google OAuth app named Buerger Family PA. Simon Buerger operates it for his household. It is not a public service.
What the app reads
When an account holder authorizes the app, it receives the Gmail gmail.readonly permission. It can read messages in that connected account, including messages already marked as read. It cannot send, delete, or change Gmail messages.
For Simon’s account, a self-hosted n8n workflow scans the inbox for possible household actions. It reads message identifiers, sender, subject, date, body text, and supported attachment text. Some attachments cannot be read; those are treated as gaps, not as proof that they contain nothing important.
A separate n8n trial workflow reads forwarded bank transaction notices in the dedicated Family PA mailbox. It uses their details to match or add transactions in our self-hosted Actual Budget. Unsupported or unclear notices are held for review. Matching existing transactions has been tested; importing a genuinely new notice has not yet been verified.
How the information is used
The inbox-review workflow sends up to 8,000 characters from an individual message, along with its sender, subject, date, source identifier, and reading gaps, to an OpenAI model through our private classifier. The text may include body text and supported attachment text. The model suggests, ignores, or flags possible household actions for human review. The model cannot use household tools or act on a suggestion. Separate workflow code saves private review records and may send a short digest through Telegram to Simon’s private chat. A later action in our household tools is separate and depends on a person’s request.
The bank-notice workflow uses fixed parsing and matching rules rather than the email-review model. Transaction details may be stored in Actual Budget. We do not sell Google user data or use it for advertising.
What is kept
Our private n8n tables keep Gmail message identifiers and review details such as subject, sender, date, and outcome. A separate evidence table can keep up to 8,000 characters of source text, including supported attachment text. A short message may fit there in full; this is not a complete mailbox archive. During this trial, failed-run diagnostics may also retain email content for troubleshooting. There is no fixed automatic deletion period for review entries, and cleanup of trial diagnostics still requires manual review. Budget transactions and their source references remain in Actual Budget until changed or deleted there.
Who processes it
Google supplies the authorized Gmail data. The workflows and review records run on household-controlled servers. Selected inbox content is processed by OpenAI for classification; short review notices may pass through Telegram. Bank transaction details are processed in our self-hosted Actual Budget. This public information site is hosted by Cloudflare; it does not receive Gmail content.
Your choices
You can revoke the app’s Gmail access in your Google Account’s third-party connection settings. Revocation stops future reads, but does not itself erase review records or budget transactions already created. To ask about locally stored data or request its manual removal, contact buergerfamily.pa@gmail.com.