Privacy policy
Last updated September 27, 2026
BET (“Budget Expense Tracker”) is made by Happy Heart Software. BET keeps your ledgers in your own Google Drive, not on our servers. This page explains what BET can see, where your data goes, and how to remove it.
What BET accesses in your Google account
When you sign in with Google, BET asks for:
- Your name, email address and profile photo, to show who is signed in and to tell apart the people a ledger is shared with.
- Access only to files BET creates or that you choose (Google’s “drive.file” permission). That means your ledger spreadsheets, their receipts folders and receipts, a small “BET settings” file, and any spreadsheet you pick yourself with Google’s file picker, for example to open a shared ledger or import transactions. BET cannot see anything else in your Drive.
Your ledgers are Google Sheets in a “BET” folder in your Drive. Your browser reads and writes them directly through Google’s APIs. The spreadsheets you import from are only read, never changed.
What is stored, and where
- In your Google Drive: your ledgers, their settings, receipts you attach, and a “BET settings” file that lists ledgers you removed from BET, so they stay removed on all your devices. They stay there, under your control, until you delete them.
- In your browser: a working copy of your ledgers so BET works offline, your receipt reading settings, and, if you choose, your own Anthropic API key and an on-device AI model. Signing out of BET deletes the copy of your ledgers, your settings and your API key from that browser. A downloaded AI model stays until you remove it in the settings.
- On BET’s server: nothing is stored. Your sign-in is kept in an encrypted cookie in your browser. It holds the Google permission BET uses to get short-lived access for your browser, and it can’t be read without our server’s key. BET has no database of users or transactions.
Sharing
When you share a ledger from BET, BET asks Google to share the spreadsheet and its receipts folder with the people you choose. Google sends any invitation email, which includes a link to open the ledger in BET. You can change or remove access at any time, in BET or in Google Drive.
Reading receipts
- PDF receipts are read on your device. Nothing is sent anywhere.
- AI reading is off unless you turn it on, and you choose how it works:
- “BET’s AI service” sends the receipt through BET’s server to Anthropic, which reads it with its Claude AI. BET’s server passes the receipt on and doesn’t keep it.
- “My own Anthropic API key” sends the receipt from your browser straight to Anthropic under your own account. Your key never goes to BET.
- “On this device” reads receipts with an AI model downloaded to your device (from Hugging Face). Receipts don’t leave your device.
Services BET relies on
- Google, for sign-in, Drive and Sheets, and the file picker.
- Cloudflare, which hosts BET. Like any web host, it processes connection details such as IP addresses, and keeps logs of requests and errors for a limited time, which we use only to keep BET working.
- Anthropic and Hugging Face, only if you turn on the matching receipt reading option.
BET has no ads and no analytics or tracking, and we don’t sell or rent your data.
Google API Services
BET’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. BET uses Google data only to provide the features described on this page, and doesn’t use it for advertising or to train AI models.
Removing your data
- Sign out of BET to remove its data from that browser.
- Delete the “BET” folder in Google Drive to delete your ledgers and receipts.
- Remove BET’s access to your Google account at myaccount.google.com/permissions.
Children
BET isn’t meant for children under 13, and we don’t knowingly collect their information.
Changes
If we change how BET handles data, we’ll update this page and the date at the top.
Contact
Questions or requests: support@happyheartsoftware.com