Updated 10 September 2026
Privacy notice
Application and operator
This notice applies to Crawford Money, a personal-use reporting application operated by Jonathan Crawford. Contact jon.crawford@outlook.com with privacy questions or requests.
The application is non-commercial and limited to authorised users. This documentation site does not grant access to it.
Information and purpose
Authorised users may provide account records, supporting documents and classification information for reconciliation and reporting.
Direct bank connections are being prepared. Once enabled, and only with the relevant account holder's authorisation, supported banks may provide account identifiers, names, currencies, balances and transactions through Enable Banking. Transactions can include dates, amounts, merchant names, references and counterparty details. No bank information is collected by this public site.
Automated categorisation is for record-keeping and can be reviewed and corrected. The application does not make lending or eligibility decisions. It does not initiate payments or ask household members to disclose bank passwords to the application.
Access and service providers
Application records are intended only for authorised users and the providers needed to operate the application. They are not published on this site, sold or used for advertising.
Microsoft provides document storage and email services used for this project. See Microsoft's privacy statement.
Enable Banking and participating banks handle bank authorisation and connectivity under their own terms and notices. See Enable Banking's privacy information.
Before introducing additional service providers or materially changing data handling, this notice will be updated to explain the information involved and the applicable storage and retention arrangements.
Visitors to this site
Cloudflare hosts and delivers these public information pages. It may process ordinary connection and security information, including IP addresses, request times and device or browser information, to deliver and protect the service. See Cloudflare's privacy policy for its processing, retention and international-transfer information.
These pages contain no application-set cookies, advertising trackers, embedded analytics, forms or uploads. Hosting-provider security functions may operate separately. Service providers may process information internationally; this notice does not promise storage solely in the UK or on one computer.
Keeping and deleting records
The retention policy is to keep records while needed for household reconciliation, historical reporting, resolving disputes or applicable record-keeping needs, and to review that need at least annually. Records no longer needed should be deleted. This is a manual policy, not a claim that automatic deletion is already operating.
Account holders can ask for a copy, correction or deletion of their information. Corrections should remain traceable. If original evidence needs to be retained to explain a ledger entry or meet an applicable obligation, the reason will be explained when handling the request. Deleting an active file may not immediately remove provider-managed versions or recovery copies; applicable provider retention must be considered separately.
Correspondence is kept while needed to resolve the enquiry or document its outcome, and is included in the same periodic review.
Stopping bank access
Account holders can withdraw bank access through their bank or Enable Banking's available consent controls and ask the operator to stop future imports. Authorisation is voluntary. Revocation does not automatically delete information already imported; deletion is a separate request.
Questions, requests and changes
Contact jon.crawford@outlook.com to raise a concern or request access, correction, deletion, restriction or an objection to processing. Applicable rights depend on the circumstances and will be considered when the request is received. Do not email passwords, private keys or verification codes.
Where applicable, concerns may also be raised with the relevant data-protection authority, including the UK Information Commissioner's Office. This notice will be updated before material changes to the application's data handling or audience.