I thought I posted this, repeating

You can run your own relay, you can restrict write access to yourself, read to all. But then the person must add your relay to see your stuff

You can open it to people you trust

You. An use the expense relay to require a deposit to access, then take a fee for use or delete notes & take deposits if they violate TOS.

Probably easier to use outside resources though.