Legal

Privacy Policy

Last Updated: July 10, 2026

At MoneyDiary, we understand that privacy isn't just a legal requirement, it's the foundation of trust, especially when managing cross-border finances. This Privacy Policy outlines how we collect, use, and protect your information.

1. Information We Collect

We collect information to provide you with a seamless financial management experience:

Personal Information: Name, email address, and profile information when you register.
Financial Data: Account balances, transaction history, currency preferences, and budget goals that you manually enter or sync.
Usage Data: Information about how you interact with our platform to improve our services.
Android Bank SMS (optional): If you enable Bank SMS suggestions on Android, the app may read incoming SMS that appear to be bank transaction alerts. This feature is off by default, requires your explicit permission, and never runs on iOS or web. Verification codes and OTP messages are not processed.

2. How We Use Your Data

Your data is used exclusively to power your MoneyDiary experience:

To provide personalized dashboards and financial insights in your preferred currencies.
To calculate exchange rates and cross-border financial scenarios.
To improve our AI algorithms for better transaction categorization and forecasting.
To communicate with you about your account and important service updates.

3. Data Security

We employ bank-grade security measures including AES-256 encryption for data at rest and TLS encryption for data in transit. We do not sell your personal data to third parties.

3a. Android Bank SMS Suggestions (Optional)

On Android only, you may optionally enable Bank SMS suggestions to help pre-fill transactions from bank alert messages.

The feature is disabled by default and requires Android SMS permission plus an in-app toggle.
We filter out verification codes and OTP messages on your device and on our servers.
We never create transactions automatically — you review and confirm every suggestion.
Matching message text may be sent to our AI provider (OpenAI) only to extract amount, merchant, and date for your review, under the same no-training policy as other AI features.
You can always paste SMS text manually or import screenshots without granting SMS access.

4. Cross-Border Data

As a service designed for expats, your data may be processed in multiple jurisdictions. We ensure all data transfers comply with applicable international data protection regulations.

5. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].

6. Regional Privacy Rights

GDPR (Europe): For users in the EEA/UK: You have the right to access, correct, delete, and port your personal data. We rely on contract performance and legitimate interests as lawful bases for processing. You may lodge a complaint with your local supervisory authority.

CCPA (California): For California residents: You have the right to know what personal information we collect, request deletion, and opt-out of sale (though we do not sell your data). To exercise these rights, contact [email protected].

Popia / LGPD: We recognize and respect data protection rights under POPIA (South Africa) and LGPD (Brazil), ensuring your financial data is handled with the highest standard of care regardless of your location.