מדיניות פרטיות

1. Information we collect and its sources

Account information comes from you or your chosen sign-in provider: name, email, profile, authentication identifiers, password hashes, preferences and session records. Apple or Google sign-in provides the information you authorize it to disclose.

Financial information includes accounts, balances, transactions, merchants, budgets, goals, loans, investments, properties, tax or estate records, notes and documents you enter or import. Documents, receipts and screenshots can contain sensitive information about you or other people. Only upload data you are entitled to use.

Optional features may process AI prompts and chat history, financial context needed for your request, mood entries, location or travel information, device notification tokens, and family or sharing relationships. Device access depends on the permissions you grant. Other users can provide information when they invite you or share records with you.

Billing providers return purchase, subscription and entitlement identifiers and status. We also process support communications, security and operational logs, IP addresses, session/device information and, when enabled, analytics events. Payment-card entry is handled by the payment provider.

2. Purposes and legal bases

Where a lawful basis is required, account creation, authentication, storing your records, syncing devices, calculations and features you request are processed to perform our contract with you. Required account data is necessary to provide the service; optional fields are not required to maintain a basic account.

We rely on legitimate interests, where available and after balancing your rights, for securing accounts, preventing abuse, troubleshooting and maintaining reliable operations. Legal obligations can require billing, tax, security or disclosure records. We use consent where required for optional analytics, device access or other optional processing. You may withdraw consent through the relevant settings without affecting earlier lawful processing.

AI and personalization can categorize spending, identify patterns and suggest actions using your records and corrections. These are informational suggestions, not decisions that grant credit, move funds or otherwise make legally binding financial decisions about you. Optional AI data sharing has a separate control; accepting the Terms is not a substitute for that choice.

3. Recipients and data sharing

We do not sell personal data. Hosting, database and storage operators process account information, financial records and files to run and secure the service. Email delivery services, including AWS SES where configured, process addresses and message content for account and service communications. Authorized support staff process information needed to resolve your request.

Stripe processes web payments. Apple App Store and Google Play process purchases made through those stores and provide purchase validation and subscription events. Apple and Google may also process sign-in information when you choose their login. Push delivery uses device tokens and notification content through the configured delivery services, including Expo and Google FCM on supported devices.

The website can use Google Analytics when the analytics consent setting permits it. Essential authentication and security storage is separate from optional analytics. You can change cookie preferences. No advertising network or sale of financial records is required to use MoneyDiary.

Optional AI features can send selected text, financial context, prompts, images or documents to OpenAI. The code also supports Anthropic for configured AI workflows. Provider choice depends on the enabled feature and deployment. Avoid submitting information unnecessary for your request. Disabling future AI sharing does not undo a request already processed.

Family features, invitations and share links disclose the information you choose to share to the selected recipients or anyone able to use a public share link. Recipients may keep copies. We may also disclose information when legally required or necessary to address abuse, protect rights or respond to a lawful authority request, subject to applicable safeguards.

4. AI training, analytics and de-identification

The limited permission in our Terms does not authorize general-purpose AI training on identifiable financial records. Account-specific learning from your corrections, transaction categorization and spending patterns helps personalize your service and is distinct from training a general-purpose model.

Using an AI feature involves external processing. Provider retention and model-training settings must be considered separately from MoneyDiary’s own processing; we do not promise zero provider retention. Contact our privacy team for the provider and processing details applicable to your request.

Operational and consent-based usage analytics help assess performance and feature use. De-identification must prevent identification before information is treated as anonymous; pseudonymous or account-linked records remain personal data and retain the protections in this policy.

5. Android Bank SMS suggestions (optional)

Bank SMS suggestions are off by default, require Android SMS permission and an in-app opt-in, and never run on iOS, macOS, or web. Matching bank alert text can be used to suggest transaction details. Verification codes and OTP messages are filtered on the device and server.

We never create transactions automatically from SMS: you review and confirm every suggestion. Matching text may be sent for AI extraction only after you allow AI data sharing. You can disable the feature, revoke the Android permission, or use manual paste and screenshot imports without SMS permission.

6. Security

Sensitive financial fields and stored uploaded files use encryption at rest, and connections use transport encryption. Passwords are hashed. Access controls and session management restrict access. No security measure can eliminate all risk; encryption does not mean that no authorized service provider can process the information.

7. Retention and deletion

Account and financial records are kept while needed to provide the account and requested features. You can request deletion in Settings or contact [email protected]. Export records you need first. Deleting an account removes its related active database records and revokes sessions; stored-file cleanup is a separate operation and can require follow-up if it fails.

Deletion is not an immediate erasure of every copy. Billing-event records, payment-provider records and records needed for tax, fraud prevention, security, legal claims or a binding retention obligation may remain for those purposes. Backups may retain copies until their backup cycle expires. Copies already received by people you shared with are outside account deletion.

The exact completion time depends on verification, file cleanup, provider processing, backup schedules and any applicable retention obligation. Our privacy team will explain applicable timing and any retention exception when handling your request, and respond within the period required by applicable law. Contact us if deletion appears incomplete. Cancel subscriptions with the billing provider before deleting your account.

8. International processing

Using the service can involve processing outside your country by hosting, communications, billing and AI providers. Processing locations depend on the deployed service and selected feature. Where transfer restrictions apply, a valid transfer mechanism and any required assessment or consent must be in place; accepting the Terms alone is not a blanket authorization for international transfers. Contact [email protected] for information about recipients, destinations and applicable safeguards.

9. Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, portability, restriction of processing, or object to processing based on legitimate interests. You can withdraw consent to optional processing, change device permissions and manage cookie choices. Where local law provides rights concerning sale, targeted advertising or sensitive information, you may exercise those rights through our privacy contact.

For GDPR-covered processing, you may complain to your competent data protection supervisory authority. Under the CCPA where applicable, rights can include knowing, accessing, correcting and deleting information and exercising applicable opt-out rights without unlawful discrimination. Authorized agents may contact us; we may need proportionate identity or authority verification.

Rights have legal exceptions. If we cannot fulfill all or part of a request, we will explain why and any available complaint or appeal route. You may contact your regulator without first contacting us. Optional-feature consent can be withdrawn without closing your account.

10. Children and policy updates

MoneyDiary is intended for adults aged 18 or older. Contact our privacy team if a child has provided information. We will notify users of material changes through appropriate service or email notices and update the version date. Where a new purpose requires consent, we will request it before that processing.

11. Contact

Send privacy and personal-data requests to [email protected]. Send account, subscription or legal correspondence to [email protected]. Both addresses are linked below.