mony-finance-privacy

Privacy Policy

Mony: Finance Tracker

Last updated: April 29, 2026

Depoulols (“we”, “us”, or “our”) built the Mony application (the “App”) as a free, open-source application. This Privacy Policy is intended to inform users (“you”, “your”) about our policies regarding the collection, use, and disclosure of personal information when using our App.

By downloading, installing, or using Mony: Finance Tracker, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Principles

Mony was designed with a privacy-first approach. Your financial data belongs to you and stays on your device. We do not operate servers, we do not collect analytics, and we do not monetize your data in any way.

2. Data Storage

All data generated by the App — including transactions, budgets, categories, accounts, goals, subscriptions, merchants, and user preferences — is stored exclusively on your device in an encrypted local SQLite database.

No cloud storage. Your data is never uploaded to any remote server, cloud service, or third-party platform.
No telemetry. We do not collect usage statistics, crash reports, or behavioral analytics.
No third-party SDKs that track, profile, or fingerprint users are included in the App.

3. Information We Process

3.1 Financial Data (Stored Locally Only)

The App allows you to manually record or automatically detect financial transactions, including amounts, merchant names, categories, dates, account information, and notes. This data is stored solely on your device and is never transmitted externally.

Mony offers an optional Google Sign-In feature for user identification purposes. If you choose to sign in with Google, we receive and store locally on your device the following information provided by Google:

Display name
Email address
Profile photo URL
Google account identifier

This information is used exclusively to personalize your experience within the App (e.g., displaying your name and avatar). We do not transmit this information to any server. You can sign out at any time, which permanently deletes this data from the App.

Google’s use of your information is governed by Google’s Privacy Policy.

3.3 Biometric Data

If you enable biometric authentication (fingerprint or face recognition), the App delegates authentication to the Android operating system’s biometric framework. Mony never accesses, stores, or processes your biometric data directly. Authentication results (success or failure) are the only information the App receives.

4. Permissions

Mony requests the following Android permissions. Each is used solely for the purpose described below and can be revoked at any time through your device’s Settings.

4.1 Notification Access (`NotificationListenerService`)

Why we request it: Mony includes an intelligent transaction detection feature that reads incoming notifications from your banking and financial apps to automatically identify and categorize expenses and income. This is a core feature of the App that saves you time by eliminating the need to manually enter every transaction.

What it does:

The App reads the content of incoming notifications from apps you have designated as financial sources.
Detected transactions are parsed locally on your device and presented to you for review before being recorded.
Notification content is processed in real time and is never stored, logged, or transmitted outside the App.
You are always in control: detected transactions appear in a “Pending Review” screen where you can approve, edit, or dismiss them.

What it does not do:

It does not read notifications from apps that are not financial in nature.
It does not send notification content to any external server, API, or third party.
It does not operate in the background when the App is closed, unless you have explicitly configured it to do so.

You can enable or disable this permission at any time. The App remains fully functional without it — you can always enter transactions manually.

4.2 Push Notifications (`POST_NOTIFICATIONS`)

Why we request it: Mony uses local push notifications to deliver timely, actionable financial alerts directly to your device. These notifications are generated entirely on-device and are not sent from any external server. They include:

Budget alerts: warnings when you are approaching or have exceeded a spending limit.
Bill and subscription reminders: notifications before upcoming recurring charges.
Scheduled reminders: custom alerts you configure for financial tasks.
Goal milestones: progress updates on your savings goals.

Each notification type is accompanied by informational pop-ups within the App that provide context and recommended actions. No notification data is transmitted externally.

4.3 Exact Alarms (`SCHEDULE_EXACT_ALARM`, `USE_EXACT_ALARM`)

Used to schedule precise reminders for bill payments, subscription renewals, and budget cycle resets. These alarms are local to your device.

4.4 Boot Completed (`RECEIVE_BOOT_COMPLETED`)

Used to restore scheduled alarms and reminders after your device restarts. Without this permission, previously scheduled notifications would be lost upon reboot.

4.5 Internet (`INTERNET`, `ACCESS_NETWORK_STATE`)

Used exclusively for:

Google Sign-In authentication (when you choose to sign in).
Loading your Google profile photo (if signed in).

No financial data, usage data, or personal information is transmitted over the network.

4.6 Biometric Authentication (`USE_BIOMETRIC`, `USE_FINGERPRINT`)

Used to enable optional app-lock functionality. Authentication is handled by the Android system — Mony does not access biometric hardware directly.

We do not share, sell, rent, or disclose your personal or financial data to any third party, under any circumstances. This includes:

Advertisers or ad networks
Analytics or tracking providers
Data brokers
Government agencies (unless required by applicable law with a valid legal instrument)
Any other third party

6. Data Export and Backup

Mony provides a local backup and export feature that generates a JSON file containing your financial data. This file is:

Created and stored locally on your device.
Fully under your control — you decide where to save, share, or transfer it.
Not uploaded to any cloud service by the App.

You may also export your data in CSV format for use in spreadsheet applications. These exports are also performed locally.

7. Data Retention and Deletion

Your data persists on your device for as long as you use the App. You can delete your data at any time by:

Using the in-app data management features (delete individual transactions, accounts, categories, etc.).
Using the in-app reset functionality to erase all data.
Uninstalling the App, which permanently removes all locally stored data including the encrypted database.

Since we do not store any data on external servers, uninstalling the App constitutes a complete and irreversible deletion of all your information.

8. Data Security

Mony employs the following measures to protect your data:

Encrypted local database: Financial data is stored in an encrypted SQLite database on your device.
Biometric and PIN lock: Optional app-level authentication prevents unauthorized access.
No network exposure: Since financial data never leaves your device, it cannot be intercepted, breached, or leaked through network-based attacks.
Secure authentication: Google Sign-In uses OAuth 2.0, an industry-standard protocol. Mony never handles or stores your Google password.

9. Children’s Privacy

Mony is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has used the App, please note that all data is stored locally on the device and can be deleted by uninstalling the App.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date at the top of this document. We encourage you to review this page periodically. Continued use of the App after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: depoulols@gmail.com

This Privacy Policy is effective as of April 29, 2026.