Privacy Policy

Effective date: April 30, 2026

Contents

  1. 1. Introduction
  2. 2. Information we collect
  3. 3. How we use information
  4. 4. Data storage
  5. 5. Third-party services
  6. 6. Bank sync data flow
  7. 7. Cookies
  8. 8. Children's privacy
  9. 9. Changes to this policy
  10. 10. Contact

1. Introduction

MonieTally ("we", "our", "the app") is a privacy-first personal finance application. This Privacy Policy explains how we handle information in connection with the MonieTally app and this website (monietally.com). Effective date: April 30, 2026. Our core principle: MonieTally is built so that your financial data never leaves your device. The app does not collect, transmit, or store personal financial data on our servers. We never receive it.

2. Information we collect

Website only: If you submit your email address via our waitlist form, we receive and store that email address to notify you when MonieTally launches. Emails are stored securely in our Supabase PostgreSQL database. We do not share your address with third parties. The app: MonieTally does not collect any personal data from app users. All financial data (transactions, balances, budgets, and analytics) is stored exclusively on your device, encrypted with AES-256. We have no access to it.

3. How we use information

Waitlist emails are used solely to send you a launch notification. We will not send marketing emails, share your address with third parties, or contact you for any other reason without your explicit consent. App data is never used by us. We never have it.

4. Data storage

App data: All financial data is stored locally on your device using AES-256 encryption. It is never transmitted to our servers or any third-party server, except for the initial read via your bank aggregator (see Section 6). Waitlist emails: Stored securely in our Supabase PostgreSQL database, hosted in the EU region.

5. Third-party services

MonieTally integrates with the following bank aggregation providers to sync transactions. Each provider has their own privacy policy: • Plaid (North America): plaid.com/legal/privacy-statement • Tink (Europe): tink.com/privacy-policy • Mono (Africa): mono.co/legal/privacy-policy These providers operate under their respective terms. MonieTally uses them only to fetch transaction data, which is then immediately stored on your device. We do not retain copies.

6. Bank sync data flow

When you connect a bank account, the following happens: 1. You authenticate with your bank via the aggregator's secure flow (Plaid, Tink, or Mono). Your bank credentials are never seen or stored by MonieTally. 2. The aggregator returns an access token and your recent transactions to the app. 3. The app stores this data locally on your device, encrypted and never transmitted. 4. Subsequent syncs follow the same pattern: aggregator → app → on-device storage only. MonieTally acts as a relay from aggregator to device. We do not sit in the middle, log transactions, or maintain a copy.

7. Cookies

This website does not use cookies or any client-side tracking technology. We do not run analytics, ad tracking, or session recording on monietally.com.

8. Children's privacy

MonieTally is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has submitted their email to our waitlist, please contact us and we will delete it promptly.

9. Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page. For significant changes, we will notify waitlist subscribers by email.

10. Contact

Questions about this policy? Email us at hello@monietally.com.