Privacy policy

Summary

Moneva is a budgeting tool. We store the information you type in so that you (and the people you choose to share a space with) can plan, record and review money together. We do not sell personal data and we do not show advertising.

This page explains what we collect, why, who can see it, how long we keep it and the choices you have.

Who is responsible

Moneva operates this website and the installable web app. Questions about this policy go to the contact details at the end of the page.

What we collect

Account details. Your email address, display name, password (stored only as a salted hash), optional profile photo, language, time zone, theme and notification preferences.

Financial records you enter. Budgets, budget lines and their amounts, transactions (type, amount, date, category, description, merchant, payment method, notes), receipts and documents you upload, savings goals and contributions, expenditure requests and approvals, comments and reactions. Financial records come only from what you type in or import from a CSV file.

Space membership. Which spaces you belong to, your role in each, and invitations you send or accept.

Activity and security records. Sign-in events (time, approximate IP address, browser), an append-only audit log of consequential actions (for example approving a budget or reversing a transaction), one "active today" marker per day for usage statistics, and rate-limiting counters.

Support messages. Anything you send through the contact form, including your name, email and message, together with the IP address it was sent from.

Technical data. Standard server logs (request path, status, timing, a request identifier) retained briefly for reliability and security.

Why we use it

To run the service: show your budgets, calculate balances, send the notifications you have turned on, and keep shared spaces consistent for everyone in them.
To keep accounts secure: detect unusual sign-ins, enforce rate limits and investigate abuse reports.
To support you: answer messages sent through the contact form and resolve problems you report.
To improve the product: aggregate, de-identified usage counts (for example how many people were active this week). We do not profile individuals for marketing.
To meet legal obligations where they apply.

Shared spaces: who can see what

A personal space is private. Nobody else can see its budgets, income, transactions or savings unless you move something into a shared space.

In a shared space (household, group or project) visibility depends on your role:

Members can see the space's budgets and the transactions recorded in them. Budget amounts, who recorded what and the status of approvals are visible to members with the matching permission.
Owners and admins manage members and can see everything in that space.
The activity feed shows actions ("Amina recorded an expense"), not amounts, unless the space owner turns on amounts in the feed and the viewer has permission to see all transactions.
Nothing from your personal space, your income or your private savings balances is ever shown to another member.

When you record a transaction in a shared space, it belongs to that space: other members can see it and it stays there if you later leave.

Insights

Insights ("one thing to look at", the Insights page, weekly and month-end reviews) are computed on our servers from the figures you enter, using rules we explain on the page. Nothing about you is sent to an AI provider.

Cookies

We use only the cookies the service needs to work: a session cookie to keep you signed in and a CSRF cookie that protects forms against forgery. There are no advertising or third-party analytics cookies, and no third-party scripts run on our pages. Your browser may store a theme preference and the service worker cache (the public site, its styles and an offline screen) so the app loads quickly. Your money data is never stored on the device.

We measure how the site is used with our own cookie-free analytics: each page view is stored as the page, the day and hour, the response status, a device type, whether you were signed in, the site you came from and any campaign tags in the link, and a daily-changing anonymous code that cannot be linked back to you or followed across days; we do not store your IP address or use any third-party analytics.

We share data only with providers that help us run the service, under contract and only as needed: hosting, database and file storage, email delivery and, if enabled, push notification delivery through your browser vendor. We do not sell or rent personal data. We may disclose data where the law requires it or to protect the safety of our users.

Leaving a space, deleting your account

Leaving a space. Your membership ends immediately. Transactions, comments and approvals you recorded in that space remain, attributed to you, because the other members rely on them for their accounts. Your personal space is unaffected.

Deleting your account. You can request deletion from Settings → Data. There is a short grace period during which you can cancel. After it, your profile, personal space and private data are deleted. Financial records in shared spaces are kept for the other members but your name is replaced with "Former member". Audit entries required for security and the integrity of shared budgets are retained in de-identified form.

Exporting your data. You can download a copy of your data from Settings → Data at any time.

Retention

Account and financial data: for as long as your account exists.
Sign-in events and rate-limit counters: a few months.
Server logs: a short rolling window.
Support messages: until the case is closed and for a reasonable period afterwards.
Backups: on a rolling schedule; deleted data disappears from backups as they expire.

Security

Passwords are hashed with a modern algorithm. All traffic uses HTTPS. Uploaded files are stored privately and served only to people authorised to see them. Staff access to the control centre requires two-factor authentication and every staff action is logged. We limit the data each staff member can see to what their role needs.

No system is perfectly secure. If you believe your account has been compromised, change your password and contact us immediately.

Your choices and rights

Depending on where you live you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. You can exercise most of these directly from your settings; for anything else, contact us. We will respond within a reasonable time.

Children

Moneva is for people aged 16 and over. We do not knowingly collect data from younger users.

Changes to this policy

We will post updates on this page and change the date at the top. Material changes are announced in the app before they take effect.

Contact

Use the contact page or the support address shown there.