Draft. This text is a working draft for the page design. It is not legal advice and has not been reviewed by a lawyer. Highlighted items like this still need a decision or a fact.
1. Who is responsible
Basalticware Lda. (NIPC [NIPC], Carreira de São Francisco, n.º 7, 9680-107 Vila Franca do Campo, Açores, Portugal) is the controller of the personal data processed in MoneyOz. For any privacy question or request, write to support@moneyoz.app.
When you add records to a space, the space's Owners decide who can see them. Everyone you invite to a space can see the data in it, according to their role.
2. What we collect
| Data | Examples |
|---|---|
| Account | Email address, display name, language, currency and time zone |
| Sign-in | One-time codes (short-lived), passkey public keys, session records |
| Your records | Spaces, transactions, categories, counterparties (and their photos, if you add them), recurring bills, notes |
| Change history | Who created, changed or deleted a record, and when |
| Bank data (Premium) | Account names, balances and transactions from banks you connect |
| Devices | Push-notification tokens for your phones and tablets |
| Technical logs | IP address, device and browser type, error reports, kept briefly for security |
We do not use advertising trackers and we do not sell your data.
3. Why we use it
- To provide MoneyOz (performance of our contract with you): your account, your spaces, syncing between devices, reminders.
- To keep MoneyOz secure (our legitimate interest): preventing abuse, limiting sign-in attempts, investigating errors.
- To connect your bank (your consent): only when you choose to connect one, and only until you disconnect it.
- To meet legal obligations: for example, keeping billing records for the period tax law requires.
Optional suggestions in the app (for example, a suggested category for a transaction) are produced by AI models that run on our infrastructure provider. [Confirm wording and whether this is on by default.]
4. Who helps us
We use a small number of providers that process data on our behalf, under data-processing agreements:
| Provider | What for |
|---|---|
| Cloudflare, Inc. | Hosting, database, file storage, email delivery, AI suggestions |
| Enable Banking Oy | Bank connections (Premium only) |
| Apple and Google | Delivering push notifications to your devices |
5. Where your data is stored
Our infrastructure provider runs a global network, so some data may be processed outside the European Economic Area. Where that happens, we rely on [the EU–US Data Privacy Framework / Standard Contractual Clauses] to protect it.
6. How long we keep it
- Your account and records: for as long as your account exists.
- Deleted spaces: kept for 30 days so an Owner can restore them, then deleted.
- One-time sign-in codes: a few minutes.
- Sessions: 30 days, extended while you use the app.
- Technical logs: [retention period].
- After you delete your account: removed within [30] days, except data we must keep by law.
7. Your rights
You have the right to access your data, correct it, delete it, export it, restrict or object to its processing, and withdraw any consent you gave. To use these rights, write to support@moneyoz.app. Deleting your account and exporting your data from inside the app are coming later.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
8. Cookies
This website uses no cookies. The MoneyOz app uses one essential cookie to keep you signed in. Because it is strictly necessary, it does not need consent, and there is no cookie banner.
9. Children
MoneyOz is not intended for children under [minimum age]. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
If we make important changes, we will tell you in the app or by email before they take effect. The date at the top of this page shows when it was last updated.