Moniti Privacy Policy

1. Information We Collect

1.1 Account Information

• Email address
• Hashed and securely stored password
• Authentication data from Google or Apple sign-in

1.2 Financial Information (User-Provided)

To provide core functionality, we collect financial information that you voluntarily provide, including debt balances, interest rates, payment amounts, income information, and transaction or budgeting data.

Moniti does not directly access your bank accounts and does not sell your financial data.

1.3 Payment Information

Payments are processed by third-party providers such as Stripe, Apple Pay, or Google Pay. Moniti does not store full payment card numbers on its servers.

1.4 Technical and Usage Information

• IP address
• Device type and operating system
• App usage data
• Crash and diagnostic data

We use analytics tools such as PostHog to understand how users interact with the Service and to improve functionality.

2. How We Use Your Information

• Provide and operate the Service
• Generate financial insights and projections
• Process payments and subscriptions
• Improve product performance and reliability
• Send service-related communications
• Detect fraud and protect the Service
• Personalize your experience

We do not sell your personal information or share it for cross-context behavioral advertising.

3. Legal Bases for EEA Users (GDPR)

If you are located in the European Economic Area (EEA), we process personal data under the following legal bases: performance of a contract, legitimate interests (including service improvement, analytics, and security), consent where required, and compliance with legal obligations.

4. Sharing of Information

We may share information with trusted service providers that help operate the Service, including hosting providers (Vercel, DigitalOcean), analytics provider (PostHog), email delivery provider (Resend), error monitoring (Sentry), payment processors (Stripe, Apple Pay, Google Pay), and authentication providers (Google, Apple). These providers process data on our behalf under contractual safeguards. We do not sell your personal information.

5. Data Retention

You may request deletion of your account at any time. Personally identifiable account data is deleted upon account deletion. Certain internal identifiers may be retained in de-identified form for system integrity, analytics, and fraud prevention. Deleted data is fully removed within 30 days unless longer retention is required by law.

6. Data Security

We implement reasonable technical and organizational safeguards designed to protect your information. All data is encrypted in transit using HTTPS, and access to production systems is restricted and monitored. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. Where required for EEA users, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Your Privacy Rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data. To exercise your rights, contact us at [email protected].

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the 'Last updated' date accordingly. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Information