MoneJar

Privacy Policy

Effective date: 30 October 2026

This policy explains what information is processed when you use the MoneJar iOS app (the "App"), where and how that information is protected, who it is shared with, and the rights you have over it.

1. Summary

  • You can use MoneJar without creating an account. In that case, everything you enter is stored only on your device and no data is sent to us.
  • If you create an account, your records are also stored on our server so they can be synced across your devices and shared with people you choose. All financial information is encrypted on your device before it is sent to the server. Neither we nor anyone else with access to the server can read it.
  • The App contains no ads. No tools are used to track or measure how you use it. Your data is never sold.

2. Using MoneJar without an account

When you use the App without an account, your accounts, transactions, categories, budgets, goals and photos are stored only on your device. No copy of this information reaches us.

If you delete the App, this information is deleted from your device as well. You can create a backup file with the App's backup feature. Backup files are not encrypted and are stored wherever you save them. You decide who you share them with.

3. Information processed when you create an account

Creating an account is optional. If you create one, the following information is processed.

3.1 Information stored encrypted

The following information is encrypted on your device and stored on the server only in encrypted form:

  • The names, types, currencies, balances, limits and icons of your accounts
  • The amounts, currencies, exchange rates, dates, types and notes of your transactions
  • Your transfers, recurring payments and installments
  • Your categories and tags
  • Your budgets, goals and contributions to your goals
  • Your app settings (such as base currency, language and appearance)
  • Your display name

3.2 Information stored unencrypted

Some information must remain readable by the server for the service to work and is therefore not encrypted:

  • Your email address: Used to identify your account, let you sign in, send you password reset links, and show the people who invite you, or whom you invite, who you are.
  • Links between records: Identifiers showing, for example, which account, category or budget a transaction belongs to. These consist only of random ID numbers and carry no content.
  • Sharing information: Which accounts or budgets you share, with whom, and with which permission.
  • Technical information: When records were created and changed, a random identifier for your device, the App version you use, your notification address and notification language.

3.3 Information that is not sent to the server

Photos you attach to transactions are not sent to the server and remain only on your device. Photos you choose as account or category icons are sent encrypted, like the rest of your information.

4. How encryption works

When you create an account, a key unique to you is created on your device. Your records are encrypted with this key, and shared accounts and budgets are encrypted with separate keys that belong only to that account or budget.

  • A copy of your key is stored on the server, locked with your sign-in password. This lets you reach your key with your password when you sign in on a new device. Your password is never sent to the server in readable form, and we cannot unlock this copy.
  • If iCloud Keychain is turned on, a copy of your key is also stored in iCloud Keychain, which Apple protects with end-to-end encryption.
  • When you share an account or budget, its key is sent encrypted so that only the invited person's device can open it. In invitation links, the key travels in the part of the link that is never sent to the server.

If you forget your password: You can reset it by email. If you are signed in on another device, your key is locked again with your new password and you keep access to your records. To do this, that device is signed out and asks you to sign in again with your new password.

If you forget your password, are not signed in on any other device, and have no copy in iCloud Keychain, your encrypted records on the server cannot be opened. Because we do not have your key, we cannot recover them either. Records on your device are not affected.

5. Who can see your records

Only you and the people you share records with can see them. This rule is not left to the App's own behavior. The server locks every record to its owner and to the people it is shared with, and no query can reach those records without your identity. Because the content of your records is also encrypted, even someone with access to the server cannot read it.

When you share an account, the person you invite can see only that account and the records linked to it. Your other accounts, budgets and goals remain private. When sharing, you choose one of three permission levels: view only, add transactions, or full access. You can end sharing at any time. Once it ends, the other person can no longer access that account.

People you share an account with can see your email address and display name.

6. Service providers

The following providers are used to deliver the service. They process information only as needed to provide it.

  • Supabase: Server and database infrastructure. Data is hosted in the European Union, in Frankfurt, Germany. Your financial records exist only in encrypted form at Supabase as well.
  • Apple: Delivering notifications to your device (Apple Push Notification service), storing the iCloud Keychain copy of your key, and sending account emails (verification and password reset) through iCloud Mail.
  • ExchangeRate-API (open.er-api.com): Fetching exchange rates. Only the code of the currency whose rates are requested is sent to this service. As with any internet request, the service can see your device's IP address. No information about your account or records is sent.

7. Notifications

If you allow notifications, you receive them when:

  • Someone invites you to an account or budget
  • Your permission in a shared account changes, or sharing is ended
  • If you turned it on, to remind you of unfinished draft records

Invitation and sharing notifications do not include account or budget names. They show only the email address of the person who made the change. Draft reminders are created on your device and do not pass through the server.

8. Device permissions

  • Camera: Used only when you choose to attach a photo to a transaction.
  • Photos: Only the photo you select is accessed. Your photo library as a whole is not read.
  • Notifications: Used for the notifications described in section 7.

You can turn these permissions off at any time in your device's Settings app.

9. Home Screen widgets

The balances and summaries shown in widgets are stored on your device, in an area that only MoneJar and its widgets can access. This information is not sent to the server.

10. Retention and deletion

  • Your records are kept until you delete them.
  • A record you delete is kept marked as deleted for a short time so your other devices can learn it was deleted, and is fully removed from the server within 30 days at most.
  • You can delete your account in the App: Settings → Profile → Delete My Account. When you delete your account, your email address, your keys, the accounts you own and all of their records are deleted from the server. Records you added to an account someone else shared with you belong to that account, so they remain with its owner and your name is removed from them. Records on your device remain with you.
  • We may back up the server. Your records are encrypted in these backups as well.

11. Your rights

You have the right to access, correct, delete and port your data. You can exercise most of these rights yourself in the App: you can edit and delete your records, export them as a backup file and close your account. For any other request, you can contact us at the address below.

If you live in the European Union, your rights under the General Data Protection Regulation (GDPR) apply. If you live in Türkiye, your rights under Law No. 6698 on the Protection of Personal Data (KVKK) apply. You have the right to lodge a complaint with the data protection authority in your country.

We process your information on the following legal bases: performance of a contract to provide your account and sync service, legitimate interest to keep the service secure, and your consent for notifications.

12. Children

MoneJar is not directed at children under 13 and does not knowingly collect information from children of that age.

13. Changes

If this policy changes, the effective date on this page will be updated. Significant changes will also be announced in the App.

14. Contact

For questions about this policy or your data: [email protected]