Privacy Policy

Monetina (“we”, “us”) provides the personal finance service available at monetina.app. This policy covers that website and application. Questions about it can be sent to hello@monetina.app.

Account information. Your name, email address, and password. Passwords are stored only as salted hashes — never in a readable form. If you sign in with Google, we receive your name, email address, and profile picture from Google; we never see your Google password.

Financial information you add. The accounts, balances, transactions, budgets, tags, recurring schedules, shared expenses, and notes you enter, and the contents of CSV files you import. This data exists so the service can show it back to you — we use it for nothing else.

Technical information. A session cookie that keeps you signed in, session security metadata (such as IP address and browser type), and short-lived server logs used for reliability and abuse prevention.

What we deliberately don’t collect:

• Bank credentials. Monetina never connects to your bank — you import CSV files yourself, so your online-banking login is never shared with us.
• Advertising identifiers or tracking cookies.
• Third-party analytics of your behavior.

• To operate the service and show you your own data.
• To authenticate you and keep your session secure.
• To send transactional email only — email verification and password resets. We do not send marketing email.
• To respond when you contact us for support.

We do not sell, rent, or share your personal data for advertising, and we do not build profiles from it. Currency conversion uses exchange rates fetched from a public rates service; your data is never included in those requests.

Monetina sets a single strictly-necessary cookie: the session that keeps you signed in. There are no tracking, analytics, or advertising cookies. Signing out removes the session.

We use a small number of infrastructure providers, strictly to run the service: an edge hosting and CDN provider (Cloudflare), a managed database host for encrypted-in-transit storage, and a transactional email delivery provider. If you choose Google sign-in, Google acts as your identity provider. Each provider processes only what its role requires.

We keep your data for as long as your account exists. Deleting your account removes your data from our production systems; residual copies in encrypted backups expire as those backups rotate, within 30 days. You can export your data as CSV at any time from within the app — before deleting or whenever you like.

All traffic is encrypted in transit with TLS. Passwords are hashed with an industry-standard algorithm, and sessions are scoped and revocable. No online service can promise perfect security; if you believe you’ve found a vulnerability, please tell us at hello@monetina.app and we’ll act on it promptly.

You can access and export your data from the app, correct it by editing it, and delete it by deleting your account — no support ticket required. Depending on where you live (for example, under the GDPR or CCPA), you may also have statutory rights to access, rectification, erasure, portability, restriction, and objection, and the right to complain to a supervisory authority. To exercise any of them, contact hello@monetina.app.

Monetina is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

If we change this policy, we’ll post the new version here and update the date above. For material changes we’ll also notify you by email or in the app before they take effect.