Privacy Policy

Introduction

This Privacy Policy explains how Monvee (“the App”, “we”, “us”, or “our”) handles your information. We are committed to protecting your privacy and being transparent about our practices.

Please read this policy carefully. By using the App, you agree to the practices described here.

Summary

Monvee is a personal finance tracking app designed with privacy at its core:

• Your financial data is stored on your device, not on our servers. We cannot see your expenses, income, budgets, savings, or receipts.
• No account or login is required to use the App.
• We do not sell or share your personal data with advertisers, data brokers, or any third party for their own purposes.
• Receipts are read on your device by default.If you turn on the optional “With AI” reading mode, only the recognised text — never the photo — is sent through our relay to an AI model running on Cloudflare, with personal details replaced by placeholders first.
• A small amount of technical data is processed by named service providers to process purchases, diagnose crashes and fetch exchange rates — described in detail below. None of it includes your financial records.

Data stored on your device

The App stores the following data locally on your device. Financial records, receipt images and backups are encrypted with AES-256, with the keys held in your device’s keychain. This data is not transmitted to us:

• Financial records: expenses, income, fixed expenses, savings entries, recurring transactions
• Savings goals: goal amounts, deadlines, and progress
• Budget settings: monthly budgets and alert thresholds
• Receipt images and scanned data: photos of receipts you scan and the text extracted from them
• Learned merchant categories: a local database that improves category suggestions over time
• Accounts & payment methods: account names, currencies, payment method labels
• Monthly reports: summaries generated on your device
• App settings: language, theme, color palette, notification preferences, privacy mode, app-lock settings

You can delete all data at any time from Settings → Data → Erase data. Uninstalling the App also removes all locally stored data.

Data that leaves your device

We designed the App so your financial records stay with you. The limited information below leaves your device only in the specific circumstances described, and only to the named providers:

Your financial records are never sent to us or to any of these providers, except within backups that you place into your own cloud account, which we cannot access.

Camera, photos & receipt scanning

The receipt scanner is optional. When you use it:

• The App requests permission to use your camera (to photograph a receipt) or your photo library (to import an existing photo).
• Text recognition (OCR) and any QR/barcode reading happen entirely on your device, using Apple Vision or Google ML Kit running on the phone. Receipt images are never uploaded to us or any third party.
• By default, the recognised text is also interpreted on your device — nothing leaves your phone.
• The resulting receipt image is stored locally on your device, encrypted, and can be deleted at any time by deleting the associated transaction.

You can decline camera and photo permissions and still use every other feature of the App.

Optional: reading receipts with AI

For more accurate results — especially on receipts in languages other than English or French — you can choose to have the recognised text interpreted by an AI model. This mode is off by default. You turn it on, and can turn it off again at any time, in Settings → Receipt Scanner → Receipts are read. When it is on:

• Only text is sent, never the photo. Before anything leaves your phone, names, card, loyalty and customer numbers, e-mail addresses and phone numbers are replaced with placeholders. This redaction is automatic and best-effort; an unlabelled name printed on a receipt can occasionally slip through. The lines after the payment section at the foot of a receipt, where card details usually appear, are not sent at all.
• Alongside the text we send your default currency code and the names of your expense categories, so the reply can be matched to them. No other data from the App — no transactions, balances, budgets or savings — is ever sent.
• Swiss QR bills are decoded on your phone and are never sent.
• The text travels over an encrypted connection to a small relay server we operate on Cloudflare. The relay has it read by Gemma, an open AI model made by Google, running on Cloudflare Workers AI— Cloudflare’s own servers, so the text never goes to a separate AI company (Google does not receive it). The relay keeps no copy of the text and logs only how much text was processed, never the text itself. To prevent abuse it counts requests per network address; that counter is kept for at most 48 hours.
• Cloudflare processes the text only to produce the reading. It does notuse your text to train AI models and keeps it only as long as needed to return the result. Cloudflare’s Workers AI privacy terms apply: https://developers.cloudflare.com/workers-ai/platform/privacy/.
• The reading returned to your phone — merchant, total, date, category, line items and a confidence rating — is stored only on your device, like every other transaction. You review it before it is saved.

Notifications

Budget warnings, savings reminders and spending summaries are scheduled and shown by your device itself. No notification service is involved and nothing leaves your phone for them.

You can disable all notifications at any time from Settings → Notifications.

Backups & data portability

The App lets you back up and restore your data:

• iCloud backup: if you enable it, an encrypted backup file is saved to your own iCloud account. The backup is protected by a passcode you choose and by a one-time recovery code shown when you set it up; either one unlocks it. We hold no key, operate no backup server and cannot access or recover your backups.
• Manual export/import:you can export a JSON backup of everything, or a CSV of your transactions, and share or store it wherever you choose using your device’s share sheet. These files are not encrypted — treat them like any other sensitive document.

If you lose both the passcode and the recovery code, an iCloud backup cannot be opened again by anyone, including us.

App lock & biometrics

If you enable the app lock, the App can use Face ID / Touch ID. Biometric authentication is handled entirely by your device’s operating system. The App never receives, stores, or transmits your biometric data.

Contact support

When you choose to contact support via Settings → Contact Support, your default email app opens with a pre-filled message addressed to finance.app.support01@gmail.com.

This message automatically includes the following device information to help us diagnose issues:

• Device name and model
• Operating system name and version
• App version

This information is only sent if you choose to send the email. You can review and edit the email before sending. We use this information solely to respond to your support request and do not share it with third parties.

Permissions

The App may request the following device permissions:

No permission is required for the core functionality of tracking expenses and budgets.

Third-party services

The App relies on the following third-party services. Each receives only the limited data described in Data that leaves your device above:

• Expo (expo.dev) — the framework the App is built with. It receives no data from the App while you use it.
• RevenueCat (revenuecat.com) — manages Premium subscriptions. Receives an anonymous app-user ID and purchase status, not your identity or financial records. Privacy policy: https://www.revenuecat.com/privacy.
• Sentry (sentry.io)— anonymous crash and performance diagnostics, stored on Sentry’s EU servers. Configured to exclude personal identifiers. Privacy policy: https://sentry.io/privacy.
• Cloudflare (cloudflare.com) — hosts our relay and, through Workers AI, the AI model used only if you turn on“With AI” receipt reading. Receives the redacted receipt text, your default currency code and your category names; does not train on your data and keeps it only as long as needed to return the reading. The relay stores no receipt text; Cloudflare sees your network address for rate limiting. Privacy policy: https://www.cloudflare.com/privacypolicy/.
• Apple — processes in-app purchases and, if you enable backup, stores your encrypted backup in your own iCloud account.
• jsDelivr (jsdelivr.com) — a public content delivery network from which the App fetches exchange rates when a transaction is in another currency. It sees your network address and the requested rates, nothing else. Privacy policy: https://www.jsdelivr.com/terms/privacy-policy.

The App does not use advertising networks, does not use behavioral analytics or tracking platforms, and does not sell or share your data for advertising.

Data security

• Financial records, receipt images and backups are encrypted using AES-256, with keys held in your device’s secure storage (keychain).
• Because your data lives on your device, its security also depends on your device’s own protections (passcode, biometrics, OS updates). We recommend keeping your device secured and up to date.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your rights

Because your financial data is stored on your device and not on our servers, you remain in direct control of it:

• Access: all your data is visible within the App at any time.
• Deletion: delete individual records, or erase everything via Settings → Data → Erase data, or by uninstalling the App.
• Portability: export your data as a JSON backup or a CSV at any time.

Depending on where you live (for example, under the EU/UK GDPR or the Swiss FADP), you may have additional rights regarding any personal data a processor holds. For data processed by the services listed above, you may exercise those rights directly with each provider, or contact us and we will assist. To make a request or ask a question, email finance.app.support01@gmail.com.

Children’s privacy

The App is not directed at children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information via the contact support feature, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will update the “Last updated” date at the top of this document. We encourage you to review this policy periodically.

Contact us

If you have any questions or concerns about this Privacy Policy, please contact us at finance.app.support01@gmail.com.

Monvee is designed to keep your financial life private. Your data belongs to you.