Privacy Policy

Who we are

Monetika is provided by DIMA S SOFTWARE SRL, a company registered in Romania (“we”). We are the controller of the personal data described in this policy. Our company details are on the Contact page. You can reach us at dum.gotca@gmail.com.

What we store

Your wallets and their currencies, transactions (amount, date, category, labels and note), categories, labels, budgets, recurring rules and settings (main currency, your own exchange rates, reminder times and days) are stored in Cloud Firestore, in Google Cloud’s europe-west3 region (Frankfurt, Germany). The server functions for sharing and account deletion run in the same region.

Your sign-in is managed by Firebase Authentication, a Google service that may process data outside the European Economic Area (EEA). You start with an anonymous account. If you link a Google or Apple account, Firebase Authentication stores its email address and name (with Sign in with Apple, this can be a private relay address), and your profile may keep a copy of the email address.

Your name in shared wallets

Each transaction and recurring rule records who added it: your account ID and, once you link a Google or Apple account, its display name (or its email address if it has no name), stored as the author name. Each wallet also lists its members by the same name. The members of a wallet you share can see these names.

Invitations

When you invite someone to a wallet, anyone who opens the link and signs in with a Google or Apple account sees your name, the wallet’s name and currency and the number of members. Each link works once and expires after 7 days; a used or expired link shows only your name and the wallet’s name. An invitation is stored with your account ID, your name, the wallet’s name and, once used, the account ID of the person who used it. You can cancel an invitation until it is used or expires. Used and expired invitations may be kept until you delete your account.

Analytics and crash reports

We use PostHog (PostHog, Inc., USA) to understand how the app is used and to fix problems. It receives events such as the app being opened, the screens you view and actions like “transaction added” (with the transaction type, never its content) or “budget created” (with its period). It also receives device and app information (device model, operating system, app version, language and time zone) and your IP address, from which PostHog may derive an approximate location. Events never include amounts, notes, labels or wallet names. Once you link a Google or Apple account, these events are linked to its email address; before that, to your account ID. PostHog also uses this information to decide which features and in-app surveys you see; if you answer a survey, your answers are stored with your email address or account ID.

Errors are reported to PostHog too, identified the same way: errors the app logs, error messages written to the app’s log and uncaught errors captured automatically. These reports contain the error message, a stack trace and technical details such as an error code. To investigate a problem, we can switch on more detailed diagnostic logs remotely, which may also include data from your profile, such as your labels.

Crash reports are collected with Firebase Crashlytics. They contain device and app information (such as device model, operating system version, app version and the app environment), stack traces, and a random installation identifier generated by Firebase. Monetika does not attach your account ID, email address or financial data to crash reports.

App updates and security

Monetika downloads app updates from Expo (650 Industries, Inc., USA). When it checks for an update, Expo receives your IP address, your platform, the app version and a random installation ID. To protect our servers from abuse, the app proves that it is a genuine copy through Firebase App Check, which uses Apple App Attest or Google Play Integrity.

Exchange rates

Exchange rates are downloaded from ExchangeRate-API (open.er-api.com) about once a day. The requests contain no account or financial data. As with any internet request, the provider receives your device’s IP address.

Notifications

Daily reminders and budget alerts are created on your device. Monetika collects no push notification token.

This website

This website loads no analytics and sets no cookies. It is hosted by Vercel Inc. (USA), which processes your IP address and request details in server logs to deliver and protect the site, and keeps these logs for a limited time.

Transfers outside the EEA

PostHog, Expo, Vercel and Google (for Firebase Authentication, Crashlytics and App Check) may process data in the United States, outside the EEA. These transfers rely on the European Commission’s Standard Contractual Clauses in each provider’s data processing terms.

Why we use your data

We use your account, your money data, shared wallets, sync, notifications, app updates and exchange rates to provide the app you asked for (Art. 6(1)(b) GDPR). We use analytics, error reports, crash reports and App Check on the basis of our legitimate interest in keeping the app secure and reliable and in improving it (Art. 6(1)(f) GDPR). You can object to this processing at any time, see “Your rights” below.

How long we keep it

We keep your data while you have an account, until you delete it in the app or delete your account. Firebase Crashlytics keeps crash reports for 90 days. PostHog keeps analytics data and error reports for the retention period of our PostHog project, or until we delete them at your request. Invitations and the website’s server logs are kept as described above.

Deleting your account

In the app, open More, then Delete account. This deletes your data and your account. Wallets that only you were a member of are deleted with their transactions and recurring rules. In a wallet you share with others, you are removed from it, and if you own it, ownership passes to the member who joined first. The transactions you added there stay in that wallet’s history, but your name is removed from them and from the recurring rules you added, so the other members see them as added by a former member. Your account ID stays on them, without your name. Invitations you created are deleted.

Deletion starts right away. If it is interrupted, a daily job finishes it within about a day. Deleting the app from your phone does not delete your account. When you delete your account, analytics are reset on your device. To have your analytics data deleted at PostHog, contact us at the email address below; we delete it within 30 days of your request.

Your rights

You can ask us for a copy of your data, and ask us to correct or delete it, to restrict its use or to give it to you in a portable format. You can also object to its use. In addition, you can export your transactions yourself: in the app, open More, then Export CSV. Write to us at dum.gotca@gmail.com; we answer within one month. You can also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or to the data protection authority where you live.

Children

Monetika is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we update the date above, and we tell you in the app about important changes.

Contact

dum.gotca@gmail.com