Controller
Controller: Martí Amores Colom, an individual established in Spain. Privacy and rights requests: support@moneofinance.com. Brand and website: Moneo, moneofinance.com.
Browsing and technical logs
Moneo does not integrate analytics, advertising, pixels or tracking tools into this website. Hostinger may process technical data needed to deliver and protect the site, including IP address, User-Agent, requested URL, date and time, server response and security logs.
The purposes are website delivery, security, incident diagnosis and abuse prevention. The legal basis is the legitimate interest in operating a secure service and, where applicable, providing the requested service. Retention follows the provider's technical settings and periods; Moneo will review and limit them to what is necessary.
Contact form
The name, email address, subject and message you provide are used to answer your request, provide support and keep related communications. They are not used for the newsletter or added to a marketing list.
The legal basis is taking steps at your request or performing the service relationship where the request concerns Moneo, and the legitimate interest in responding to other enquiries. Messages are kept while the request is open and ordinarily for no more than 12 months after closure to preserve context and handle possible issues, unless a legal duty or claim requires longer retention.
Providers and recipients
Hostinger provides web hosting and domain email. Brevo provides the newsletter, double opt-in and transactional delivery for the contact form. They receive only the data needed for their role and operate under their processing terms.
Apple, RevenueCat and ExchangeRate-API support specific mobile-app features. They do not receive this website's form data for that reason. The app privacy information describes those separate processing activities.
International transfers
Brevo states that its hosting databases are located in the European Union. Its providers and support operations may involve further processing governed by its terms and contractual safeguards.
Hostinger may operate through entities and providers in different countries. Its data-processing agreement incorporates the European Commission's Standard Contractual Clauses where applicable. The relevant data-processing agreements with Hostinger and Brevo must be accepted and retained before production.
Your rights
You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw newsletter consent. Email support@moneofinance.com with your request and the information needed to identify the relevant processing.
You may also lodge a complaint with the Spanish Data Protection Agency at aepd.es if you believe the processing does not comply with data-protection law.
Security and minimisation
The production website uses HTTPS, client-side and server-side validation, access controls, submission limits, an anti-spam honeypot and data minimisation. Brevo credentials remain on the server and are not included in public JavaScript.
Do not submit passwords, card numbers, bank details or other sensitive financial information through the contact form.
Children
Moneo and this website are intended for people aged 18 or over. Moneo does not knowingly request personal data from children.
Changes to this policy
This policy will be updated when forms, providers or processing activities change. Material changes will be published here with a new update date.
Moneo mobile app
The following sections describe the mobile app separately from the website.
1. Controller
The controller for the processing described here is Martí Amores Colom, an individual established in Spain and owner of the Moneo brand. Contact: support@moneofinance.com.
2. What Moneo is
Moneo is a personal finance organisation and planning tool for people aged 18 or older. It lets users record movements, prepare budgets and track savings goals. It is not a bank, does not connect to bank accounts, and does not execute or hold money.
3. Local-first principle
The financial information you enter is processed and stored locally on your device. This includes income, expenses, amounts, categories, dates, recurrences, budgets, daily check-ins and closures, goals, contributions, withdrawals, notes, preferences, settings, locally calculated advice and other derived financial data.
Moneo creates no account or personal profile, has no first-party backend for this data and does not sync it to a Moneo cloud. We do not send your movements, budgets, goals or notes to PostHog, RevenueCat, Apple or ExchangeRate-API.
4. Data we do not collect
Moneo does not request your name, phone number, bank credentials or card number. It uses no advertising, IDFA, App Tracking Transparency, cross-app tracking, screen recordings, automatic screen-content capture or remote crash reporting or external artificial intelligence. We do not sell personal data.
5. Necessary providers
Apple
Purchases and subscriptions are processed exclusively through the App Store and StoreKit. Apple manages the Apple Account, payment method, billing, receipts, restoration, cancellation and refunds. Moneo receives only the transaction and subscription information needed to recognise Premium access and never receives card details. This processing is necessary to perform the requested purchase and comply with related legal obligations. Apple policy: https://www.apple.com/legal/privacy/
RevenueCat
RevenueCat is used to obtain products and prices, validate receipts, process purchases and restorations, and determine whether the Premium entitlement is active. It processes a random pseudonymous identifier, purchase history and status, Apple receipt, product, entitlement, price, currency and technical information needed to provide and protect the service. Moneo does not replace the RevenueCat App User ID and sends no personal financial data, email address or phone number. It adds moneo_analytics_id with the same random identifier used by PostHog to correlate product interactions and subscription outcomes. This correlation is pseudonymous and does not provide irreversible anonymity.
Processing is necessary to perform the subscription and enable its features, and supports the legitimate interests of fraud prevention and aggregate purchase metrics. RevenueCat stores information in the United States and describes contractual safeguards, including Standard Contractual Clauses where applicable. Policy: https://www.revenuecat.com/privacy
PostHog: product analytics
Moneo uses PostHog EU Cloud to understand interactions with certain features and the Premium funnel: paywall opening/closing, real taps on monthly/annual plans, purchase start, purchase outcomes and restoration. It also records usage milestones and interactions with Moneito. It does not record Moneito's financial state or happy/calm/worried/alert expression.
Events include a persistent random installation identifier, paywall-session identifier, timestamp, app version/build, platform, language, base currency without amounts and Free/Premium status when known. Depending on the event, they include feature/source, plan, product ID, displayed commercial subscription price, paywall duration, result/entitlement and a technical error code. These codes do not include full error messages, receipts or form contents.
We do not send PostHog income, expenses, balance, savings, budgets, personal financial amounts, goal names, movement names/descriptions, custom categories or notes. The app does not send name, email, phone number or IDFA either. The integration uses only explicit events defined by Moneo: it installs no PostHog SDK, performs no autocapture, session replay, recordings or automatic screen capture, and does not apply remote options to enable them.
The random identity correlates events across launches of an installation and is shared with RevenueCat through moneo_analytics_id. There is no identify() or personal profile creation in PostHog, but the identifier and correlation are pseudonymous data, not a guarantee of anonymity. PostHog is the analytics provider in the EU region; network requests expose the network IP to its infrastructure even though GeoIP is disabled and the event IP is discarded. We do not claim that all provider operational logs exclude IP. Provider information: https://posthog.com/privacy and https://posthog.com/dpa
The current app has no analytics consent flow or opt-out switch. We do not attribute this processing to consent that has not been requested. For information and data-rights requests, contact support@moneofinance.com.
ExchangeRate-API
When Moneo needs an exchange rate, it requests a rate table for the base currency code. It does not attach movements, personal amounts, goals, notes or a Moneo identifier. As with any network request, the provider may receive an IP address and technical information needed to respond. The request is necessary to provide the requested conversion. Provider terms and processing information: https://www.exchangerate-api.com/terms
6. Notifications and Quick Actions
Moneo notifications are local and scheduled on the device. There is no remote push server and no push token is obtained for marketing. You can configure reminders in Moneo and withdraw the final permission in iOS Settings.
iOS Quick Actions use an App Group shared by the app and extension to store pending actions temporarily. This data remains on the device and is removed after processing or when you use “Delete all my data”.
7. Exports
You may manually export data as CSV, JSON or PDF. Moneo creates a temporary file and opens the iOS share sheet. The file leaves Moneo only at your direction and for the destination you choose; it is not automatically uploaded to Moneo servers. The temporary copy is deleted after the flow completes or is cancelled whenever the system permits.
8. Retention and deletion
Local data remains until you delete it, uninstall the app or use Settings > Delete all my data. This removes financial data, recurrences, closures, goals, preferences, caches, Quick Actions, temporary exports and Moneo local notifications.
The full contents of a deleted movement remain in memory for four seconds solely to support Undo and are never serialised. Persistent history contains metadata only, with a maximum of 1,000 entries and a maximum retention of 90 days.
Local deletion does not cancel or delete purchases, receipts or subscriptions managed by Apple. RevenueCat may retain the pseudonymous identifier and purchase data needed to recognise or restore Premium. To request deletion of data controlled by RevenueCat, contact support@moneofinance.com; enough information will be required to locate the record safely. Apple handles requests relating to its account and purchase records directly.
The local analytics queue holds up to 500 events and discards pending events older than 7 days. Local deletion clears it and the next capture generates a new identity. This does not automatically delete events already sent to PostHog or the moneo_analytics_id attribute in RevenueCat. Remote retention follows provider/project controls; we do not promise an unverified period. You may request access or erasure of remote data at support@moneofinance.com with only the information needed to locate the record.
9. Legal bases
Consent is not used indiscriminately for processing that is necessary to provide the service.
- Providing requested features and Premium relies on performance of the contract.
- Enabling notifications relies on your choice and the permission managed by iOS, which you may withdraw.
- Security, fraud prevention and technical operation may rely on legitimate interests balanced against your rights.
- Records that Apple, Moneo or providers must retain under tax, accounting or consumer law are processed to comply with legal obligations where applicable.
10. Security
Moneo reduces exposure by keeping financial data on the device, excluding app data from backups where the platform permits, and limiting analytics to explicit events and excluding advertising and screen capture. No system is infallible: protect your device with a passcode, Face ID or Touch ID and carefully review the destination of every export.
11. Your rights
You can inspect, correct, export and delete local data directly in the app. Because Moneo has no account and no remote access to that data, it cannot access or correct it for you.
For personal data controlled by the controller or its providers, you may request access, rectification, erasure, restriction, objection or portability where applicable by contacting support@moneofinance.com. We may request information that is necessary to locate the record and avoid affecting another person. You may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es
12. Changes
This policy may be updated to reflect changes to the product, providers or law. The date above identifies the current version. Material changes will be communicated by an appropriate method in Moneo or on the official website.