Privacy policy

Last updated 28 October 2026

In short: your spending lives on your phone. Bank messages, receipts and your voice are read on the phone itself. Only if you sign in is a copy kept in your account, so you can find it again on another phone. We don't sell your data and we don't show it to anyone.

Without an account

Everything you add or that the app reads stays in the app's storage on your phone. Nothing is sent to us.

Bank notifications

If you switch on notification access, the app looks at new notifications on your phone. It keeps only the ones that look like a bank payment (an amount together with a bank name or a payment word) and ignores the rest without storing them. Codes and passwords in messages are skipped and never kept. This happens on your phone; you can switch it off at any time in Android's settings.

Camera, photos and microphone

Receipts you photograph or pick are read on your phone with Android's on-device text recognition; the photo is not uploaded. When you tap “Say it”, your words are turned into text on your phone: by a Whisper model if you installed one, otherwise by your phone's own speech recognition (Android may use Google's on-device or online service for this, under Google's terms). The app keeps only the text it books, never the sound.

Optional AI on your phone

You can download AI models into the app: language models (from Liquid AI, Alibaba's Qwen) that help read what you type, and speech models (OpenAI's Whisper) that turn what you say into text. They run entirely on your phone; what you type or say is not sent anywhere for this. The models themselves are downloaded from Hugging Face.

If you sign in

We receive your Google account's email address and name (or the email address you sign in with) to identify your account.
The entries, groups, goals and settings you keep in the app are stored in your account so they sync between your phones. They are stored with our backend provider, Convex, on servers in the United States.
Bank notification texts the app read are part of your entries and sync with them.

Reminders

The evening reminder is scheduled on your phone. No push service is involved.

What we don't do

We don't sell or rent your data.
We don't use your data for advertising, and we don't train models on it.
We don't read your SMS inbox; the app only sees notifications, and only after you allow it.

Payments

Purchases are handled by Google Play, with RevenueCat (a payments service) keeping track of which plan you have. They receive an anonymous app id, or your account id if you're signed in, and what you bought; never your card details, and none of your spending.

Deleting your data

Without an account, uninstalling the app deletes everything. With an account, open the app → You → Delete my account: your account and its cloud copy are erased. See also how to delete your account.

Children

Moonpurse is not meant for children under 13.

Changes

If this policy changes, the new version is posted here with a new date.

Contact

Questions: hello@moonpurse.app