Privacy policy

Last updated July 31, 2026. MoneyOnce is in early access. You're handing us the most sensitive data you have, so this page is written to be read, not to be scrolled past. If anything is unclear, email [email protected].

We never store your bank statements

When you upload a CSV, it's parsed in memory and thrown away. The file is never written to disk and never lands in our database — only the transactions you can see in the app do. We never ask for your online banking credentials, and we have no connection to your bank.

What we collect

Your account — the email address you sign up with. There are no passwords; you sign in with a one-time code we email you.
Your profile — username, display name, and anything you choose to add: a bio, an avatar, header images.
Your money data — the transactions you add by hand or import, the categories they land in, your budgets, and the subscriptions we work out from those transactions. This is private to you.
Your verdicts — when you mark a purchase Worth it or Regret, that verdict, the amount paid, and the dates are published to your profile and the feed. This is the only part of your spending that is ever visible to anyone else, and only because you tapped it.
Basic technical data — standard request logs (IP address, browser type) that any web service receives, used to keep things running and to spot abuse.

What we do with it

Run MoneyOnce: show your spending, budgets, subscriptions and feed.
Sign you in, by emailing you a one-time code.
Aggregate verdicts into the product value board — how often a merchant was worth it, and the median price people actually paid. These aggregates carry no names and no account link.
Keep the service secure and working.

What we never do

Sell your data, or share it with advertisers.
Publish your transactions, budgets, balances or statements. The private side of MoneyOnce stays private — only a verdict you tap is ever shared.
Store the statement files you upload.
Ask for your banking login.

Who else touches it

Only the services it takes to run the app: our hosting and database provider, our object storage for images you upload, and our email provider for login codes. They process this data on our instructions and for nothing else.

Your choices

Edit or delete any transaction, budget or verdict at any time.
Make your account private, so only followers you approve can see your verdicts.
Delete your account from Settings. It removes your profile and every transaction, budget, statement record, verdict and post attached to it. This cannot be undone.

How long we keep it

Your data stays while your account is open, and goes when you delete it. Uploaded statement files are never kept at all. Request logs are kept briefly for security and then rotate out.

Changes to this policy

If we change how we handle your data in a way that matters, we'll update the date at the top and tell you in the app before it takes effect.

Questions, or want your data removed? Email [email protected].