Privacy Policy

iMoney is built and operated by the Up team. You can reach us at upappco@gmail.com for any privacy question.

Only what you give the app or the website directly:

• Name + email — from Apple or Google sign-in
• Transactions — amount, currency, category, date, payment method
• Income entries — optional. For your private records
• Profile — @handle, avatar, monthly budget, default currency, payment-method labels
• Birthday — optional
• Friends — who you've added, requests, debts between you, group events
• Support messages — what you send via Settings → Contact
• Push token — so notifications reach your phone
• Crash + performance reports — for debugging; never your transactions or personal data
• Usage analytics — which features you open, plus your country and language from device settings. Opt out any time

• We don't read your contacts or calendar.
• We don't track your location.
• We don't connect to your bank accounts or credit cards.
• We don't use advertising SDKs or share data with advertisers. There are no ads in iMoney.
• We don't track you across other apps or websites.

Your data is used to run the app for you:

• Show your transactions, compute your monthly budget, render reports
• Suggest a category for new transactions (see "Third parties" below)
• Show friends you've explicitly added, and the splits between you
• Send push notifications when a friend tags you on a split, reminds you to pay, confirms or denies a payment, etc.
• Render the monthly report when you tap Export
• Reply to you if you write to us — through Settings → Contact, or the business enquiry form. We don't send marketing email.
• Personalize finance suggestions — we analyze your own spending patterns to offer suggestions that fit you. Computed from your data, for you alone.

iMoney Lab publishes group-level public statistics — spending trends by age range or country, for example — in the app and on our website and social accounts. Always de-identified: never tied to you, never your individual transactions. Turn off Share usage data and you're out entirely.

Beyond that, we do not sell your data or build advertising profiles.

iMoney records a small amount of first-party usage data. It lives in iMoney's own database — it is not sent to an analytics company, and it is never sold.

• Events — that the app was opened, that a feature was used (recap, split, share profile), that onboarding finished, and that the Pro paywall was shown, tapped, or purchased.
• Device and locale — your country and language from your device's Region and Language settings, your app version, your iOS version, and whether you've allowed notifications.
• Last active — the date you last opened the app.

What is never included: amounts, categories, descriptions, or anything else from your ledger. Your country comes from your device's own Region setting — not from GPS, and not from your IP address.

To turn it off, open Settings → Privacy Policy in the app and switch off Share usage data. Once it's off, nothing is recorded at all.

If you allow notifications, Apple gives iMoney a device token — an identifier for your phone, not for you. We store it so we know where to send a notification, and we delete it when you delete your account.

We send a push when a friend tags you on a split, reminds you about a payment, confirms or denies one, adds you to a group event, or accepts your friend request. We also send occasional notices about iMoney itself. Notification text may contain a friend's name and the amount of the split it refers to, because that's what makes the notification useful.

Notifications travel through Apple's Push Notification Service, so Apple handles the message on its way to your phone. Turn them off any time in iPhone Settings → Notifications → iMoney, or per-type in the app's own notification settings. The app works fully with notifications off.

No other third-party SDKs, analytics, or ad networks.

iMoney lets you sign in with Apple or Google instead of keeping a password with us. We never see, receive, or store your Apple or Google password — the sign-in happens on their pages, and they hand us back a token, not a credential.

What Google gives us. When you tap “Continue with Google”, iMoney requests three basic, non-sensitive permissions — openid, email and profile — and receives only:

• Your email address, and whether Google has verified it
• Your name, as it appears on your Google profile
• Your profile picture
• Your Google account ID — a number that lets us recognise you next time you sign in

iMoney does not request, and cannot access, your Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google service.

What Apple gives us. The same three things: your name, your email address, and an Apple user identifier. If you choose Apple’s Hide My Email, we receive a private relay address instead of your real one — iMoney works perfectly that way, and we never try to resolve it.

What we do with it. Your email address and account identifier are what let you sign back into the same account. Your name and picture pre-fill your iMoney display name and avatar, and you can change or remove both at any time. That is the whole use. Sign-in data is never used for advertising, never sold, and never shared beyond the sub-processors listed in section 7.

Where it’s stored. In our Supabase database, alongside the rest of your account, under the same encryption and row-level security described in section 10.

Limited Use. iMoney’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You can revoke iMoney’s access to your Google account at any time at myaccount.google.com/connections, or to your Apple account at iPhone Settings → your name → Sign in with Apple. Revoking access stops future sign-ins, but it does not delete your iMoney account or its data — for that, use Settings → Delete account, or email us at upappco@gmail.com.

iMoney is out, so the website no longer reserves @handles — you pick yours in the app. We still hold the reservations made before launch, and each one contains:

• Everything in section 8, from the Apple or Google sign-in that was used
• The @handle that was chosen
• The reservation number and the date it was made

Sign in to the app with that same Apple or Google account and the reservation becomes your account. It is deleted along with everything else when you delete your account.

Your @handle and avatar are public by design — that is what a handle is for, and it is how friends will find you. Your email address is never shown to other users.

The website runs no advertising, no analytics, and no third-party tracking of any kind. The only thing it keeps in your browser is the session that remembers you’re signed in.

To release a handle you’ve reserved and delete the account behind it, email upappco@gmail.com.

• Data is encrypted in transit (HTTPS / TLS for every request) and encrypted at rest by the underlying storage.
• Row-level security is enforced in the database: a user can only read their own profile and their own transactions. Friend-graph rows are visible to both ends of the friendship, by design.

iMoney is operated from the United States. Its database and file storage run on Supabase in Tokyo, Japan (AWS ap-northeast-1). So wherever you are, your data is stored in Japan and administered from the United States.

Some of the services in section 7 process data elsewhere — Anthropic and our email provider in the United States, and Apple and Google in the regions they operate. That means your information crosses borders in the ordinary course of running the app.

If you're in the EEA, the UK, or Switzerland, these transfers rely on the European Commission's Standard Contractual Clauses, which our providers incorporate into their terms. If you're in Taiwan or elsewhere in Asia, your data is held in Japan under the same protections described in "Where it's stored, how it's secured".

Whatever the country, the rules in this policy don't change: we don't sell your data, we don't hand it to advertisers, and you can delete all of it from the app.

The only place data flows between iMoney users is the friend graph:

• A friend you've added can see your @handle, display name, and avatar (the same things any user could find via the directory).
• If you tag a friend on a split, that specific split (the amount, the description, the date) becomes visible to them. Your other transactions do not.
• If you allow it, friends can see your monthly top-category breakdown as a donut chart — you control this per your Settings, including hiding it from specific friends.
• In a group event (a trip), the members you invited see the event's shared logs and settlement math. Nothing outside the event.

iMoney comes in a free and a paid (iMoney Pro) version. Subscribe through Apple as it suits you, and manage or cancel anytime in iPhone Settings → your name → Subscriptions. Payment is handled by Apple — iMoney never sees your payment details.

• Active accounts: data is kept as long as your account exists.
• Deleted accounts: when you tap Settings → Delete account, we immediately remove your profile, transactions, friends, and budgets from the live database. Encrypted backups may take up to 30 days to roll off — after which everything is gone for good.

• Access — everything iMoney knows about you is already visible in the app.
• Correct — edit any field directly in the app.
• Delete — Settings → Delete account, no questions asked.
• Export — Home → Export report generates your monthly report.
• Object / restrict / portability — applicable under EU GDPR and similar laws. Email us and we'll act within 30 days.
• California (CCPA) — we do not sell or share your personal information as those terms are defined under California law.

iMoney is intended for ages 13 and up. We don't knowingly collect data from children under 13.

When we materially change this policy, we'll bump the "Last updated" date at the top and — for changes that affect what data we collect or who we share it with — surface an in-app notice the next time you open the app.

Questions, deletion requests, GDPR / CCPA requests, anything else: upappco@gmail.com. We respond within 30 days.