Privacy Policy
Last updated: August 10, 2026
This is the privacy policy for iMoney. It explains exactly what data we collect, why we collect it, who sees it, where it's stored, and how to get rid of it. Plain language, no fine print.
If you only read one thing: we don't sell your data, we don't show ads, and you can delete everything in two taps.
| Who runs iMoney | The Up team. Contact: upappco@gmail.com |
|---|---|
| What we collect | Your name + email (from Apple or Google), the transactions you log, your friend list, your monthly budget, and your birthday if you choose to give it |
| What we DON'T collect | Contacts, location, browsing history, device identifiers for tracking, real bank accounts, anything from third-party financial services |
| Who sees it | You. Friends you explicitly tag on a split see those specific shared splits. Nobody else. |
| Tracking / ads | None. Ever. |
| Account deletion | Settings → Delete account. Removes everything within ~30 days (backups roll off) |
1. Who we are
iMoney is built and operated by the Up team. You can reach us at upappco@gmail.com for any privacy question, data request, or complaint.
2. What we collect
We only collect data you give us directly through the app.
From your sign-in provider (Apple or Google):
- Your name (Apple only returns this once, on the first sign-in)
- Your email address (or Apple's private relay email if you choose that option)
- A user ID that ties you to your iMoney account
From you, in the app:
- Transactions — the amount, currency, category, date, payment method, and optional note you enter for each log
- Income entries — amounts and sources you optionally log. Always private; never visible to friends
- Profile avatar — only if you upload one
- Profile basics — your @handle, monthly budget, default currency, payment-method labels
- Birthday — optional, and you can skip it. We use it to mark your day, and your birth year contributes to the age-range statistics described in section 4. Never shown to other users as anything but a birthday.
- Friend graph — the friends you've added, friend requests sent and received, debts owed between you and friends, group events you're part of
- Support messages — what you write to us through Settings → Contact, so we can reply and improve the app
- Device token for push notifications — a string Apple assigns to your install of the app, so we can send pushes to your phone. Not used to track you across apps or sites.
From your device's operating system:
- Standard crash reports, performance data, and basic API request logs — used for debugging, keeping the app fast, and improving features. These don't include your transactions or personal data.
3. What we DON'T collect
- We don't read your contacts or calendar.
- We don't track your location.
- We don't connect to your bank accounts or credit cards. iMoney is a manual tracker — every number is one you typed. Payment-method labels are just names you write yourself.
- We don't use third-party analytics (no Google Analytics, Mixpanel, Amplitude, Segment, etc.).
- We don't use advertising SDKs or share data with advertisers. There are no ads in iMoney and we have no plans to add them.
- We don't track you across other apps or websites (so there's no App Tracking Transparency prompt — you'd never see it anyway).
4. How we use your data
Your data is used to run the app for you, and that's it. Specifically:
- Show your transactions, compute your monthly budget, render reports
- Suggest a category for new transactions (see "Third parties" below)
- Show friends you've explicitly added, and the splits between you
- Send push notifications when a friend tags you on a split, reminds you to pay, confirms or denies a payment, etc.
- Render the monthly report when you tap Export
- Occasionally email you about iMoney — new features and important account notices. Never spam, never third-party offers, and you can opt out of non-essential email anytime via the unsubscribe link or upappco@gmail.com.
- Personalize finance suggestions — we analyze your own spending patterns to offer recommendations that are realistic for you (e.g. a saving tip built from the categories your money actually goes to), instead of one-size-fits-all advice. These are computed from your data, for you alone — never from ads, data sales, or other users' individual data.
We do compute aggregate, de-identified insights — for example, how spending patterns differ by age range or country — to understand trends, improve iMoney, and publish publicly, including in iMoney Lab inside the app and on our website and social accounts. These are always group-level: never tied to you, never your individual transactions, and groups too small to stay anonymous are never published, so no one can be singled out. If you turn off Share usage data, you're excluded from all of it.
Beyond that, we do not sell your data, train outside models on it, or build advertising profiles.
5. Third parties (sub-processors)
iMoney uses these third-party services to function. They never receive more than the minimum needed.
| Service | What we send them | Why |
|---|---|---|
| Supabase | Everything in section 2 | Database + file storage + auth |
| Apple (Sign in with Apple) | Your Apple ID auth token | Sign-in |
| Google (Sign in with Google) | Your Google auth token | Sign-in (optional) |
| Anthropic (Claude API) | Only the description text you type on a new transaction (e.g. "starbucks latte") | Suggests a category. No amount, no friend names. |
| Apple Push Notification Service (APNs) | Notification text + your device token | Delivering pushes to your phone |
Each of these has its own privacy policy, all of which are public. We don't use any other third-party SDK, analytics provider, or ad network.
6. Where it's stored, how it's secured
- All data lives in Supabase (PostgreSQL + object storage). Supabase databases sit on AWS infrastructure in the US East region.
- Data is encrypted in transit (HTTPS / TLS for every request) and encrypted at rest by the underlying storage.
- Row-level security is enforced in the database: a user can only read their own profile and their own transactions. Friend-graph rows are visible to both ends of the friendship, by design.
- The Anthropic API key is held server-side as a Supabase secret. It never ships in the app binary.
7. Sharing your data with other people
The only place data flows between iMoney users is the friend graph:
- A friend you've added can see your @handle, display name, and avatar (the same things any user could find via the directory).
- If you tag a friend on a split, that specific split (the amount, the description, the date) becomes visible to them. Your other transactions do not.
- If you allow it, friends can see your monthly top-category breakdown as a donut chart — you control this per your Settings, including hiding it from specific friends.
- In a group event (a trip), the members you invited see the event's shared logs and settlement math. Nothing outside the event.
We don't share data with anyone outside iMoney except the sub-processors listed in section 5, and only the minimum needed to run the app.
8. Purchases
iMoney is free. The optional iMoney Pro subscription is billed entirely by Apple through your Apple ID — we never see your payment card, only a subscription-status flag from Apple so the app can unlock your Pro features. Manage or cancel anytime in iPhone Settings → your name → Subscriptions.
9. Push notifications
We use Apple Push Notification service (APNs) to send you reminders from friends about money owed, confirmations when payments are marked, and new shared-expense alerts. You can disable all push notifications at any time in iOS Settings → Notifications → iMoney. The app keeps working without them.
10. How long we keep your data
- Active accounts: data is kept as long as your account exists.
- Deleted accounts: when you tap Settings → Delete account, we immediately remove your profile, transactions, friends, and budgets from the live database. Encrypted backups may take up to 30 days to roll off — after which everything is gone for good.
11. Your rights
- Access — everything iMoney knows about you is already visible in the app. If you'd like a structured export, email us.
- Correct — edit any field directly in the app.
- Delete — Settings → Delete account, no questions asked.
- Export — Home → Export report generates your monthly report. Ask us for a raw JSON export if you'd prefer.
- Object / restrict / portability — applicable under EU GDPR and similar laws. Email us and we'll act within 30 days.
- California (CCPA) — we do not sell or share your personal information as those terms are defined under California law.
Requests go to upappco@gmail.com. We'll respond within 30 days.
12. Children
iMoney is intended for ages 13 and up. We don't knowingly collect data from children under 13. If you believe a child under 13 has created an account, email us and we'll delete it. For users between 13 and the local digital age of consent (which can be 16 in parts of the EU), a parent or guardian should review this policy with them.
13. International transfers
iMoney's servers are hosted in the United States. If you use iMoney from outside the US, your data crosses borders to be stored there. By using the app you consent to that transfer.
14. Changes to this policy
When we materially change this policy, we'll bump the "Last updated" date at the top and — for changes that affect what data we collect or who we share it with — surface an in-app notice the next time you open the app.
15. Contact
Questions, deletion requests, GDPR / CCPA requests, anything else: upappco@gmail.com. We respond within 30 days, usually much sooner.