Privacy Policy

Monedero is a personal budget tracker. By default it works offline: accounts, transactions, budgets and settings stay on your device. Optional features (cloud backup, Pro, shared budget, Pro AI) use Firebase when you sign in.

The app keeps financial data you enter in a local database on your phone. You do not need an account for core features.

Monedero does not run advertising or marketing analytics. We do not sell your information. We do not use App Tracking Transparency tracking.

You can sign in with Apple, Google or email. We then store in Firebase (Google Cloud): basic profile (name, email, photo), Pro subscription status and, if you enable it, a financial backup snapshot. Data is sent securely (HTTPS), but the snapshot is not end-to-end encrypted on the server—access is limited by your account and security rules. You can keep using the app without an account.

With Pro you can create or join a shared budget with a partner. Expenses you choose to sync (amount, category, date, note) are shared so both of you see a summary. Your partner can see that shared data.

Monedero Pro subscriptions are processed by Apple (App Store) or Google Play. They charge and manage billing. We may store technical verification records (e.g. transaction ID, product, expiry) to unlock Pro. Payment records may be retained after account deletion where required for legal or accounting reasons.

With Pro and sign-in, you can use AI (Firebase AI Logic / Google Gemini) to parse a receipt photo, dictate an expense, or generate a short report insight. We send only what that action needs (receipt image, voice transcript, or a summary of period totals/categories — not your full transaction list). Google processes the request to return the result; we do not use that data for advertising. Without Pro or an account, the app stays local and does not call AI.

Monedero may ask for camera or photo library access to attach receipts (and, with Pro, parse them with AI). Microphone and speech recognition are requested only if you use AI expense dictation. Face ID/biometrics are only used if you enable app lock. The system file picker is used when importing or restoring backups.

If you are signed in, Profile lets you delete your cloud account: we remove your Firebase Auth profile, financial snapshot, shared-budget membership and your shared entries. Local phone data is not wiped automatically (you can reset it in Settings). Payment records may be retained as described above.

You can create a local backup file and share it. That file stays under your control. If you send it through another app, that service’s rules apply.

You can edit or delete data in the app, reset local data in Settings, and delete the cloud account from Profile. Uninstalling Monedero removes the on-device database unless you saved a backup elsewhere.

Monedero is not directed at children under 13. We do not knowingly collect personal information from children.

For privacy questions, email hola@monedero.mobi. You can also use the Support page.

If this policy changes, we will update the date at the top of this page. Continued use of Monedero after an update means you accept the revised policy.