How MoneyLeft handles your data.
By default MoneyLeft runs entirely on your device: there is no mandatory sign-up, and none of us can see your accounts, your transactions or your balances. Syncing between devices is an optional feature, switched off until you switch it on.
The data controller is Matteo De Min, the developer of MoneyLeft, reachable at matteo.de.min@outlook.it. There is no data protection officer: the app is made by one person, and I am the one who answers at that address.
Without syncing: your archive is just a file on your iPhone, protected by the device's encryption — while the phone is locked it is unreadable even to someone holding it. It never leaves the device, apart from the backups you export yourself (iCloud Drive, Files, AirDrop, email — wherever you decide).
If you choose to sign in with an account in order to sync between your own devices: a copy of your archive is sent to a server tied to your account. There, row level security rules prevent any user — including you, if not correctly authenticated — from reading or writing another account's data.
On one point I would rather be explicit than let it be assumed: like anyone who runs a database, I have technical access to the data stored on the server. I do not use it to look at anyone's archive, and I only access it if you ask me for help with a problem that requires it. If that is not acceptable to you, the app works without an account: without syncing your data never leaves your phone, and I have never had it.
If you do not create an account we process no personal data at all: everything stays on your device, out of our reach. The account exists in order to sync and to use MoneyLeft Pro; if you create one you give us your email address, even before you have turned syncing on.
If you do turn it on, the legal basis is the performance of the contract you accept by using that feature (Article 6(1)(b) GDPR): without processing that data, syncing cannot work. The same applies to the MoneyLeft Pro subscription, which is however handled entirely by Apple.
Your data is never used for purposes other than those described here, nor for automated decision-making or profiling.
Only to those needed to make syncing work, and only if you turn it on:
Nobody else. No selling, no sharing for advertising or statistical purposes.
On your device: for as long as you keep the app installed. Uninstall it and the local archive goes with it.
On the server, if you have turned syncing on: for as long as your account exists. When you delete it from the app's settings, the data is erased immediately and permanently along with the account — no bin, no residual retention period.
No tracking. No advertising. No behavioural analysis. No selling or sharing of data with third parties. Only three network connections are possible: the (optional) one to the sync server if you choose to sign in with an account; the one to the App Store for the subscription, handled entirely by Apple; and, if you subscribe, a call to that same server recording which account the purchase belongs to, so that it stays yours. That last one sends the transaction identifier assigned by Apple, which of the two plans it is, and until when it is valid. Nothing else.
If you turn on the biometric lock, the face or fingerprint check is handled entirely by iOS: MoneyLeft only asks Face ID or Touch ID for a yes or no, and never sees or stores your biometric data.
Forecasts, saving suggestions and recurrence profiles are statistical calculations performed on your device, on your own numbers. They are not artificial intelligence and they are not sent anywhere.
To use MoneyLeft on your device, without an account, there is no minimum age: we process no data at all. To create a sync account you must be at least 16 years old; below that age the consent of the holder of parental responsibility is required.
Over the data we process — that is, the synced data, if you have an account — you may exercise at any time the rights set out in Articles 15 to 21 of the GDPR: access, rectification, erasure, restriction of processing, portability and objection.
You can exercise almost all of them yourself, inside the app, without asking anyone:
For the others, or if something does not work, write to matteo.de.min@outlook.it: I reply within one month, as the GDPR requires.
You have the right to lodge a complaint with a supervisory authority. In Italy it is the Garante per la protezione dei dati personali (garanteprivacy.it). If you live in another country of the European Union, you may contact the authority of your own country.
MoneyLeft shows and projects your own numbers. It is not financial, investment or tax advice, and the forecasts are estimates based on your history.
For any question about this policy or about your data, write to matteo.de.min@outlook.it.