Privacy Policy

We collect the following categories of data based on the features you choose to use:

• Account data: Apple or Google account identifier, email address, profile name, and profile photo URL when available.
• Financial entries: transaction amount, category, note, type, and date.
• Subscription entries: service name, amount, billing cycle, renewal date, reminder preferences, icon, and color selections.
• Optional Gmail integration data: connected Gmail address, encrypted OAuth tokens, and receipt-related email data such as merchant, amount, currency, date, subject, snippet, and message identifier.
• AI feature inputs: expense text and insight questions you type; voice recordings you choose to transcribe; and receipts, screenshots, PDFs, text, documents, or URLs you choose to import.
• Payment and entitlement records: plan details, order IDs, payment references, status, and timestamps.
• App diagnostics and security data: request metadata, sync status, rate-limit counters, and operational logs needed to secure and operate the service.
• Device-level local data: secure auth token storage and app preferences stored on your device.

• Authenticate users through Sign in with Apple or Google Sign-In and maintain account sessions.
• Provide core features including expense tracking, dashboards, subscription tracking, and premium access controls.
• Process optional voice capture, AI-assisted expense parsing, insight questions, and user-selected receipt imports.
• Connect Gmail, only when enabled by you, to identify likely receipt emails and present receipt candidates for your review.
• Process premium purchases, entitlement restoration, and billing support.
• Send optional subscription reminder notifications to your device.
• Protect platform security, detect abuse, investigate issues, and improve reliability.

• Contract: to provide the services you request.
• Consent: for optional OpenAI processing, Gmail access, microphone use, and notifications.
• Legitimate interests: security, fraud prevention, and service reliability.
• Legal obligations: accounting, tax, regulatory, and compliance requirements as applicable.

We use trusted third-party services to operate MoneyAI, including:

• Apple and Google identity services for account sign-in, including Apple's private email relay when you choose Hide My Email.
• Google APIs for optional Gmail integration.
• OpenAI APIs for processing user-approved text, audio, insight questions, and selected receipt or document imports for transcription and structured extraction.
• Apple App Store, RevenueCat, and Razorpay for applicable purchase, entitlement, payment, and restoration workflows.
• Hosting and infrastructure providers used to run our APIs, databases, and website.

Gmail access is optional. MoneyAI requests Gmail access only after you choose to connect Gmail inside the app. The requested access is used to identify receipt-like emails and present structured receipt candidates for your review.

Gmail message content used for receipt detection is processed through our application logic and Google APIs and is not sent to OpenAI for receipt extraction.

We do not use Gmail or other Google Workspace API data to develop, improve, or train generalized or non-personalized AI or ML models. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Before an AI feature sends data, MoneyAI asks for permission and identifies OpenAI as the recipient. If you allow it, the specific text, audio recording, insight question, image, receipt, PDF, document text, or URL you chose for that AI feature is sent to OpenAI for transcription, parsing, or structured extraction. This material may contain merchant, amount, date, note, or other personal or financial information visible in your input.

MoneyAI does not send this AI feature data to OpenAI if you choose Not Now. Manual expense entry remains available. You can withdraw permission from Settings under Privacy & AI; MoneyAI will ask again before a future AI request.

We do not sell personal data. We share data only with service providers necessary to operate MoneyAI, process payments, provide optional AI-assisted features, comply with law, enforce our terms, or protect users and platform security.

• Transport security: production API and website communication is protected in transit using HTTPS.
• Token protection: Gmail OAuth tokens are stored encrypted at rest on our servers.
• Session protection: app auth tokens are stored in secure device storage where supported.
• Operational safeguards: authentication checks, access controls, and request rate limiting help reduce abuse and unauthorized access.

We retain account, transaction, subscription, billing, and receipt records for as long as needed to provide services, maintain legal records, resolve disputes, and enforce agreements.

When you disconnect a Gmail account in the app, connected Gmail account records, encrypted Gmail tokens, and associated pending email receipt entries for that account are removed from our active systems, except where limited retention is required for security, fraud prevention, or legal compliance.

When you confirm account deletion in the app, we delete the account and associated synced records from active systems, along with local app data, except information we are legally required to retain.

• Access and update: you can update many details through the app.
• Gmail control: you may connect or disconnect Gmail at any time.
• Notifications: you can disable reminder notifications from device settings.
• AI processing: you can decline or withdraw permission for new OpenAI processing while continuing to use manual expense entry.
• Account deletion: open Settings in the app, choose Delete account in the Danger zone, and confirm. This starts deletion without requiring you to contact support.
• Alternative deletion requests: use our Account Deletion page if you cannot access the app.

Account deletion page: /account-deletion

MoneyAI is not directed to children under the age required by local law for independent consent. If you believe a child provided personal data, contact us to request deletion.

Your information may be processed in countries where our service providers operate. We apply reasonable safeguards appropriate to the transfer where required by law.

We may update this Privacy Policy to reflect product, legal, or security changes. The updated effective date will be shown at the top of this page.

Contact us for privacy requests, support, or questions:
Email: hello@mobileaiexpense.com