Privacy Notice

1. Who we are

MoneyMap is operated by Devin Huang and Vishnu Prabu ("we", "us"). For the personal data described in this notice, Devin Huang and Vishnu Prabu acts as the data controller and decides how and why your data is processed.

2. Data we collect

• Account data: name, email address, login credentials.
• Financial entries you create: transactions, budgets, categories, and savings goals.
• Support data: messages you send when contacting support.
• Usage and device data: pages visited, actions taken, device type, browser, and IP address, used for security and to improve the product.

3. How we use your data

• Create and maintain your account.
• Provide, operate, and improve the MoneyMap service.
• Detect, prevent, and respond to fraud and security incidents.
• Respond to your support requests.
• Comply with legal obligations.

The legal bases we rely on are: performance of a contract (to provide the service you signed up for), legitimate interests (to keep the service secure and to improve it), consent (where required, e.g. for non-essential cookies), and legal obligation.

4. Who we share data with

• Service providers / subprocessors — hosting, database, authentication, analytics, and customer support tooling that help us run the service.
• Paddle.com — our Merchant of Record, which processes payments, manages subscriptions, handles invoicing, and ensures tax compliance for paid plans.
• Professional advisers — legal and accounting advisers where reasonably needed.
• Authorities — where we are required to disclose data by law.

We do not sell your personal data.

5. International transfers

Some of our service providers may process your data outside your country of residence, including outside the UK and the EEA. Where this is the case, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, or reporting requirements. When data is no longer needed, we delete or anonymise it.

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing or object to processing;
• request portability of your data;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data protection supervisory authority.

We will respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data. No method of transmission or storage is 100% secure, but we work to maintain industry-standard protections.

9. Cookies

We use a small number of essential cookies required for authentication and to keep the service running. Where we use non-essential analytics or marketing cookies, we will ask for your consent and you can manage your preferences from within the app or your browser settings.

10. Contact

For any privacy questions or to exercise your rights, contact Devin Huang and Vishnu Prabu via the support contact in the app.