Get started free

Privacy Policy

Last Updated: October 15, 2026

Monavio ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance application at monavio.app and our mobile applications (the "Service").

1. Information We Collect

1.1 Information You Provide

Account Information:

  • Email address
  • Password (encrypted)
  • Display name (optional)
  • Profile photo (optional)

Financial Data:

  • Bank and credit card statements you upload (PDF, CSV)
  • Transaction details extracted from statements
  • Account names and balances
  • Investment holdings and values
  • Manual entries (assets, liabilities, transactions)
  • Budget configurations
  • Custom categories and rules
  • Financial goals

1.2 Information Collected Automatically

Usage Data:

  • Features accessed and actions taken
  • Time spent in the application
  • Error logs and crash reports
  • Device information (type, operating system, browser)
  • IP address

Analytics:

  • Aggregated usage patterns
  • Feature adoption metrics
  • Performance metrics

1.3 Information from Third Parties

We may receive information from:

  • Payment processors (Paddle) regarding subscription status
  • Authentication providers (if using social login)

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process and categorize your financial transactions
  • Generate reports, charts, and insights
  • Calculate budgets, net worth, and projections
  • Provide customer support
  • Send service-related communications
  • Improve and optimize the Service
  • Prevent fraud and ensure security
  • Comply with legal obligations

AI-Powered Processing:

We use AI models from OpenAI to extract and categorize the transactions in the statements you upload, to check statements that need review, and to answer the questions you ask the in-app assistant. When you use the assistant, your question, the conversation and the relevant financial data are sent to OpenAI to produce the answer. This processing:

  • Is used only to provide and improve the Service
  • Is sent with OpenAI's response storage turned off
  • Is not used by OpenAI to train its models

3. How We Share Your Information

We do NOT sell your personal information. Ever.

We may share information with:

Service Providers:

  • Google Cloud Platform / Firebase (hosting, database, authentication)
  • OpenAI (AI processing of your statements, transaction categorization and the in-app assistant)
  • Cloudflare (receiving statements you forward to your Monavio email address)
  • MailerSend (sending account and service emails)
  • MailerLite (onboarding emails; receives your email address, name, language and Monavio forwarding address)
  • Paddle (payment processing and merchant of record)
  • Analytics providers (see "Analytics" below)

Legal Requirements:

  • When required by law, subpoena, or legal process
  • To protect our rights, privacy, safety, or property
  • To enforce our Terms of Service

Business Transfers:

  • In connection with a merger, acquisition, or sale of assets (you will be notified)

4. Data Storage and Security

Storage Location:

Your data is stored on Google Cloud Platform infrastructure, primarily in the United States. Data may be processed in other regions where Google Cloud operates.

Security Measures:

  • All data encrypted in transit (TLS 1.3)
  • All data encrypted at rest (AES-256)
  • Access controls and authentication
  • Regular security audits
  • Secure software development practices

Retention:

  • Account data: Retained while your account is active
  • Financial data: Retained until you delete it or your account
  • Usage logs: Retained for up to 12 months
  • Backups: Retained for up to 30 days after deletion

5. Your Rights and Choices

5.1 All Users

You have the right to:

  • Access your data (export via Settings)
  • Correct inaccurate data
  • Delete your account and all data
  • Opt out of marketing communications

5.2 European Economic Area (GDPR)

If you are in the EEA, you also have the right to:

  • Data portability
  • Restriction of processing
  • Object to processing
  • Lodge a complaint with a supervisory authority

Legal Basis for Processing:

  • Performance of contract (providing the Service)
  • Legitimate interests (security, improvement, analytics)
  • Consent (marketing communications)

5.3 California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used
  • Request deletion of your personal information
  • Non-discrimination for exercising your rights

California Categories Collected:

  • Identifiers (email, IP address)
  • Financial information (transactions, accounts)
  • Internet activity (usage data)
  • Inferences (AI-derived categories)

We do NOT sell personal information as defined by CCPA.

6. Children's Privacy

Monavio is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected data from a child, we will delete it promptly.

7. Cookies and Tracking

We use essential cookies for:

  • Authentication and session management
  • Security and fraud prevention
  • Remembering your preferences

Analytics load by default, based on our legitimate interest in improving the Service. On this website we use Amplitude, Google Analytics 4, and Microsoft Clarity; in the app we use Amplitude. Your analytics profile in the app carries your account identity (user ID, display name, email address) so usage can be associated with your account. Analytics never receive your financial data, statements, or anything you enter into the AI assistant.

You can opt out at any time:

  • Do Not Track — if your browser sends an enabled DNT signal (value "1" or "yes"), we do not load analytics at all, on this website or in the web app, regardless of your region.
  • In the app — go to Settings > Privacy and turn off Share usage analytics; app usage events stop immediately, and the SDK's automatic session markers stop at the next app launch.
  • Browser settings — block or delete site data (cookies and local storage).

See our Cookie Policy for the full list of cookies and retention periods.

8. International Transfers

Your data may be transferred to and processed in countries other than your country of residence. When transferring data outside the EEA, we use:

  • Standard Contractual Clauses
  • Data Processing Agreements with service providers

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Email notification
  • In-app notification
  • Posting the updated policy on our website

Your continued use after changes constitutes acceptance.

10. Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer:

11. Contact Us

Questions about this Privacy Policy?

Monavio
Email: privacy@monavio.app
Website: monavio.app/privacy

This Privacy Policy is effective as of February 19, 2026.