Your account is created with Sign in with Apple, Sign in with Google, or a one-time code sent to an email address you choose. We never see or store a password. If you choose Apple or Google, that company tells us only a stable identifier for you and — unless you hide it — your email address; we never receive your password, and we ask them for nothing else. Apple's “Hide My Email” is fully supported: if you use it we only ever see the relay address. We store: the transactions you add (amount, direction, merchant label, timestamp), your chat messages with the assistant, a short assistant memory note derived from your chats (which may include facts you tell it, such as your name, salary date or rent), the meals you choose to save (dish name, calories, protein, meal time), mood check-ins (a score and an optional tag), gratitude notes, breathing session logs, task titles and due dates, and recurring-payment detections we derive automatically from your transactions (subscription name, amount, cadence).
If you use them, we also store: savings goals (name, target, amount saved), net-worth entries you type (kind, label, value — never a bank or broker connection), the monthly income and fixed-bill figures you enter, the funds and stock symbols on your watchlist and the units you hold, habit definitions and the days you ticked them, fasting windows, water counts, workout sets, and — if you choose to log them — blood-pressure and blood-sugar readings and the names and times of medicines you asked to be reminded about. We store health readings exactly as you type them and never interpret them.
What stays on your phone and never reaches us: your journal entries and captured ideas, your people list (names, relationships, birthdays and the notes you keep about them), and voice memos — those are transcribed on the device itself; the audio is never uploaded. The one exception is deliberate: when you ask Mr. Money to draft a message for someone, the details you put in that request (for example a first name and the occasion) are sent to our AI provider to write the draft. Nothing is sent to anyone the draft is about — the app has no ability to message anybody.
On Android, if you grant permission, the app reads a daily wellness snapshot from your phone's health service — steps, sleep minutes, and weight — solely to build your daily brief. This health data is read-only: we never write to your health service, never share it with anyone, and never use it for advertising. It is deleted immediately and completely when you delete your account.
If you photograph a meal, the image is sent once to our AI provider to estimate what is on the plate, and is never stored — not on our servers and not by the provider. Only the nutrition estimate is saved, and only after you review and confirm it. The estimate is exactly that: an estimate, not medical or dietary advice, and you can edit or discard it before anything is saved.
If you enable it, the app reads payment alerts from your banks and payment providers on your device only, to extract the amount, direction, and merchant of completed payments. This covers the alerts already in your inbox and new ones as they arrive. Only senders registered as banks or payment providers are read — personal messages arrive from phone numbers and are never opened. Message text never leaves your phone; only the extracted transaction is synced. One-time passwords (OTPs) and non-payment messages are ignored — never stored or transmitted. We never send SMS, and never share your messages with anyone.
Contact names and birthdays you add to the People tab stay on your device only and are never uploaded to our servers — the app does not sync names.
Your data is used solely to produce your money brief and power your assistant. To generate replies, your chat messages — together with your money brief, recent transactions and assistant memory note — are sent to a third-party AI provider that processes them on our behalf: Cloudflare Workers AI (Meta Llama 3.3, used for free chat) or Anthropic (Claude, used for Pro chat). Neither provider uses your data to train their models. We do not sell your data or show ads. Our processors are Cloudflare (hosting, database and AI inference), Anthropic (AI replies for Pro) and RevenueCat (subscription management). Apple and Google act as identity providers if you sign in with them; they receive nothing about your money, only the fact that you signed in.
Settings → "Delete my data" permanently erases everything we hold about you, immediately.
chaudhariswwapnil@gmail.com