Privacy

What is stored

Your email address; the accounts, transactions, notes, budgets, and categories you enter or import (a debt is an account, named as you like, often after a person); your settings; your sign-in sessions (browser and IP address); your API tokens and connected apps; a history of what those apps did (each call and what it asked for, not the answers), which is deleted after 30 days; if you turn on the email inbox, the emails forwarded to your MoneX address (sender, subject, and text), and if you turn on phone notifications, the notifications your phone sends to your MoneX URL (the app's name, the title, and the text); the text is deleted after 7 days or once you've reviewed it, the rest after 30 days; which of the operator's announcements you've dismissed; and a log of changes, which is deleted after one year. Transactions you delete are kept for 30 days in case you want them back, then removed for good.

Where

On a rented server in France (Contabo, in the European Union). Encrypted backups are kept in separate storage (Cloudflare R2) for about a year. Sign-in codes are sent through the operator's email provider.

What the operator sees

The operator's admin page shows your email address, when you joined and were last active, and how many browsers, API tokens, and connected apps you have. It never shows your accounts, transactions, budgets, or other money data. As the person running the server, the operator could technically read the database, so only accept an invite from someone you trust.

The operator can sign you out everywhere, remove your access, or delete your account. Deleting removes all your data; the operator's own log keeps your email address and when it happened, for one year.

AI apps

If you connect ChatGPT, Claude, or another app (Settings → API tokens), that app can read, and if you allow it change or delete, your MoneX data, and its company processes it under its own terms, usually outside Indonesia. You can disconnect it at any time, and see what it did in Settings → AI app history.

If you turn on the email inbox, each email forwarded to your MoneX address is sent to the AI service the operator set up, so it can read the transaction out of it. That service may be outside Indonesia and handles the email under its own terms. MoneX sends it the email's sender, subject, and text, today's date, your main currency, your account and category names, and the notes you wrote for it (Settings → Inbox); never your balances or other transactions. Otherwise MoneX sends nothing to AI companies by itself.

If you turn on the notification parser (Settings → Inbox), the automation you set up on your phone sends MoneX the notifications of the apps you pick, and MoneX reads each one the same way as a forwarded email: the app's name, the title, and the text go to that AI service. Your phone sends only the apps you chose, and you can turn it off or make a new URL at any time. The MoneX shortcut, if you add it, comes from Apple's iCloud; your URL stays in the Shortcut on your phone.

If you turn on notifications on a device (Settings → Inbox), each one goes through that browser maker's push service (Apple, Google, Mozilla, or Microsoft), encrypted so that service can't read it. It says what was found in an email or a phone notification, such as an amount and where, which shows on your lock screen unless you hide amounts there. The operator may also send an announcement this way, such as a new feature. They stop when you turn them off or sign out on that device.

Cookies

Only what signing in needs: a session cookie and a security cookie. No ads, no tracking, no analytics.

Your choices

• Download everything stored about you: Settings → Download my data.
• See every change made to your data, and by what: Settings → Activity.
• Delete your account and all its data: Settings → Delete my account.
• Revoke tokens and disconnect apps: Settings → API tokens.
• Questions: ask the operator who invited you.