Privacy Policy

Last updated: 5 August 2026

This policy explains what MoneyPlant (“MoneyPlant”, “we”, “us”) collects, why, how we protect it, and the choices and rights you have. It applies to our website and app.

1. Information we collect

Account information. Your email address and a securely hashed password (or an OAuth identifier if you sign in with a provider), managed by our authentication provider.

Profile information. Your name and, optionally, a phone number you add in settings.

Financial information you enter. The assets, liabilities, accounts, contributions, goals, allocations and net-worth snapshots you create. This is entered manually by you — we do not import it from any bank, broker, depository or aggregator.

Usage & device data. Basic analytics and diagnostic data (pages viewed, actions taken, device/browser type, and error reports) to keep the product working and improve it.

Communications. Messages you send us for support, feedback, or data requests.

2. What we never do

We never link to, log into, or read from your bank, broker or any external financial account. We never sell your personal or financial data, and we don't use it to serve third-party advertising.

3. How we use your information

To provide the service (store and display your net worth, goals and analysis), to authenticate you, to keep the app secure and reliable, to respond to your requests, to understand and improve how the product is used, and to comply with legal obligations.

4. Service providers

We rely on a small set of trusted processors that handle data on our behalf under their own security and privacy commitments:

• Supabase — authentication, database and hosting for your account and data.
• PostHog — privacy-friendly product analytics.
• Sentry — error and performance monitoring.
• OneSignal — optional push/email notifications you opt into.
• Userback — in-app feedback you choose to send.

We share only what each provider needs to perform its function, and never for their own marketing.

5. Security

Data is encrypted in transit (HTTPS). Your records are isolated per account with row-level access controls so one user can never read another's data. Access to production systems is limited to authorised team members. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.

6. Data retention

We keep your data for as long as your account is active. If you delete specific records they are removed from active systems promptly; deleting your account removes your personal and financial data (subject to short technical backup windows and any legal retention we're required to observe).

7. Your rights & choices

You can access and correct your data any time in the app. You can also export your data and request deletion of specific records or your whole account. Depending on where you live (including under India's DPDP Act and the GDPR), you may have additional rights to access, correct, port, or erase your data and to withdraw consent.

To exercise these, use the in-app tools or email privacy@moneyplant.app from your account email. We aim to respond within 30 days. We recommend exporting your data before requesting deletion, as deletion is permanent.

8. Cookies

We use essential cookies to keep you signed in and to remember preferences such as light/dark theme. We use limited analytics cookies to understand product usage. We don't use advertising cookies.

9. Children

MoneyPlant is not intended for anyone under 18, and we don't knowingly collect data from children.

10. Changes to this policy

We may update this policy as the product evolves. We'll change the “last updated” date above and, for material changes, notify you in the app or by email.

11. Contact

Questions or requests? Email privacy@moneyplant.app or see our contact page.