1. Data controller
The controller of your personal data is Piotr Czarnynoga, the creator of the Monelo app (the "Controller", "we", "us").
For anything related to personal data, email support@monelo.app. No data protection officer has been appointed.
2. Scope
This policy covers the Monelo mobile app for iOS and Android (the "App") and the monelo.app website (the "Website"). We process data in accordance with Regulation (EU) 2016/679 (the "GDPR") and Polish data protection law.
3. Data we process
- Account data: email address, the name you provide, account ID, a hashed password, and a profile picture if you add one. If you sign in with Google or Apple, those providers give us your ID, email address (Apple may provide a relay address) and name, if you share it.
- Financial data you enter: transactions, amounts, wallets, currencies, budgets, savings goals, recurring transactions, categories and notes. It is stored on your device and synced to our server so that backup and multi-device access work.
- Receipt photos and the data read from them, if you use the scanner (see section 5).
- Subscription data: plan, status and purchase dates, and your customer ID in the subscription system. We never see your card or other payment details; Apple and Google handle them.
- Analytics and technical data: in-app events, screens viewed, app and OS version, device model, language, currency, approximate location derived from your IP address (country, city), and answers to the welcome questionnaire (see section 6).
- Correspondence: the content of your messages and your email address when you contact us.
What never leaves your device: your PIN (kept only in the system's secure storage), biometric data (Face ID and fingerprint are handled by the operating system, we receive nothing), and your photo library, except for the photo you choose to scan.
The App does not connect to your bank and has no access to your accounts. All financial data comes from you.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, sign-in, storing and syncing your data, providing App features | Art. 6(1)(b), performance of a contract |
| Reading a receipt you send to the scanner and suggesting items and categories | Art. 6(1)(b), performance of a contract |
| Handling subscriptions and restoring purchases | Art. 6(1)(b), performance of a contract |
| Improving receipt recognition, including manual review of photos and extracted items | Art. 6(1)(f), legitimate interest (service quality and development) |
| Product analytics | Art. 6(1)(f), legitimate interest (improving the App); you can turn it off at any time |
| Security, scan limits, abuse prevention | Art. 6(1)(f), legitimate interest |
| Answering messages and requests | Art. 6(1)(f), legitimate interest |
| Establishing, exercising or defending legal claims | Art. 6(1)(f), legitimate interest |
Providing data is voluntary, but without an email address (or Google or Apple sign-in) you cannot create an account, and without a receipt photo the scanner cannot work.
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Scanner results are only a suggestion that you review and confirm.
5. Receipt scanner
The scanner only runs when you take or pick a receipt photo yourself. Step by step:
- On your device: the App checks locally whether the photo shows a receipt and crops it to its edges (Apple Vision on iOS, Google ML Kit on Android). This happens on the phone, without uploading the photo.
- Upload: the photo is stored in our Supabase file storage (servers in Frankfurt, EU) and linked to your account.
- AI reading: our server sends the photo to a Google Gemini model (Google Gemini API) and, if the result does not add up, also to Anthropic's Claude model. The models read the store name, date, total and line items. Names of items we don't recognise, and the names of your categories (when categories are first matched), may be sent to Claude to assign categories.
- Result: the extracted data is saved to your account and shown to you for review. A transaction is created only after you confirm.
We use the paid APIs of Google and Anthropic. Under their terms, these providers do not use submitted content to train their models. They may retain it for a limited time for security and abuse detection.
What a photo may contain. A receipt may show the store's address, the time of purchase, the last digits of your payment card, a loyalty card number or a tax ID. Do not photograph documents other than receipts, or receipts with information you don't want to share with us. You can cover such parts before taking the photo.
Quality improvement. Receipt photos and extracted items may be manually reviewed by the Controller to check and improve recognition quality. We also store technical scan data (e.g. image dimensions, validation score, processing time and cost, and corrections you make on the items screen). Product and store names go into a shared category dictionary that helps recognise future receipts. The dictionary does not record who scanned a product.
Limits. The number of scans is limited per day and per month. To enforce limits, we count the scans linked to your account.
6. Analytics
We use PostHog (servers in the European Union) to understand how the App is used, which features work and which cause trouble.
What we collect
- events such as opening the App, adding a transaction, using the scanner, opening the Premium screen, a purchase or a failed purchase,
- names of screens viewed,
- device and App information: OS, version, device model, language, currency, plan (free or Premium),
- counters such as the number of wallets, budgets, categories and transactions, and the dates of your first transaction and of starting Premium,
- answers to the welcome questionnaire (e.g. your financial goal),
- approximate location derived from your IP address.
We don't send transaction amounts as such. Some events only include an amount range (e.g. "up to 50"). Once you're signed in, analytics data is linked to your account ID and email address so we can answer support requests and handle your rights.
We don't record your screen or sessions, and we don't collect network content.
Feature flags
We also use PostHog to roll out new features gradually (feature flags), so you may see a feature earlier or later than other users.
How to turn it off
Analytics is on by default. You can turn it off at any time in the App's Settings with the Analytics toggle. Once off, we stop sending events and reset the analytics identifier, so new data is not linked to your existing profile. You can also object or ask us to delete your analytics data by emailing support@monelo.app.
Analytics data is never sold or used for advertising.
7. Recipients
We don't sell your data. We share it only with providers that help us run the service and process it on our behalf, or with companies whose services you use yourself:
| Recipient | Purpose | Location |
|---|---|---|
| Supabase | database, authentication, photo storage, server functions | EU (Frankfurt) |
| PostHog | analytics, feature flags | EU |
| Google (Gemini API) | reading receipt photos | USA and other |
| Anthropic (Claude API) | reading receipt photos, assigning categories | USA |
| RevenueCat | subscription management and validation | USA |
| Apple, Google | store payments, Sign in with Apple and Google (as separate controllers) | USA and other |
| Cloudflare | Website hosting | global |
We may also disclose data to public authorities where the law requires it.
8. Transfers outside the EEA
Some providers are based or have servers outside the European Economic Area, mainly in the USA. In those cases data is transferred on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses. On request, we will tell you which safeguards apply.
9. Retention
- Account and financial data: until you delete your account. Database backups are overwritten within a few days.
- Receipt photos and extracted items: until you delete your account. On request, we will delete photos earlier.
- Shared product dictionary: without a time limit, as it contains no data that identifies you.
- Analytics data: for as long as needed for analysis, in line with PostHog retention settings.
- Subscription data: for the duration of the subscription and afterwards for as long as the law requires or as needed to defend claims.
- Correspondence: while your request is handled, then until any related claims become time-barred.
10. Your rights
You have the right to:
- access your data and get a copy of it,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability for data you provided to us,
- object to processing based on legitimate interest, including analytics and the review of receipt photos for quality,
- lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the authority in your country of residence.
To exercise your rights, email support@monelo.app from the address linked to your account. We will reply without undue delay and within one month at the latest. We may ask you to confirm your identity.
11. Deleting your account
You can delete your account in the App under Settings → Profile → Delete account, or by emailing us. Deleting your account permanently erases your account data, the financial data stored on our server, receipt photos and your profile picture. Analytics data linked to the account is deleted on request.
Deleting your account does not cancel your subscription. Cancel it in the App Store or Google Play settings, otherwise the store may keep charging you.
12. Security
We apply technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), database access rules that limit each user to their own data, private photo storage, and App lock with a PIN or biometrics. No system is fully immune to attacks, though. If a breach is likely to result in a high risk to you, we will let you know.
13. The monelo.app website
The Website uses no cookies and no analytics tools. It only stores your chosen language in your browser's local storage. Our hosting provider (Cloudflare) may process your IP address and basic request data to deliver the site and protect it against attacks.
14. Minimum age
The App is intended for people aged 16 and over. We don't knowingly process data of younger people. If you believe a child has created an account, contact us and we will delete their data.
15. Changes
We update this policy when the App or the law changes. The current version, with its last updated date, is always available on this page. We will notify you of material changes in the App or by email.
16. Contact
For anything related to personal data: support@monelo.app.
This document is also available in Polish. If the two versions differ, the Polish version prevails.