MonetaZen: Privacy Policy
Privacy policy
MonetaZen is an app for managing personal expenses. This policy explains what data is processed, where it stays, and which external services the app may use.
1.1 General principle
MonetaZen has no server of its own. It does not collect data, use analytics or advertising tools, and sends no usage data to Marco Improda. Your expenses, accounts and vouchers stay in the encrypted database on your device.
1.2 Data on the device
- Database: transactions, accounts, meal vouchers, categories and recurring plans are stored in an encrypted database (SQLCipher).
- Attachments: photos and documents you attach to an expense are stored in the encrypted database.
- Database key: kept in the iOS Keychain or Android Keystore.
- App lock: the PIN is never stored in plain text. It is stored as a PBKDF2-HMAC-SHA256 hash with 600,000 iterations and a random salt. If you use biometrics, verification happens in the operating system.
1.3 Backup and cloud sync (optional)
- A backup creates an encrypted file (vault) that you save to a location you choose: Google Drive, iCloud Drive, OneDrive, Dropbox or a local folder, depending on what is available on your device.
- The file is encrypted with AES-256-GCM. The key is derived from a passkey stored in the Keychain or Keystore. If you lose the passkey, the backup cannot be opened.
- The provider of the chosen service (for example Google or Apple) stores the file under its own terms.
- WebDAV server (expert mode, optional): you can send the encrypted backup file to a WebDAV server you choose, for example Nextcloud, ownCloud or a NAS. The connection uses HTTPS only. The app password is stored in the Keychain or Keystore. The server is run by you or your provider, not by Marco Improda.
1.4 Export
- You can export the monthly or annual report as XLSX or PDF. The file is shared through the system share sheet and is not encrypted. Once exported, protecting it is your responsibility.
1.5 External services
MonetaZen contacts these services only when you enable them or use the related feature.
| Feature | Service | When | Data sent |
|---|---|---|---|
| Currency conversion | open.er-api.com and api.frankfurter.app | When a conversion needs a rate | Currency codes only (e.g. EUR, USD). No amounts, no personal data |
| Place search | Nominatim (OpenStreetMap) and Photon (Komoot) | When you search for a place for an expense | The text you type in the search |
| Location | System geocoding services | When you attach a location to an expense | Coordinates, to derive an address |
| Voice dictation | System speech recognition (Apple or Google) | When you use the microphone to dictate an expense | The audio, according to your device's speech recognition settings |
| MonetaZen Advisor | The AI provider you choose (OpenAI, Anthropic, Google Gemini, DeepSeek, Groq; Ollama runs on your own device or network) | Only if you enable the assistant and enter your own API key | A financial summary built from your data, included in the prompt |
| MonetaZen Advisor, without API key | External app you choose (ChatGPT, Claude, Gemini and similar) | When you choose to open the external app | The prompt is copied to the clipboard and opened in the app you choose. From then on, that app's policy applies |
| WebDAV server backup (expert mode) | The WebDAV server you configure (for example Nextcloud, ownCloud or a NAS) | Only if you enable expert mode and configure a server | The encrypted backup file, over HTTPS |
The AI assistant is off by default. The API key is stored in the Keychain or Keystore.
1.6 Device permissions
- Notifications: for reminders about future expenses and recurring plans. They stay on the device.
- Location: only when you attach it to an expense.
- Camera and photos: to attach receipts and documents.
- Microphone: only for voice dictation.
- Biometrics: to unlock the app. Biometric data stays in the operating system.
- Notification access (Android only, optional): if you enable payment automation, MonetaZen reads notifications from the payment apps you choose, to recognise amounts and create expenses. The text is processed on the device and not sent anywhere. The feature is off by default and you can turn it off at any time in the settings or in Android's settings.
1.7 Retention and deletion
- Data stays on the device until you delete it.
- Uninstalling the app deletes the database and attachments. Export a backup before uninstalling.
1.8 Changes
If this policy changes, the new version is published in the app and in the stores with its update date.
1.9 Contact
Questions or requests: info@monetazen.app.