Last update 1 October 2026

Privacy Policy — Moneys

Moneys is a personal finance app with no account and no server of ours: your accounts, transactions, budgets and goals stay on your device and in your own iCloud account. This policy describes what stays on your device, what passes through your own iCloud, and which network connections the app actually opens.

Moneys

1. Data Controller

  • Aumatex srls — Via Umberto Biancamano 25, 00185 Rome (RM), Italy. VAT IT15617831001.
  • Requests about personal data: privacy@aumatex.it.

2. Data Collected

  • Moneys collects no personal data: there is no sign-up, no login, no Aumatex account and no server of ours to send it to.
  • We do not collect your name, email, phone number, location, device identifiers, usage data, diagnostic data or financial data.
  • What you enter in the app never reaches us in any form.

3. Data Processed Locally on Device

  • Accounts, transactions, splits, transfers, scheduled transactions, categories, tags, budgets, goals, investments and downloaded exchange rates are stored in the app’s database, on your device.
  • For transaction attachments, Moneys records only the name and type of the file you pick, not its contents.
  • Preferences such as your base and preferred currency live in the same database; App Lock and automatic backup are per-device settings and are not synced.
  • Widgets read a summary that the app writes to a shared area on the device (App Group): the widget extension never opens the database and makes no network connections. Amounts in widgets are marked as sensitive, so iOS can hide them while the device is locked.

4. iCloud Sync

  • When an iCloud account is active on the device, the Moneys database syncs across your devices through the private database of your own iCloud account (CloudKit).
  • Sync is turned off from the device’s iCloud settings; without iCloud the app works locally only.
  • That data sits in your iCloud account and is processed by Apple under its own policies. Aumatex has no access to it.

5. Backup, Export and Import

  • You can save a full backup to iCloud Drive, in the app’s folder, by hand or with the automatic backup, which stays off until you turn it on.
  • The backup is a JSON file that the app does not encrypt separately: it is protected by the security of your iCloud account.
  • The app never deletes backups on its own: only you delete them, explicitly, from Settings.
  • JSON and CSV exports are created only when you ask for them and saved where you choose; they contain your data in plain text, so keep them safe. Import reads only the files you pick.

6. Network Connections

  • The app makes no requests to Aumatex srls servers: none exist.
  • Sync and backup talk to iCloud (Apple) using your account.
  • For exchange rates the app downloads the public currency-api dataset from the jsDelivr network: at launch and when it returns to the foreground if the stored rates are not recent, when you refresh them from Settings, and when you change your base currency. There is no background polling.
  • That request carries only the code of your base currency (for example EUR): no amounts, accounts, transactions or identifiers. As with any HTTPS request, jsDelivr receives your IP address, with no idea who you are.
  • Purchases go through StoreKit (Apple): payment details never reach us.

7. App Lock and Device Permissions

  • Face ID / Touch ID: only for App Lock, which is off until you turn it on, with your device passcode as a fallback. The biometric data stays in the Secure Enclave and is not accessible to the app.
  • With the lock on you can also require authentication for exports, backups and restores, and a veil covers your data in the app switcher.
  • Moneys does not ask for access to the camera, photos, location, contacts or notifications. Background refresh is used only to receive iCloud’s silent sync notifications.
  • Every permission can be revoked at any time from system settings.

8. No Tracking, Analytics or Advertising

  • No telemetry, no analytics tooling, no third-party crash reporting.
  • No advertising SDKs, no profiling, no advertising identifier (IDFA).
  • The app ships no third-party dependencies: only our own code and Apple frameworks.

9. Legal Basis and Retention

  • Aumatex srls processes no personal data through Moneys: it does not receive it, store it, or have access to it.
  • If you write to us for support, we use the contents of your message only to reply (art. 6(1)(b) GDPR).
  • Your data stays on your device and, if you use iCloud, in your own iCloud account, for as long as you decide. From the app you can erase your data or reset the app completely: with sync on, the deletion also applies to iCloud and your other devices.
  • Uninstalling the app removes the local data; what is in iCloud is deleted from the app or from your iCloud settings.

10. Recipients and Transfers Outside the EU

  • We disclose no personal data to third parties, because we receive none.
  • Apple processes iCloud and purchase data under its own policies, within your relationship with Apple.
  • jsDelivr receives the exchange-rate requests and may serve them from servers outside the EU: it receives your IP address and a currency code, nothing else.

11. Your Rights

  • You can exercise access, rectification, erasure, restriction, objection and portability by writing to privacy@aumatex.it.
  • For the data that stays on your device you exercise those rights directly: you can read, edit, export and delete it in the app, without going through us.
  • You have the right to lodge a complaint with your data protection authority.

12. Minors

  • Moneys collects no personal data from anyone, whatever their age, and therefore none from minors.

13. Changes to this Privacy Policy

  • Aumatex srls may update this policy: the date at the top of the page marks the latest revision.

14. Contacts

  • Privacy: privacy@aumatex.it.
  • Support: supporto@aumatex.it.
  • Aumatex srls — Via Umberto Biancamano 25, 00185 Rome (RM), Italy. VAT IT15617831001.