Privacy policy
The short version
- Your financial records are stored on your phone. Used as a guest, the app never sends them anywhere.
- If you sign in with Google or Apple, we keep your name and email address, and, unless you turn it off, one backup copy of your data per day for the last seven days, stored in Europe.
- Guests and free accounts see ads from Google AdMob. Your financial data is never shared with advertisers. On iPhone, ads are never personalised; in Europe, only with your consent.
- Once a day the app reports anonymously that a phone used it. You can turn this off.
- You can export your data at any time, and delete your account and every cloud copy from inside the app.
Contents
- Who is responsible
- Data on your phone
- Signing in
- Cloud backups
- Exchange rates
- Anonymous usage statistics
- Ads
- Notifications and app lock
- Contacting support
- This website
- Service providers and transfers
- Legal bases
- How long data is kept
- Your rights
- Children
- Changes to this policy
1. Who is responsible
Simple Money is developed and operated by Marin Kruzic, Kumičićeva 77, 51000 Rijeka, Croatia ("we", "us"), who is the controller of the personal data described here. Contact: support@simplemoney.app.
2. Data on your phone
Everything you enter (accounts, transactions, categories, tags, notes, recurring entries and settings) is stored in the app's own database on your phone. The database is in the app's private storage, protected by your phone's encryption and lock screen; the app does not add a separate layer of encryption.
As a guest, without signing in, this data never leaves your phone unless you export it yourself. Uninstalling the app deletes it, so export a backup file regularly (Profile > Export Local Backup). Exported files go wherever you choose to save or share them.
3. Signing in
Signing in is optional. You can sign in with Google or with Apple. We receive, and store on our server:
- your name, email address and, from Google, the link to your profile picture;
- the identifier Google or Apple assigns to you for our app, so you get the same account each time;
- your plan (free or Pro), whether cloud backups are on, and when you created the account, last signed in and were last active.
Each phone you sign in on gets a session. For each session we store a cryptographic hash of its sign-in token (never the token itself), the platform (Android or iOS), the app version and when it was created and last renewed. A session ends when you sign out, when you choose Sign out everywhere, or after 60 days without use.
If you use Apple's "Hide My Email", we only see the relay address Apple gives us.
4. Cloud backups
When you are signed in, the app uploads a complete copy of its database to our storage at most once a day while you use it. It does not upload until the app holds something you entered. The copy includes your transactions, amounts, notes, accounts, categories, tags and settings.
- We keep the newest copy of each of the last seven days and delete older ones automatically.
- When an app update changes how data is stored, we also keep the last copy from before the update, so a faulty update can be undone. It is replaced at the next such update.
- Copies are stored with Cloudflare R2 in Western Europe and are encrypted in transit. They are not encrypted with a key only you hold, so we could technically read them. Only the developer has access, and we do not open your backups unless you ask us for help with one.
- You can turn cloud backups off in Profile > Cloud Backup. This deletes every copy from our storage at once and stops new uploads. Your data stays on your phone.
5. Exchange rates
To convert currencies, the app downloads daily exchange rates from our server, for guests too. The request names the currencies and dates needed and contains no account information. Our server gets the rates from the European Central Bank (via Frankfurter) and Coinbase; your phone does not contact them.
6. Anonymous usage statistics
Once a day, when you open the app, it tells our server that one phone used it, with the app version, the platform (Android or iOS) and whether you use it as a guest, a free or a Pro account. To count each phone once per day, it also sends the date of its previous report and a random one-time code that is used only to avoid counting a retried report twice and is deleted after seven days. The report contains no device or advertising identifier, no account and no financial data, and we do not keep your IP address with it, so the counts cannot be tied to you or your phone. The server keeps only daily totals.
When you are signed in, the server also records the date of your account's last request and adds it to a daily count of active accounts.
You can turn the anonymous statistics off in Settings > Security & Privacy > Anonymous usage statistics.
7. Ads
Guests and free accounts see banner ads served by Google AdMob. Pro subscribers see none, and the ad software is not started for them at all.
- What Google receives. To show and measure ads and to prevent fraud, Google's software in the app collects your IP address, a device identifier (on Android, the advertising ID), information about ads shown and tapped, and diagnostics. It never receives your amounts, notes, account names or any other financial data.
- In the EEA, the UK and Switzerland, Google's consent form asks before any ad is requested. You can agree, refuse, or choose per purpose; refusing never limits the app. You can change your answer at any time in Settings > Security & Privacy > Ad privacy choices.
- On iPhone, the app never asks for permission to track you, so ads are not personalised.
- On Android outside Europe, ads may be personalised using your advertising ID. You can reset or delete it in your phone's settings (Google > Ads, or Privacy > Ads).
- We block ads for gambling, loans, forex trading and get-rich-quick schemes.
Google processes this data under its own responsibility; see how Google uses information from apps that use its services.
8. Notifications and app lock
Reminders (daily entry, upcoming bills, export reminders) are scheduled on your phone; no notification server is involved. App lock uses your phone's own fingerprint, face or PIN check, and the app never sees your biometric data.
9. Contacting support
Report a problem in the app opens your own email app with a draft to support@simplemoney.app. The draft includes a diagnostics section: app version, device model and system version, language and time zone, whether you are signed in and your plan, how many records of each kind you have, your currencies, a few settings and the app's last few screens and warnings. It never includes amounts, notes or the names of your accounts, categories or tags. You can read, edit or delete all of it before sending, and nothing is sent unless you send the email.
Emails to support are forwarded by Cloudflare to the developer's mailbox, hosted by Google, and kept as long as needed to answer you and follow up.
10. This website
This website uses no cookies, no analytics and no third-party content. It is served by Cloudflare, which processes your IP address to deliver the pages and protect them from abuse.
11. Service providers and transfers
We do not sell your data or share it with anyone for their own purposes, except Google for ads as described above. These providers process data for us:
| Provider | What for | Data |
|---|---|---|
| Cloudflare | Our server, database (Europe), backup storage (Western Europe), email forwarding, this website | Account and session data, backups, usage counts, IP addresses in transit, support emails in transit |
| Sign-in with Google, the developer's mailbox, ads (AdMob) | Sign-in data, support emails, ad data as in section 7 | |
| Apple | Sign in with Apple | Sign-in data |
Cloudflare and Google are based in the United States and may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework and on the European Commission's standard contractual clauses.
12. Legal bases
For users in the EEA, the UK and Switzerland, we rely on:
- Contract: your account, sessions and cloud backups, which are the service you sign up for;
- Legitimate interests: keeping the service secure and working, limiting abuse, answering support requests, and the anonymous usage statistics, which cannot identify you;
- Consent: ads, including the storing of information on your device for them, through Google's consent form. You can withdraw consent at any time without affecting what happened before.
13. How long data is kept
| Data | Kept |
|---|---|
| Data on your phone | Until you delete it or uninstall the app |
| Account | Until you delete the account |
| Sessions | Until you sign out, or 60 days without use |
| Daily cloud backups | Seven days, rolling; all deleted at once when you turn backups off or delete the account |
| Copy from before an app update | Until the next such update, or until you turn backups off or delete the account |
| Anonymous daily totals | 25 months; the one-time retry codes, seven days |
| Support emails | As long as needed to answer and follow up |
14. Your rights
You can ask us for access to your personal data, and for its correction, deletion or restriction, and you can object to processing based on legitimate interests and take your data with you (portability). Much of this you can do yourself in the app:
- Export all your data as a backup file, or your transactions as CSV, from Profile > Export Local Backup.
- Delete your account and every cloud copy from Profile > Account > Delete account, or without the app.
- Turn off cloud backups, the anonymous statistics, or personalised ads.
For anything else, write to support@simplemoney.app; we answer within one month. You also have the right to complain to the data protection authority where you live or work, or to ours, the Croatian Personal Data Protection Agency (AZOP).
15. Children
Simple Money is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect data from children.
16. Changes to this policy
When the app starts handling data differently, we update this page and the date at the top before the change reaches you. For significant changes, we also tell you in the app.