Privacy policy
Last updated 22 October 2026
MoneyMittar is a personal budget tracker. This policy explains what information it keeps, why, and the choices you have. Questions: sagarmishr7@gmail.com.
What we collect
- Account details: your name and email address. Your password is never stored; only a one-way Argon2id hash of it is kept.
- Information you enter: transactions, amounts, notes, tags, categories, budgets, goals, recurring items, accounts and settings such as your currency.
- Usage information: which days you used the app, how often features were used (for example "used search 3 times"), and milestones such as signing up or logging in. This never includes what you typed, amounts or notes.
- Security and technical information: your IP address and browser type, kept with your sign-in sessions and used to stop password-guessing; and request records (which page or feature was requested, whether it succeeded and how long it took), without the contents of the request.
How it's used
- To provide the service: show your data on every device you sign in to.
- To keep it secure: sign-in sessions, rate limits against password guessing, and error monitoring.
- To improve it: counts of how features are used and aggregate statistics.
There are no ads, your information is never sold, and it is not used to build advertising profiles.
Who can see it
- You. Other users can never see your data.
- The app's administrators can see your name, email, sign-up date, account status and how much you use the app (for example how many transactions you have), to run and support the service. The admin console does not show your individual transactions, amounts or notes. Financial statistics are only shown as totals across at least five users. Every time an administrator views an account, it is recorded in an audit log.
- Service providers that host the app on our behalf: Render (application hosting) and Neon (database), both in Singapore. They process data only to run the service.
- Legal requirements: if required by law, for example a valid court order.
Cookies and storage
One essential cookie keeps you signed in. It can't be read by scripts on the page and isn't used for tracking. Your browser also stores a few display preferences (such as month or year view) on your device. There are no advertising or third-party tracking cookies.
How long it's kept
- Your account and the information you enter: until you delete them.
- Usage information: up to 13 months. Request records: 30 days. Password-guessing counters: about a day.
- Deleted data may remain in our database provider's short-term backups for a limited time before it is overwritten.
Your choices
- Export everything at any time: Settings → Download backup or Export CSV.
- Delete your account and all its data: Settings → Delete account, or see how to delete your account. Deletion is immediate and permanent.
- Correct your information by editing it in the app.
Security
All traffic is encrypted with HTTPS. Passwords are hashed with Argon2id, sessions use secure HttpOnly cookies, and administrator access requires two-step verification. No system is perfectly secure, so please use a password you don't use anywhere else.
Children
MoneyMittar is not intended for children under 13, and we don't knowingly collect their information.
Changes
If this policy changes in a meaningful way, the date above will change and the app will show a notice.