Privacy policy

Last updated 12 October 2026

The short version

Money Manager keeps your financial data on your phone. There is no Money Manager account and no Money Manager server. The developer collects nothing: no analytics, no crash reporting, no tracking, no advertising, and no copy of your records.

What stays on your phone

Accounts, records, categories, rules, recurring payments, debts, investments and settings are stored in a local database on the device. Passphrases, bank keys, broker sessions and keys, AI keys and the ChatGPT sign-in are kept in the phone's secure storage, or encrypted on the phone with a key kept there, and never go into a backup. Uninstalling the app deletes its database. On iPhone, items in secure storage can outlive an uninstall, so disconnect each service in the app first if you want its keys removed.

Optional features that talk to other services

These are off until you turn them on, and each one uses your own account with that service. Two need no account: backup to a folder, and investment prices, which are fetched as soon as a holding has a symbol. Data goes straight from your phone to the service, never through the developer.

Google Drive backup. Backups are encrypted on the phone with AES-256-GCM using your passphrase before they are uploaded, so Google cannot read them. See the Google section below.
Backup to a folder. Backups are encrypted on the phone with AES-256-GCM using your passphrase before they are written to a folder you pick. See the folder section below.
Bank sync. Uses Enable Banking with credentials you create. The app receives your bank accounts, balances and transactions from Enable Banking and stores them on the phone.
Broker connections. Trade Republic, Trading 212 and Robinhood connect directly from the phone. Your Trade Republic phone number and PIN, your Trading 212 API key, and your Robinhood email and password are sent only to that broker. The PIN and password are never saved. The Trading 212 key and the broker sessions stay on the phone, in secure storage or encrypted with a key kept there. The app receives your cash movements, trades and positions and stores them on the phone.
ChatGPT sign-in. You sign in on OpenAI's own page. The app keeps the sign-in and your account email in the phone's secure storage, and uses your ChatGPT plan for AI requests instead of an API key.
AI categorisation. Sends the merchant name, whether the money came in or went out, and your category names to the AI provider you choose: your ChatGPT plan, or Anthropic, OpenAI or Google with your own API key. Amounts, dates, accounts and notes are never sent.
Assistant. Runs on your ChatGPT plan. When you use it, your questions and what it needs from your records to answer, including merchants, amounts, dates, categories, accounts and notes, are sent to OpenAI. A notice says so before your first question. The app asks OpenAI not to store the chat, and the chat is not saved on the phone.
Investment prices. Sends the ticker symbols of your investments to Yahoo Finance to fetch prices, with the dates of the price history needed, which start at your first trade. Searching for a symbol or syncing a broker portfolio sends the text or ISIN being looked up. Nothing else is sent.
Payment capture. On Android, reads notifications from the payment app you pick. On iPhone, from iOS 27, a Shortcuts automation you set up passes your bank app's notification to the app. Both happen on the phone, to create records, and the notifications are not sent anywhere.
Your own service. If you run your own Money Manager service, the phone sends it a read-only copy of your data. You host it, so it is yours.

Google user data

Google Drive backup asks for one permission, drive.file. It lets the app see and change only the files it created itself, in a folder called "Money Manager backups". The app cannot see anything else in your Drive.

The app uses this access only to upload, list, download and remove its own encrypted backups. The data is not sent to the developer, not shared with anyone, not used for advertising and not used to train AI models.

Money Manager's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To stop it, disconnect Google Drive in the app, or remove Money Manager at myaccount.google.com/permissions. Backups already in your Drive stay there until you delete them.

Backup to a folder

You pick the folder in the phone's own folder picker, and the app gets access to that one folder only. On Android this is a folder grant the system keeps; on iPhone it is a bookmark to the folder. The app can read the folder's file list and write, read and delete its own backup files there. It never deletes files it did not write.

Whatever syncs that folder, such as iCloud Drive, Nextcloud, Syncthing or a cloud drive app, is your own service, under its own terms. Your data never goes through the developer.

The folder backup passphrase is kept in the phone's secure storage and never goes into a backup. Turning folder backup off forgets the passphrase and the folder. Backups already in the folder stay there until you delete them.

Children

Money Manager is not directed at children under 13.

Changes

If this policy changes, the new version is published on this page with a new date.

Contact

Pedro Seixas, pjfseixas.17@gmail.com