Privacy Policy

Last updated: October 25, 2026

This policy explains what personal data MoneyRemind processes, why, who helps us process it, how long we keep it and what rights you have. It covers the MoneyRemind app for iPhone, iPad and Android and this website (moneyremind.com).

In this policy “we” and “us” mean the MoneyRemind team. For users in Türkiye, the separate KVKK information notice is the information notice (aydınlatma metni) under the Personal Data Protection Law No. 6698 (KVKK).

On this page

1. The short version

No ads, no advertising identifiers and no tracking. Your data is never sold.
MoneyRemind doesn't connect to your bank and never asks for card or account numbers.
Only you, and the people you choose to share a group with, can see your payments.
AI features are optional. The app asks first, and we ask OpenRouter, our AI gateway, to route requests only to providers that don't collect them or use them for training.
You can delete your account in the app at any time. Deletion happens right away.

2. Who is responsible for your data

MoneyRemind is operated by Metin Yılmaz (Türkiye), the data controller under KVKK (veri sorumlusu) and GDPR.

Contact: [email protected], or Menu › Help & support in the app.

3. What we collect and why

Your account

Name, email address, password and app language, to create and protect your account. Sign-up is confirmed with a 6-digit code sent to your email. Your password is stored only as a one-way hash, so nobody can read it. Accounts that are never confirmed are removed after 7 days.
A profile photo, if you add one.
If you sign in with Google or Apple: your name, email address, the provider's user id for your account and whether the provider has verified the email. No password is created and we don't get your Google or Apple password, contacts or other data. With Apple's Hide My Email you get a private relay address that forwards to you; it counts as its own account. For Apple we also keep a token, encrypted, only to revoke MoneyRemind's access when you delete your account.

What you enter

Transactions, payments, repeating payments and installments, with their amounts, currencies, titles, notes, categories, due dates and paid status.
Groups, people labels (names you type, such as “Mom”, not your phone's contacts), budgets and savings goals.
Photos you attach to a payment (up to 5, such as receipts), a profile photo and files attached to support messages. Files are only reachable through private links that expire after a few minutes.
Shared groups: the email address of each person you invite, their role and who added which entry.
Lent and borrowed money: the name you type for the person, amounts, dates, a pay-back date, a note and repayments.
Expense splitting in a shared group: who paid whom and how much (settlements), visible to the group's members.

Support messages

When you write to us from Menu › Help & support: the topic, your messages and our replies in the conversation, any screenshots or videos, your name and email, your device, app version and language, and your IP address, so we can reply and fix problems.
To answer a request, our support staff can also see your account details: name, email, plan, sign-up date, last activity and language.

Voice input

Your phone's speech service (Apple or Google) turns speech into text. It may process the audio on Apple's or Google's servers unless your device does it on-device. MoneyRemind only receives text, never audio.
The built-in parser reads the text on your phone. With Premium AI voice add, the text is sent to our server and our AI provider together with your category, people and group labels, so it can be turned into payments. We don't store the text.
Free voice adds: to count the 2 free voice adds a month, we store your user id, a random id for each voice add and the month. Nothing you said is in it, and it is deleted with your account.
Receipt scan (Premium): only when you tap Scan receipt, that photo is sent to our server and, through OpenRouter, to our AI provider, together with the app language and your category list, to read the amount, date, shop and category. This happens only after you allow AI features. The photo stays in our storage as the payment's receipt.

AI Assistant

Findings, Ways to save and “Can I afford it?” are calculated on your phone.
For AI answers and the weekly brief, we send your question and a summary built from your data: this month and last month, totals for the last 6 months, categories, upcoming bills and repeating payments. Notes, people, photos and account details are never sent. Short payment titles may be included, and anything that looks like an instruction or a long number is removed first.
Your question is not stored. The weekly brief is kept so you can read it again and deleted two weeks after its week starts. If you rate an answer, we keep only the rating and the reasons you tick, never the question or the answer. Things you ask the Assistant to remember (such as “keep this expense”) are kept until you remove them in Assistant settings.

Purchases and trials

Premium is bought through the App Store or Google Play. Apple or Google handles the payment, and we never see your card details. RevenueCat receives your MoneyRemind user id and the store's purchase data, and we keep your plan, its status and when it ends. When you delete your account, your customer record at RevenueCat is deleted too. Your purchase receipts stay with Apple or Google under their own policies.
Free Premium trial: the 7-day trial is given once per person: once per email address and once per device. It starts automatically for accounts created in the iPhone or iPad app, because the app can prove the device. Accounts created any other way (for example on Android or the web, where the app isn't available yet) start on the free plan. For the email check we keep a keyed hash (HMAC) of your normalized email address (capital letters, +tags and dots in Gmail addresses are ignored), also after you delete your account. It holds no address, name or user id, can't be turned back into your address, and is used only to prevent repeat trials. For the device check, the app keeps a random key in your phone's keychain (not a hardware identifier) and sends it when you sign up; we keep only a keyed hash of it. The app also uses Apple's DeviceCheck: Apple keeps one “trial used” mark for the device and gives us no device identifier. Signing up is never blocked: a new account on the same device simply starts on the free plan.
Gifted Premium: if you redeem a gift code, we record the code and the gift's duration.

Notifications

A push token for your device, so we can deliver reminders and tell you when we answer your Help & support request (the notification shows the start of our reply). Most reminders are scheduled on your phone. Reminders sent from our server on the due day may include the payment's title. When you write to support, the start of your message is sent as a notification to our support staff's phones.

Security and diagnostics

Sessions: a session token, IP address, user agent and device model and system, so you can see your signed-in devices and we can stop abuse. Important account actions are written to a security log.
App errors and crashes we catch in the app (error message, code, app and system version), kept for up to 30 days after they were last seen. We don't use a third-party crash or analytics SDK.
Purchase and app-safety steps (such as “paywall shown” or “purchase failed” with the store's error code, platform, app version and a random id per installation, or a count of Assistant questions the app turned down), kept for 180 days to make sure buying and the app work.
How you add things: whether a transaction or series was typed, spoken or written on “Type it” (and whether AI or your phone read it), whether you changed what voice understood before saving, which screen you started from, and whether a payment was recorded from the reminder notification. Stored with that transaction or payment and deleted with it; used only as totals to improve these features.

What we don't collect

Location, contacts, health data, browsing history or advertising identifiers. The app contains no advertising, analytics or attribution SDKs.

4. Legal bases

Contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): your account (including sign-in with Google or Apple), the data you enter, reminders, notifications, sharing, sync, subscriptions, trials, support and the AI features you turn on.
Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): keeping the service secure, preventing abuse and trial misuse, fixing errors, checking that purchases work and delivering group invitations. Totals of how features are used (for example, how often a voice entry needs correcting) to improve them.
Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)): for example, answering data requests and lawful requests from authorities, or keeping records the law requires.
No processing relies on consent (GDPR Art. 6(1)(a); KVKK explicit consent, açık rıza) today. AI features and notifications are choices you turn on and can turn off at any time; they don't depend on consent as a legal basis. If we ever need consent for something, we'll ask for it separately and you can withdraw it at any time.

5. Service providers

We use these providers to run MoneyRemind. They process data on our behalf, only for the purpose listed, and not for their own purposes.

RevenueCat (United States): manages subscriptions. Receives your user id and purchase data from the store.
OpenRouter (United States) and the AI model provider it routes to, which may be in the United States or another country: AI voice add, receipt scan and the AI Assistant, only after you allow AI features. We ask OpenRouter to route every request only to providers that don't collect requests or use them for training.
Resend (United States): sends account emails. Receives your email address and the email's content.
Expo (United States), with Apple Push Notification service and Firebase Cloud Messaging: delivers push notifications. Receives your push token and the notification text (which can include a payment's title or the start of a support message).
Better Stack (Czech Republic, EU): server logs and uptime monitoring. Logs contain your IP address, the request path, a request id, ids and counts, never request contents, emails, passwords, tokens, voice text or questions.
Apple and Google: app distribution, payments and speech-to-text on your device, under their own privacy policies.
Google (United States) and Apple (United States), if you choose sign-in with Google or Sign in with Apple: they confirm who you are and send us the sign-in data listed above. For their own sign-in service they act as independent controllers under their own privacy policies.
Cloudflare, Inc. (United States): DNS, CDN and security proxy and tunnel to our server, plus cookieless website analytics. Processes technical request data; the statistics are anonymous and aggregated.
Servers, database, backups and uploaded files: OVH SAS (France), in its data centres in the EU.

Sign-in runs on our own servers with the open-source Better Auth library. No third party handles your password.

You can also sign in with Google or with Apple. Google or Apple checks who you are and sends us a signed token with your name, email address and their user id for you; we verify it on our servers. If an account with the same verified email already exists, the sign-in is added to it instead of creating a second account. Creating an account this way still means accepting the Terms of Use. You can remove MoneyRemind from your Google or Apple account settings at any time; deleting your MoneyRemind account also revokes Sign in with Apple.

7. International transfers

Some providers above are outside Türkiye and the European Economic Area, mainly in the United States, so your data may be transferred there. OpenRouter is in the United States, and the AI model provider it routes a request to may be in the United States or another country. We send each one only what it needs. Sign-in with Google or Apple also involves those companies in the United States.

For Türkiye (KVKK Article 9): there is no adequacy decision for these countries, so we rely on the standard contracts announced by the Personal Data Protection Board, signed with each provider and notified to the Authority within five business days. For the EU (GDPR Chapter V): the providers' standard contractual clauses, or the EU-U.S. Data Privacy Framework where a provider is certified. We don't rely on consent for transfers. Contact us for details of the safeguards.

9. How long we keep data

Your account and what you entered: until you delete them or your account.
Weekly AI brief: deleted two weeks after its week starts.
Signed-in sessions (with IP address and device): deleted a day after they expire. Sessions expire after 7 days without use.
Sharing invitations that were not accepted: deleted 30 days after they expired, were declined or were withdrawn.
Support requests: kept while open; deleted with their replies and attachments 2 years after they were resolved or closed, and in any case when you delete your account.
App error reports: up to 30 days after they were last seen.
Purchase steps: 180 days. After account deletion they are no longer linked to you.
Security log: kept for 2 years to protect the service, then deleted. When you delete your account, your IP address and device details are removed from it.
Email sending records (template, language and status, no address): deleted after 13 months.
Email and device-key hashes for the free trial (HMAC, no address, name, user id or hardware id): kept after account deletion, only to prevent repeat trials. Apple's DeviceCheck “trial used” mark for the device stays with Apple and holds no identity.
Email suppression list: if an email to your address bounced or was marked as spam, a keyed hash (HMAC) of the address, so we don't send to it again. It holds no address, is kept after account deletion and is only used to protect email delivery.
Free voice add counter (user id, a random id per voice add, month): deleted with your account.
Your customer record at RevenueCat: deleted when you delete your account (retried automatically if RevenueCat is briefly unavailable). Store receipts stay with Apple or Google under their own policies.
Providers' copies (email delivery logs at Resend, server logs) are kept under their own retention settings. Database backups are kept for at most 30 days and then deleted; they are never used to bring back a deleted account.

10. Deleting your account

In the app, open Menu, tap your name, then Personal details › Delete account and confirm with your password (or, if you only sign in with Google or Apple, by signing in with it again). Deletion is immediate and permanent. Your account, transactions, payments, repeating payments, groups, people, budgets, goals, Assistant data, support messages and uploaded files are erased, your customer record at RevenueCat is deleted, and you get a confirmation email. The account deletion page has the details. Deleting your account doesn't cancel an App Store or Google Play subscription, so cancel that in your store account.

11. Your rights

Under the GDPR you may ask to access, correct, delete or receive a copy of your data (portability), to restrict processing or to object to it, and to withdraw consent at any time without affecting what happened before.

Under KVKK Article 11 you have the right to learn whether your data is processed and to ask for information about it, to learn the purpose and whether it is used for that purpose, to know who it is transferred to in Türkiye or abroad, to ask for correction and deletion and for these to be passed on to the recipients, to object to a result against you that comes only from automated analysis, and to claim compensation for damage from unlawful processing.

You can do much of this in the app: edit or delete any entry, turn AI off in Assistant settings, and delete your account. To get a copy of your data (access and portability), use Menu › Legal › Export my data: you get one JSON file with your profile, settings, transactions, payments, repeating payments, groups, people, lent and borrowed money, budgets, goals, Assistant preferences, AI usage counts, support messages, subscription, trials and gifts, right away (attachments are listed by file name). For anything else, use Menu › Help & support › Data request (KVKK/GDPR) in the app, which verifies your identity through your account, or email [email protected] from the address on your account. It's free, and we answer within 30 days. The KVKK information notice explains how to apply in writing.

If you're not happy with our answer, you can complain to the Personal Data Protection Board in Türkiye (Kişisel Verileri Koruma Kurulu, kvkk.gov.tr) or to the data protection authority where you live in the EU.

12. AI features

AI is used for Premium AI voice add, receipt scan, AI answers in the Assistant and the weekly brief. Everything else runs on your phone.
What is sent: for AI voice add, the text and your category, people and group labels; for receipt scan, only when you tap Scan receipt, the receipt photo, the app language and your category list; for the Assistant, your question and a summary of your data. Never your notes, name, email or account details.
Before the first AI request, the app explains what is sent, what is never sent and who receives it, and asks “Allow” or “Not now”. Until you allow it, our server refuses AI requests.
Requests go through OpenRouter (United States) to a model provider, which may be in the United States or another country. We ask OpenRouter to route them only to providers that don't collect your requests or use them for training. The models we use may change.
What we keep for AI: usage records (feature, model, token counts and cost), when you allowed AI features and which version of the explanation you saw, and your answer ratings (never the question or answer text).
To turn AI off: Assistant › settings icon › AI features. The app then uses its on-device features. If what we send ever changes, the app asks you again.
AI is not used to make decisions about you with legal or similarly significant effects.

13. Security

Connections to our servers are encrypted. Passwords are stored as one-way hashes, sign-in codes are hashed, sessions expire after 7 days without use, and sign-in, sign-up and password reset are rate limited. Uploaded files are only reachable through private links that expire within minutes, and every request is checked against the signed-in account. These checks are covered by automated tests. Signing out removes your data from the phone.

No system is perfectly secure. If a breach affects your personal data, we will inform you and the relevant authority as the law requires; under KVKK we notify the Board within 72 hours of learning about it.

14. On your phone

App lock uses Face ID, Touch ID or your passcode through iOS. The app only learns whether unlocking worked, never any biometric data. Hide amounts is a setting kept on your phone.

The home-screen widget reads a small copy kept on your phone: upcoming payment titles, amounts and due dates, and this month's totals. Nothing is kept for it on the Free plan or when you're signed out, nothing at all while the app lock is on, and no amounts while Hide amounts is on.

Siri shortcuts only open the app on the right screen.

15. Children

MoneyRemind is for adults (18+) and is not directed at children. We don't knowingly collect data from anyone under 18. If you think a child has given us data, contact us and we'll delete it.

16. This website: cookies and local storage

This website has no advertising or tracking cookies. It uses Cloudflare Web Analytics, a cookieless, privacy-friendly service, for anonymous aggregate visit statistics (pages, referrer, country, device type, performance). Cloudflare Web Analytics sets no cookies and does not identify visitors. Apart from that, the site itself sets one cookie, NEXT_LOCALE, which remembers your language, and stores your light or dark theme choice in your browser's local storage. Fonts are served from this site, so no request goes to Google. Our hosting provider processes standard request logs (such as IP address and browser) to deliver and protect the site.

17. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app before it takes effect.

Contact

Operator: Metin Yılmaz, Türkiye
Email: [email protected]
In the app: Menu › Help & support