Your money stays yours

What we store and why

We store your name, email, password hash and sign-in sessions to provide your account. We store the income, spending, bills, budgets and savings goals you enter, plus pay-pattern, yearly-cost and reminder preferences, to organise and display your money. Financial records are encrypted before database storage. If you enable two-factor login, authentication secrets and recovery codes are encrypted by our authentication service.

CSV statements are parsed to create transactions. We do not keep the original uploaded CSV. Version 1 has no bank connections and never asks for your bank password. Only entries you deliberately add to a shared budget are visible to its members.

Our reasons for using data

We process account and financial records to perform the service you request. Necessary security monitoring and fraud prevention rely on our legitimate interests in protecting the service, balanced against your rights. Any optional marketing or non-essential notifications require an appropriate choice from you. We retain billing records where required by law. We do not use your records for targeted advertising or personalised financial advice.

Who helps run the service

Vercel hosts the app, Neon stores its database, Stripe handles web subscription payments, and Resend sends requested account-recovery and email-verification messages. If you opt in, it also sends bill reminders, weekly summaries and shared money-date summaries. It receives the recipient email and the message content needed for that chosen service. Recovery emails do not contain financial records. Each optional email type can be stopped in Settings or through its unsubscribe link. Optional native purchases use RevenueCat and the original app store when configured. Money Cove does not store full card numbers. Our authentication software is Better Auth. Provider processing locations, contractual safeguards and any international transfers will be confirmed in the final launch notice. Team enquiry details and feedback are kept to respond to your request. Optional receipt scanning is disabled by default; when enabled and you consent, the receipt image is processed by the configured AI provider, and no image is kept in your financial records. Onboarding improvement statistics contain daily totals per screen only. They contain no names, account identifiers, income, bill amounts or device identifiers. We count screen visits and exits to understand where setup feels difficult.

Your choices and rights

You can export your own records and delete your account under Settings on every plan. Account deletion removes active financial records and sign-in data, and requests removal of your RevenueCat customer profile when one exists. App-store cancellation is separate: cancel in Apple or Google before deleting your account to stop future store charges. Your own shared-budget entries are removed while your partner’s entries remain theirs. Provider backups may retain earlier copies until they expire; the backup retention period must be finalised before launch. Cancellation alone keeps your records and returns you to Free.

You may request access, correction, erasure, restriction, objection or portability as applicable under UK data protection law. Use the Money Cove support page for the current contact options if the app cannot handle your request. We aim to respond to rights requests within one month, subject to lawful extensions. You can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and general tips

Essential session and security cookies keep you signed in. We do not use advertising trackers. Anonymous onboarding screen totals help us improve setup. Tips are general information, not personalised financial advice. Updated notices will be dated and material changes explained before they apply.