Privacy Policy

Effective Date: January 1, 2026  |  Last Updated: March 1, 2026

MoneyFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy describes what information we collect, how we use it, and your rights regarding your data when you use the MoneyFlow iOS application.

1. Information We Collect

We collect only the minimum information needed to provide MoneyFlow's features:

• Google Account Info (via OAuth 2.0): When you sign in with Google, we receive your email address, display name, and profile picture. We do not access your Gmail, Google Drive, Google Calendar, or any other Google services.
• Financial Data: Income and expense transactions, categories, amounts, dates, and notes that you manually enter into the app.
• Device Info: Basic technical data (e.g., iOS version) used solely to maintain app functionality.

2. How We Use Your Information

• Authenticate your identity via Google Sign-In
• Store and sync your financial transactions across devices using Firebase
• Display your name and profile picture within the app
• Improve app performance and fix bugs
• Ensure the security of your account

We do not use your data for advertising, profiling, or any purpose beyond operating the MoneyFlow app.

3. Google OAuth & Limited Use

MoneyFlow's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request the minimum necessary Google account scopes (email and profile)
• We do not transfer your Google data to third parties
• We do not use Google data for serving advertisements
• We do not allow humans to read your Google data unless required for security or legal reasons

4. Data Storage & Security

Your data is stored in two places:

• On your device: Using SwiftData for offline access
• In the cloud: Using Google Firebase Firestore, secured by Firebase Security Rules

We implement industry-standard security measures including encrypted connections (HTTPS/TLS) and Firebase authentication rules to protect your data.

5. Offline Use

MoneyFlow works offline. Data entered offline is stored locally on your device and synced to Firebase automatically when an internet connection is restored.

6. Data Sharing

We do not sell, rent, or share your personal information with any third parties, except:

• Google Firebase — for authentication and cloud storage (governed by Google's Privacy Policy)
• Legal requirements — if required by law or to protect the rights and safety of our users

7. Data Retention & Deletion

Your data is retained as long as your account is active. You may request complete deletion of your account and all associated data at any time by contacting us at tpcreative.co@gmail.com. We will process deletion requests within 30 days.

8. Children's Privacy

MoneyFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: tpcreative.co@gmail.com
• Website: https://moneyflow-ddc15.web.app