Privacy Policy

1. Controller

Responsible for the processing of personal data is Gerald Gmainer, Am Platzl 3, 4451 Garsten, Österreich. Email: moneykoi.app@gmail.com

This policy covers the Money Koi app, the web dashboard at my.moneykoi.com and the website moneykoi.com.

Money Koi works without an account. The book is then stored in a database on the phone, and the Money Koi server does not receive it.

Bookings, accounts, budgets, goals, receipts and receipt photos stay on the device.
If the phone’s own backup is switched on, Android includes the book in its backup to the Google account. Receipt photos are left out of it.
A few things leave the phone even without an account: crash reports (5), the anonymous price list and the changelog (7), two scanner lookups (4) and, when something is bought, the purchase (8).

An account is needed for Cloud and for shared books. Sign-in works with a code or link sent by email, with a password, or with Google.
The account holds the email address, a user ID, the plan, and a display name and profile picture if they are set.
A Cloud book is synced to the Money Koi server: bookings, accounts, categories, budgets, goals, shopping lists, investments and receipt photos. The photo upload can be switched off.
The server is operated by Supabase in the EU, in Frankfurt (Germany). Data is encrypted in transit and at rest. It is not end-to-end encrypted: the server works with the book itself to sync it, share it and show it in the web dashboard.
Members of a shared book see everything inside that book. An invitation sends one email to the invited address.
Legal basis: providing the service the user asked for (Art. 6(1)(b) GDPR).

Receipts are read on the device with Google ML Kit text recognition. The photo and the recognized text are not sent anywhere to be read.
ML Kit sends diagnostic and usage data to Google: device and app details, a per-installation ID, performance figures and error codes.
With a connection, the app may look up a shop’s VAT number in the VIES register of the European Commission to find the shop’s name. Only the VAT number is sent.
Some receipts carry a web link in their QR code. The app may open that link to read the receipt data behind it. The request goes to the address printed on the receipt.
In a Cloud book, receipt photos are backed up to the server (3), unless the photo upload is switched off.
Legal basis: providing the scanner (Art. 6(1)(b) GDPR); for the ML Kit data, the legitimate interest in a working scanner (Art. 6(1)(f) GDPR).

When the app crashes or hits an error, a report goes to Sentry: the error, the app and system version and the device model.
Reports are stored in Sentry’s EU region (Germany). Names, email addresses, amounts and notes are removed before sending. No screenshots and no screen recordings are made.
Crash reports are on by default and can be switched off in the app under Privacy & legal → Crash reports.
Legal basis: the legitimate interest in a stable app (Art. 6(1)(f) GDPR).

Only after a clear yes, the app and the web dashboard send which screens and features are used, for example that a booking was added and how.
The statistics never contain amounts, names, notes or IDs of bookings. They carry a random install ID that is linked to no account, plus the platform, app version and language.
They are stored on the Money Koi server (Supabase, EU) and deleted after 400 days.
Switching them off — in the app under Privacy & legal → Usage statistics, in the web dashboard under Settings — deletes every event of that install.
Legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.

For investments, the app loads current prices and exchange rates from the Money Koi server. Without an account, it always loads the whole list, never only the assets held, so the request reveals no holdings.
Live prices can be switched off in the app’s settings.
The changelog is loaded from the Money Koi server when it is opened online, without an account.
Legal basis: providing these features (Art. 6(1)(b) GDPR).

Pro and Cloud are bought through Google Play or the Apple App Store. The store handles payment; Money Koi never sees payment details.
RevenueCat manages the purchases for the app. It receives the store receipt, purchase events, the country and device details such as the model and system version, together with an ID: the Money Koi user ID when signed in, otherwise a random ID.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

moneykoi.com and my.moneykoi.com are hosted by Cloudflare. Every request is processed with the IP address and browser details and logged briefly for operation and security.
The website counts page views with Cloudflare Web Analytics, only after consent in the banner; only then is its script loaded from Cloudflare (static.cloudflareinsights.com). It sets no cookies, stores nothing in the browser and recognizes no one by IP address or browser details. Recorded are the page, the referring page, the country, the browser, system and device type, and loading times. The choice can be changed at any time under “Analytics settings” in the footer.
The choice in the banner is stored in the browser’s local storage, the language choice in a cookie (i18n_redirected).
Fonts, images and videos come from the website itself. No external font or video service is loaded.
The web dashboard keeps the sign-in session in the browser.
Legal basis: the legitimate interest in a working, secure website (Art. 6(1)(f) GDPR); for the analytics, consent (Art. 6(1)(a) GDPR).

These providers process data on behalf of Money Koi or for their own service:

Supabase Inc. (USA): server and database, region EU (Frankfurt, Germany)
Functional Software Inc. (Sentry, USA): crash reports, region EU (Germany)
RevenueCat Inc. (USA): purchase management
Cloudflare Inc. (USA): hosting of moneykoi.com and my.moneykoi.com, web analytics
Google (Google Play, ML Kit, sign-in with Google, Android backup)
Apple (App Store)
European Commission (VIES): VAT number lookup
For providers outside the EU, the transfer relies on the EU–US Data Privacy Framework or on the EU standard contractual clauses.

Data on the phone stays until it is deleted in the app or the app is removed.
The server copy of an account and its books is kept for as long as the account exists, also after a Cloud plan ends.
Deleting the account, in the app or in the web dashboard, removes the account and every book it owns from the server, for all members. Books it only joined stay with the others.
Usage statistics: 400 days at most. Crash reports: 90 days at most. Server and hosting logs: briefly, as set by the providers.
Purchase records are kept by the stores and RevenueCat under their own retention rules.

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).
A consent can be withdrawn at any time, with effect for the future.
Requests and privacy questions go to moneykoi.app@gmail.com.
There is no automated decision-making and no profiling.
A complaint can be lodged with a data protection authority, in Austria with the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Last updated: 24.10.2026