Privacy Policy

Last updated October 29, 2026

This policy explains what information the Money Map app for iPhone and Apple Watch (the “App”) and this website (https://money-map.me) handle, and why. Money Map is developed by Duminda Kodagoda (“we”, “us”). The short version: your financial data stays on your device, we do not run analytics or advertising, and we never sell data.

1. Data stored on your device

Everything you enter — transactions, accounts, categories, budgets, goals, recurring schedules, debts, stock holdings, saved bank messages and settings — is stored in a database on your iPhone. It is not sent to us. Your Apple Watch, widgets, Siri and Spotlight receive copies of the data they display directly from your iPhone, on your device.

Deleting the App deletes this data, unless you have made a backup (see section 4).

2. Signing in

You can sign in with Apple or with Google. Sign-in is used only to keep a separate ledger for each person on the device — no account is created on our servers.

• Sign in with Apple asks Apple for your name only. Apple returns an identity token; the App reads a stable user identifier from it on your device and then discards the token.
• Sign in with Google requests the openid and email scopes. Google returns an identity token; the App reads your Google user identifier and email address on your device, uses them to label your on-device ledger, and discards the token. Google is aware that you signed in, as with any Google sign-in.

3. Google user data

The App accesses Google user data only for the features described here, and only after you grant consent on Google’s consent screen:

• Basic profile (email, user ID) — to identify your ledger on your device, as described in section 2. It is not transmitted to us or to any third party.
• Google Drive (drive.file scope) — only if you turn on Google Drive backups. This scope lets the App see and manage only the backup files the App itself creates in your Drive; it cannot read any of your other files. Backups are uploaded directly from your device to your Drive and never pass through our servers.

Money Map’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI or machine-learning models, and do not allow humans to read it. You can revoke the App’s access at any time from your Google Account permissions.

4. Backups

Backups are optional and go to storage you control: your own iCloud Drive (handled by Apple under Apple’s privacy policy) or your own Google Drive (see section 3). You can also export your transactions as a CSV file and share it however you choose. We have no access to these backups.

5. Connected accounts (optional)

Some users have an existing account on the Money Map web service. If you choose Connect account and sign in with Google, your data is synchronised between the App and that web service over an encrypted (HTTPS) connection and stored on its servers so it can be shown on the web. The App cannot create such an account; connecting is only possible for an account that already exists. If you never connect, nothing is synchronised.

6. Public data the App downloads

Some features fetch public information. These requests contain no personal or financial data from the App, although the provider will see your device’s IP address as with any internet request:

• Currency exchange rates (via the jsDelivr CDN and allratestoday.com)
• Share prices from the Colombo Stock Exchange (cse.lk)

7. Bank messages

iOS does not let apps read your SMS messages. If you set up the optional Shortcuts automation, iOS passes the text of matching bank messages to the App, which stores and reads them on your device to suggest a transaction. They are not sent anywhere.

8. Notifications, Face ID and Siri

Reminders are local notifications scheduled on your device. If you enable the app lock, Face ID or Touch ID is handled entirely by iOS — the App only learns whether authentication succeeded. Siri and Shortcuts requests are processed by Apple under Apple’s privacy policy.

9. What we do not collect

• No analytics, crash-reporting or advertising SDKs.
• No tracking across apps or websites, and no advertising identifier.
• No bank logins — the App never connects to your bank.
• No sale or sharing of personal data with data brokers.

10. This website

This website does not use cookies or analytics. It is hosted by Vercel, which processes standard server logs (such as IP address and browser type) to deliver and secure the site.

11. Children

The App is not directed at children under 13, and we do not knowingly collect information from them.

12. Your choices and rights

Because your data lives on your device, you are in control of it: you can edit or delete any record in the App, delete all data by deleting the App, revoke Google access as described above, and delete backups from your iCloud or Google Drive. For connected accounts, contact us to request access to or deletion of data held by the web service.

13. Changes

If we change this policy, we will update the date at the top of this page. Material changes will also be noted in the App’s release notes.

14. Contact

Questions about privacy? Email support@money-map.me.