Privacy Policy

1. What MoneyTidy does

MoneyTidy is a personal and household financial organisation platform. It allows users to create private spaces, record or import transactions, allocate money to buckets, manage accounts and credit cards, track loans and investments, plan financial goals, attach receipts and collaborate with invited members.

MoneyTidy is a budgeting and information-management tool. It does not provide personal financial, taxation, legal or investment advice.

2. Personal information we collect

Account and identity information

• Your name, email address, profile image and authentication identifier.
• The spaces you create or join and your role in each space.
• Invitation, membership, login-history and account-security information.

Financial information you choose to enter

• Transactions, amounts, dates, descriptions, payees and income sources.
• Buckets, balances, targets, commitments and allocations.
• Bank-account descriptors, statement balances and partial account identifiers.
• Credit-card, loan, mortgage, investment, superannuation and savings information.
• Plans, projections, tax tags, categories, notes, reimbursements and receipts.

Do not enter complete bank-account numbers, complete payment-card numbers, online-banking passwords, PINs or authentication codes into free-text fields.

Billing, technical and communications information

Our payment provider processes subscription payments and provides us with limited billing and subscription status information. We and our service providers may also process browser, device, IP address, login, diagnostic and security information, essential browser storage, support requests and communications.

3. How and why we collect information

We collect information directly from you, from authorised members who invite you or contribute to a shared space, from files you import, automatically through our infrastructure, and from authentication, hosting, billing and email providers.

We use it to provide and secure MoneyTidy, calculate and display financial records, administer shared spaces, process subscriptions, send service communications, support users, investigate faults, prevent misuse, comply with law and enforce our terms. We do not sell personal information.

4. Shared spaces

Information within a shared space is available to authorised members according to their role. Owners control membership, roles and the lifecycle of the space. Editors manage operational records. Viewers may view information but cannot ordinarily change it.

You should invite only people you trust. We cannot control how an authorised member uses information after they have viewed or exported it.

5. Disclosures and service providers

We may disclose information to authorised space members; Google Firebase and Google Cloud for authentication, database, storage and application infrastructure; Stripe or another configured payment provider; configured email providers; professional advisers and contractors; regulators or courts where required; and parties involved in a properly managed business transfer.

We do not permit providers to use personal information for their own independent marketing merely because they provide services to MoneyTidy.

6. Overseas processing

Depending on the services and regions configured for MoneyTidy, information may be stored or processed in Australia, the United States and other countries where our providers or their subprocessors operate.

Primary Google Cloud/Firebase region: Sydney, Australia; Data processing: United States of America. Overseas recipients may be subject to different privacy laws from those that apply in Australia.

7. Security

• Encryption in transit and encryption at rest provided by our cloud infrastructure.
• Firebase Authentication and role-based Firestore Security Rules.
• Separate development, testing and production environments.
• Restricted production access and least-privilege administrative permissions.
• Logging, monitoring, controlled deployments and incident-response practices.

Developers should use synthetic or sanitised data outside production and should not have routine production-database access. No internet service is completely secure, and users remain responsible for protecting their accounts, devices and exports.

8. Retention, deletion, access and correction

We retain information while reasonably needed to provide the service, maintain security and records, comply with law, resolve disputes and enforce agreements. Deleted information may remain temporarily in backups, logs, billing records or legally required records.

You can access and correct much of your information in MoneyTidy. You may also contact us to request access, correction or deletion. We may verify your identity and may refuse a request where permitted or required by law. Once we delete your data and notify you of its deletion, it may not be recoverable in any format. We can provide your data to you in a reasonable format governed by the limitations of our systems.

9. Data breaches

We maintain processes for responding to suspected data breaches. Where the Australian Notifiable Data Breaches scheme applies and a breach is likely to cause serious harm, we will take the steps required by law, which may include notifying affected individuals and the Office of the Australian Information Commissioner.

10. Children, communications and third parties

MoneyTidy is not directed to children under 16. We may send essential authentication, invitation, subscription, support and security messages. Optional marketing will include an unsubscribe method where required. We are not responsible for third-party websites or for information once users export it from MoneyTidy.

11. Complaints and contact

Contact us first with a privacy question or complaint. We will investigate and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner.

12. Changes to this policy

We may update this policy as MoneyTidy, our providers or legal requirements change. We will publish the revised policy with a new effective date and provide additional notice where a change is material.