Privacy
Monize is built so that we hold as little about you as we can. This page lists everything we do hold, and why.
Your financial data stays in your browser. We never receive it unless you turn on sync — and when you do, it's encrypted on your device before it leaves.
On your device
Your accounts, transactions, categories, settings and exchange rates are kept in your browser's storage, on each device you use. They never reach our server unless you turn on sync.
Browser storage isn't encrypted on your device: anyone who can use your browser can see this data. Clearing this site's data in your browser deletes it, so download a backup first if you want to keep it.
Your account
You sign in with Google. Google sends us your account ID, your email address and whether Google has verified it, your name and your profile picture. Our server stores your Google account ID, your email address and your preferred language. Your name and picture are kept only in the sign-in cookie in your browser.
Google learns that you signed in to Monize. It never sees your financial data, and signing in doesn't unlock any of it.
If you turn on sync
Our server then also stores:
- One encrypted copy of your data, with its size, a version number and which of your devices sent it. It's encrypted on your device with a key we never have.
- That key, locked with your data passphrase, your recovery key and any passkeys you add, together with the names of those passkeys. We can't unlock it.
- Your devices: a name based on the browser and system, when each one was added and last synced, and whether you removed it.
We never receive your data passphrase, your recovery key, or your data in a form we can read.
If you lose both your data passphrase and your recovery key, the synced copy can't be recovered — by you or by us. The data on this device isn't affected.
Cookies
We use only the cookies the app needs: your sign-in session, which lasts up to thirty days, your language, and cookies that protect the Google sign-in. No advertising or tracking cookies.
What we don't do
No analytics, no ads, no tracking, and no scripts from other companies. Fonts are served from our own server. We don't sell or share your data.
Server logs and backups
Like any website, our server sees your IP address with each request. Monize doesn't save it to its database or use it to profile you. The server database is backed up every night, encrypted, and each backup is deleted after thirty days.
Deleting your data
- On a device: clear this site's data in your browser's settings.
- Synced data: turn off sync in Settings. That deletes the encrypted copy, its locked key and the device list from our server straight away.
- Your account: email us from the address you sign in with, and we'll delete it. Copies in server backups are gone once those backups expire, within thirty days. privacy@monize.example
Contact
Monize runs this copy of Monize. For anything about privacy, write to: privacy@monize.example
Changes
When this page changes, the date at the top changes with it.