In short: we collect only what the service needs to work, we don’t sell your data and we don’t use advertising trackers. Bank access keys are stored encrypted, and you can switch off any connection yourself.
1. Who processes the data
The controller of personal data is the owner of the HomeMoney service — a sole proprietor (FOP) whose details are shown in the bank details for paying for plans. We process data in line with the Law of Ukraine “On Personal Data Protection” and, for users in the European Union, also with the GDPR.
2. What data we collect
- Account data: name, email, password (only as an irreversible hash), profile photo, language and time zone.
- Financial data you enter: accounts, transactions, categories, budgets, loans, shopping lists, counterparties and client invoices.
- Bank data: if you connect a bank — the access token, the list of accounts, balances and statements the bank provides; if you import a CSV — the contents of the file.
- Sign-in with Google or Apple: the account identifier, email and name that the service shared with your consent.
- Plan payments: the order, amount, period and whether it was paid. We never receive bank card details: you pay by transfer in your own bank.
- Technical data: IP address, browser type, sign-in times and the activity log of a workspace — for security and incident investigation.
3. Why we use the data
- to provide the service: keep records, build reports, sync banks;
- to send notifications: about budgets, loan payments, plan expiry and workspace invitations;
- to confirm plan payments;
- to protect accounts and the service from abuse;
- to meet legal requirements.
We do not sell your data, do not pass it to advertisers and do not use your financial data for advertising.
4. Legal bases
We process data to perform our contract with you (the Terms of Use), on the basis of your consent (for example, connecting a bank or signing in with Google), and to meet legal obligations and protect legitimate interests — the security of the service.
5. Bank tokens
Bank access tokens and other secret keys are stored encrypted. The service uses them only to read statements and balances and cannot make payments. You can switch a connection off under “Banks” and revoke the token at your bank.
6. Who we may share data with
- hosting and email providers that help us operate — only as far as needed to provide their services and under confidentiality terms;
- banks — statement requests that you started by connecting them;
- Google, Apple, Telegram or Viber — only if you connected that service yourself;
- public authorities — only where the law expressly requires it.
Members of your workspace see that workspace’s data according to their role.
7. Data retention
We keep data for as long as your account exists. When an account is deleted, its data is deleted too, except for information we must keep by law (such as payment records). Backups are overwritten in cycles, so deleted data disappears from them within a limited time.
8. Security
- connections to the service are encrypted (HTTPS);
- passwords are stored only as hashes, secret keys are encrypted;
- two-factor authentication and signing out of all other devices are available;
- actions in workspaces are logged, and access to data is limited by roles.
9. Cookies
We use only necessary cookies: to keep you signed in, to protect forms and to remember your language. We do not use advertising or third-party analytics cookies.
10. Your rights
You have the right to know what data of yours we process, to get a copy, to correct inaccurate data, to withdraw consent (for example, by disconnecting a bank or Google), to restrict processing, to request deletion, and to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or your local data protection authority. You can change most of your data yourself in the account settings.
11. Children
The service is not intended for children under 14. If you believe a child has given us their data without parental consent, let us know and we will delete it.
12. Changes and contacts
We may update this Policy. The date of the latest version is shown at the top of the page, and we will announce significant changes in the service or by email.
To exercise your rights or ask a question, reply to any HomeMoney email or write to the address the service’s emails come from.