Privacy policy

What information do we use?

• Accounts and profiles: We use the user identifier, email, name and login session from Apple or Google/Firebase, together with the name, icon or profile photo you choose, to verify your account and display your profile. If you use Apple's Hide My Email, we use the relay address provided. We do not store sign-in codes in budget records. Apple sign-in is linked to an existing account only with your explicit consent.
• Budget records: We store and synchronize budget names, currency, members and invitations; monthly income and expense budgets; transaction descriptions, dates, amounts and categories; savings, goals, notes and plan information.
• Files you choose: Statement images, CSV and PDF files are read when you use the import feature. Only transactions you review and save are added to the budget. If you choose image storage, a thumbnail is stored separately in private Firebase Storage and linked to transactions.
• Plans and existing Apple subscriptions: We associate Pioneer registration and benefits with your account. To verify or restore existing Apple purchases, we use Apple-signed product and transaction identifiers, purchase environment, expiry and refund status, and the app account association identifier. The app server does not receive your payment card details or Apple account password.
• Support requests: We use contact details and the information you email us to resolve issues and respond. Do not send passwords, verification codes or bank login information.

Shared budgets and widgets

Budget owners and members can view and edit budget records and view linked stored images. Stored images do not have public URLs: the server verifies sign-in and budget membership before serving them. Names and profile photos are also visible to members. Check your members before sharing.

Home Screen widgets store monthly summaries supplied by the app on your device. Amounts are hidden by default and you can choose whether to show them. When your app session expires, the widget asks you to open the app again.

Free access and existing subscriptions

During the current POC period, available Pro features are free for Pioneers. New subscription purchases and plan changes are disabled. Pro limits apply to AI processing and budget members. Future pricing and free access may change. We will not automatically charge you without separate consent or a subscription request.

Apple handles billing, automatic renewal and refunds for existing Apple subscriptions. Open Settings → User settings → Budget plan → Manage subscription to restore purchases or open Apple subscription management. Pioneer benefits or deletion of your app account do not automatically cancel existing Apple subscriptions. Manage Apple subscription to cancel separately.

Information handled by external services

We use Apple and Google/Firebase for sign-in, Cloudflare for servers and data storage, Firebase Storage for private images, and Branch for invitation links. These providers may process request-related information when delivering their respective features.

When you use AI statement analysis, we send the text read from your chosen images or PDFs to OpenAI. This text may contain personal information such as names, account numbers and transactions.

Automatic categorization sends transaction descriptions, types and category candidates to TypeSafe Jev. If OpenAI fallback categorization is configured, the same types of information may also be sent to OpenAI when Jev is unavailable or uncertain. Classification requests do not include the original document, dates, amounts or account aliases as separate fields.

With separate consent, AI budget suggestions send anonymous summary numbers derived from budgets, spending, projected savings, goal progress and check settings to OpenAI for prioritization. Names, accounts, transaction descriptions, goal names, original files and sign-in information are excluded. Suggestions do not automatically change budgets or transactions.

Servers supporting image analysis send a reduced image with photo metadata removed and recognized text to OpenAI. Original PDF files and app sign-in tokens are not included in AI requests. Reduced images used for analysis are not automatically saved in the Monthwe image archive. Firebase Storage uploads, when you choose image storage, are separate from AI requests. OpenAI requests use an option disabling response storage, but this does not change the provider's retention policies. Availability of AI analysis, automatic categorization and image storage depends on your plan and server connections. Each provider's own policies also apply to external processing and retention.

ChatGPT and the MCP connection

OAuth associates the account, household and scopes approved on the consent screen. Requested monthly summaries, transaction searches and budget simulations are returned to the connected ChatGPT conversation. Results may include household name and identifier, currency, budgets, savings, categories, transaction dates, descriptions, amounts, account aliases and external transaction identifiers.

MCP does not directly access email accounts or raw statement files. It stores a temporary preview of rows supplied in the conversation or extracted separately, and saves transactions only after explicit user approval of the displayed preview. Files uploaded to the host and conversations are also subject to that host’s processing and retention policies.

Previews become unusable after 15 minutes; expired material is cleaned up when another preview is created. Confirmation clears the preview payload and keeps a result receipt valid for 24 hours to prevent duplicate re-execution. Expired receipts are also cleaned up during later preview creation. Expiry does not mean immediate physical deletion.

OAuth stores the client, user, household, scopes, expiry and revocation state. Access and refresh tokens are stored as hashes rather than plaintext. Access tokens last one hour; refresh eligibility lasts 30 days from initial issuance. Refreshing rotates tokens. Expiry or revocation does not immediately delete connection metadata.

Revoking a connection blocks subsequent MCP access, but does not delete imported transactions or ChatGPT conversations. App account deletion removes that user’s MCP previews, grants and authorization codes. Manage ChatGPT conversation retention and deletion in that service. Separate retention and deletion schedules, including logs and backups, have not been finalized; contact Support with questions.

Device access and protection

You choose the files and photos used for your profile and statements. Camera permission is requested only for photographing statements. We do not request location, contacts or microphone access, connect directly to bank accounts, or ask for bank passwords.

Public service connections use HTTPS. The server checks account identity and budget membership. Device sign-in information uses the operating system's secure storage. Budget records are not sold or shared for advertising tracking.

Retention, editing and account deletion

Accounts and budget records are stored while you use the service. You can edit or delete profiles and records in the app. To delete your account, open Settings → User settings → Delete account, review what will be deleted, then complete the consent and confirmation text steps.

Deleting your account removes the app profile, personally owned budgets and records, memberships and app login sessions. If an owned budget has other members or stored images, you may be asked to remove sharing or delete images first. Records in budgets owned by someone else and your Apple or Google account itself are not deleted. If Apple sign-in is linked, authenticate again in the app to revoke that connection. Signing out alone does not delete server records.

For questions about access, editing or deletion, contact support@limitedfactory.info. We may need to verify account ownership.

Contact and updates

Monthwe team: support@limitedfactory.info

If our processing changes, we update this page and its effective date. Usage and contact guidance is available in Support.