Privacy notice
Effective 31 October 2026
MoneyOS helps you see and plan your money across Nigeria and the UK. This notice explains what we collect, why, who handles it, how long we keep it, and your rights. It applies to the MoneyOS Android app and moneyos.io.
Who we are
MoneyOS is the data controller for the personal data described here. Contact us about privacy at privacy@moneyos.io.
How MoneyOS protects your money data
Your transactions, balances, budgets, goals, accounts, categories, notes, receipts and statements are encrypted on your phone with a key that comes from your password. Only the encrypted version is sent to our servers. We cannot read it, and nobody who gets into our database can read it either.
Because of this, we cannot reset your password or recover your data if you forget your password. Keep it safe.
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Email address | Your account, sign-in, verification codes, security and Legacy messages | Contract |
| Password check value and key settings (never your password) | Confirming it is you when you sign in | Contract |
| Encrypted vault, receipts, family pots and Legacy vault (we cannot read these) | Storing and syncing your data across your devices and with people you choose | Contract |
| Session records (a scrambled form of the sign-in token) | Keeping you signed in for up to 30 days | Contract |
| Phone notification token | Sending alerts you switched on, such as pot updates | Consent, which you can withdraw by turning notifications off |
| Emails of people you invite, such as your trusted person or pot members | Letting them join, and sending them the messages the feature needs | Legitimate interests in running the features you asked for |
| Short-lived security counters made from a scrambled form of your IP address or email | Stopping password guessing and abuse | Legitimate interests in keeping the service secure |
| Age confirmation (a yes, not your date of birth) | Making sure users are 16 or over | Legal obligation |
We do not sell your data. We do not use it for advertising. We do not build profiles about you.
What stays on your phone
- If you allow it, MoneyOS reads notifications from banking and messaging apps on your phone to spot money coming in and going out. This happens on your phone. Only the result is saved, and it is saved inside your encrypted vault.
- Bank statements, receipt photos and voice entries are read on your phone. Anything kept is encrypted before upload.
- Your PIN never leaves your phone. On Android it is protected by the phone's secure key storage.
The AI money advisor
When you use the advisor, your phone sends your question and a short summary of your own numbers, such as totals by category, balances and goals, so the advice fits you. This is the one place where some of your money information leaves your phone readable. It goes to our server and to Cloudflare's AI service to produce the answer. We do not store your questions or the summary, and we do not log them. Spending categories you mark as private are left out. The conversation is saved only in your encrypted vault. If you would rather not share this, do not use the advisor.
Who handles data for us
- Cloudflare, Inc.: hosting, database, security checks on sign-up, and the AI advisor model.
- Google (Firebase Cloud Messaging): delivering phone notifications. It receives your notification token and a short generic message with no amounts or names.
- Brevo (Sendinblue SAS): sending verification codes and account emails.
These providers act on our instructions under data processing terms. Some of them process data outside Nigeria and the UK, including in the United States and the European Union. Where that happens, we rely on the safeguards the law requires, such as standard contractual clauses and the UK International Data Transfer Addendum.
How long we keep data
- Your account and encrypted data: until you delete your account. Deleting your account in Setup removes your account, vault, receipts, Legacy vault, pots you own, sessions and notification tokens straight away.
- Sign-in sessions: 30 days, then deleted.
- Email verification codes: 15 minutes, then deleted.
- Security counters: up to 24 hours, then deleted.
- Server backups kept by our hosting provider: overwritten on their normal cycle, usually within 30 days.
Your rights
Under the Nigeria Data Protection Act 2023 and UK GDPR you can ask to access, correct, delete or move your data, object to some uses, and withdraw consent at any time. You can delete everything yourself in Setup. You can download a readable copy of your data with Download my data in Setup. For anything else, email privacy@moneyos.io. We reply within one month.
You can complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or the UK Information Commissioner's Office (ico.org.uk). We would like the chance to fix it first.
Children
MoneyOS is for people aged 18 and over, and for 16 and 17 year olds whose parent or guardian agrees. It is not for anyone under 16.
Security
We use encryption on your phone, encrypted connections (TLS 1.3 where your phone supports it), strict limits on sign-in attempts, and security checks on the Android app. If we learn of a breach that puts you at risk, we will tell you and the regulator as the law requires.
Changes
If we change this notice in a way that matters, we will tell you in the app before it takes effect.