Monee
Privacy Policy: Monee Offline
Last updated 30 September 2026
1. What we collect
Nothing. Monee Offline has no sign-in, no server, no analytics, no advertising identifier, no crash reporting and no third-party SDK that collects data. We do not know who uses it or what they record.
2. The app does not use the network
- On Android the app does not have the internet permission, so the operating system itself stops it opening any connection.
- On iOS there is no equivalent permission. Instead, the app is built without any code that makes network requests, and it takes updates only through the App Store.
- Exchange rates come from a table built into the app and from rates you enter yourself. They are never fetched.
- The Terms and Privacy links in the app open your web browser. The browser loads those pages, not Monee Offline.
3. What is stored on your phone
| Data | Where it stays |
|---|---|
| Your ledger: accounts, transactions, budgets, categories, labels and settings | An encrypted database on the device. Its key is kept in the iOS Keychain or the Android Keystore. |
| Bank and wallet messages, if you turn message capture on | Read on the device. A message from a sender that is not an institution you added is discarded before anything is written down. The ones kept are stored in the encrypted database. |
| Receipt photos | Read on the device with the phone’s own text recognition, and kept there. |
| Your name, if you type one | In the ledger, on the device. It is only used to greet you. |
| Your passcode and Face ID or fingerprint setting | On the device. Biometric data is handled by the operating system and never reaches the app. |
4. Permissions
Every permission is optional and the app works without all of them. Each one is asked for only when you use the feature that needs it.
- SMS and notification access (Android): to turn bank and wallet messages into transactions.
- Camera and photos: to attach and read receipts.
- Face ID or fingerprint: to unlock the app.
- Notifications: budget and scheduled-transaction reminders, created on the device.
No contacts, no location, no call log.
5. Backups and exports
Because there is no account, a backup file is how you move your ledger to a new phone. Backup files and CSV exports are not encrypted. They are made only when you ask, and you choose where they go through your phone’s share sheet. If you save one to a cloud drive or send it to someone, that service’s own terms apply to the file.
6. Apple and Google
The App Store and Google Play handle downloads and updates. If you have chosen in your phone’s settings to share diagnostics with app developers, Apple or Google may send us crash reports under their own policies. Those reports describe the app’s code, not your ledger.
7. Deleting your data
More → Your data → Delete everything removes your ledger from the device. Uninstalling the app removes everything it stored. We hold no copy, so there is nothing to ask us to delete. The flip side is that we cannot recover a lost ledger: if the phone is lost and you have no backup file, the data is gone.
8. Children
Monee Offline is not directed at children.
9. Changes
If this policy changes, the date at the top changes with it. A version of the app that collects anything would need a new policy and an update through the store. We would not make that change silently.