← Mr. Money

Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how Mr. Money ("the App", "we", "us"), operated by Hasnain Shabir, handles your information. Mr. Money is a personal-finance tracker, and we have built it to be private by default.

In short: your financial data lives on your own device unless you turn on cloud sync. We do not show ads, we do not use third-party analytics or advertising trackers, and we never sell your data.

The short version

Information we collect

Account information. When you create an account, we collect your email address, a display name, an optional phone number (only if you choose to provide one), and a password. Passwords are never stored in plain text — authentication is handled by our backend provider (Supabase), which stores only a securely hashed version. When you sign up, we may send a one-time verification code to confirm your email address.

Sign in with Google. If you choose "Continue with Google", Google confirms your identity and shares basic profile information — your name and email address — with us to create or access your account. We never receive your Google password. Google's handling of your information is governed by Google's own Privacy Policy.

Financial information you enter. The App stores the data you choose to add: income and expense transactions, wallets/accounts, categories, budgets, savings goals, and investments, along with amounts, notes, dates, and your chosen currency.

Notifications. If you turn on notifications, we register a push-notification token for your device (through Expo's push service) so we can send the reminders and budget alerts you opt into. This token is linked to your account and used only to deliver those notifications. You can turn notifications off at any time.

App preferences. Your settings — such as display currency, light/dark theme, and storage mode (local or cloud) — are saved so the App behaves the way you left it. If you set an App Passcode, that code is stored only on your own device to lock the App; it is never sent to us.

What we do NOT collect. We do not collect your precise location, contacts, photos, advertising identifiers, or browsing activity. We do not embed third-party analytics, advertising, or tracking SDKs.

How your data is stored

Local-first. By default, everything you enter is stored only on your device using the device's local storage. If you uninstall the App or clear its data, locally-stored information is permanently removed. An App Passcode you set is also stored only on your device.

Optional cloud sync. When you switch on cloud storage in Settings, your account and finance data are synced to our backend (Supabase) so you can access them across sessions and devices. Each user can only access their own data, enforced by database row-level security.

Optional cloud backup. You can save a snapshot of your data to your account and restore it later, from another session or device. Backups are stored in the same secure backend and are accessible only to you.

How we use your information

We do not use your information for advertising or profiling, and we do not perform automated decision-making that has legal effects on you.

Sharing and disclosure

We do not sell, rent, or trade your personal information. We share data only in these limited cases:

Data retention and deletion

Local data is kept until you delete it in the App or uninstall the App. Cloud data is kept until you delete it or request account deletion.

You are in control: you can delete individual transactions, wallets, categories, goals, and investments in the App. You can permanently delete your entire account and all associated data at any time from Settings → Delete My Account — this is immediate and irreversible. You may also email us at support.mrmoney@gmail.com and we will process the request for you. Deleting the App from your device also removes all locally-stored data.

Security

Data in transit between the App and our backend is encrypted using industry-standard TLS. Cloud data is protected by per-user access rules so one account cannot read another's data. For extra privacy on your device, you can turn on an optional App Passcode in Settings that locks the App behind a 4-digit code. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

Children's privacy

Mr. Money is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect data from them. If you believe a child has provided us personal information, contact us and we will delete it.

International users

If you enable cloud sync or backup, your data may be stored and processed on servers located in a country different from your own. By using these features you consent to this transfer. Depending on where you live, you may have rights to access, correct, delete, or export your personal data — you can exercise these using the in-app tools or by contacting us.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the App. Continued use of the App after an update means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or your data, contact us at support.mrmoney@gmail.com.