Privacy Policy | MoniLog

1. Who we are

MoniLog (“MoniLog”, “we”, “us”) is an offline-first personal and small-business finance tracker, currently in closed beta. This policy covers every MoniLog surface:

the MoniLog Android app;
the MoniLog web app;
the MoniLog WhatsApp bot, which lets you log and query transactions by chat;
this website, including the beta signup and waitlist.

For anything in this policy, contact mbahlesky4@gmail.com.

2. The short version

Your financial records are yours. We do not sell them, rent them, or use them for advertising.
MoniLog works offline: entries are written to your device first.
If you create an account and sign in, your ledger is synced to Google Firebase so it appears on your other devices and in WhatsApp.
The WhatsApp bot only reads messages you send to it, and only replies to numbers you have linked yourself.
You can export your data at any time, and you can ask us to delete everything.

3. What we collect

3.1 Information you give us

Data	Where it comes from
Account details — email address, display name, profile photo, and phone number if you add one	Signing up with email or Google, or adding your phone number in the app
Financial records — transaction amounts, dates, categories, notes, account names and balances, transfers	Entries you create in the app, import from CSV, or send to the WhatsApp bot
Preferences — currency, language, theme, reminder settings, categories	Onboarding and settings
WhatsApp messages — your WhatsApp phone number and the text of messages you send to the MoniLog bot	Messaging the bot
Beta program details — your email address, an invite code if you used one, and your acceptance of the Beta Tester Agreement	Beta signup, waitlist, and feedback forms on this website

3.2 Information collected automatically

Diagnostics. Crash reports and performance data (Firebase Crashlytics and Performance Monitoring), including device model, operating system version, and app version.
Usage events. Anonymous product analytics such as “transaction created” or “screen viewed” (Firebase Analytics), and page views on this website (Vercel Analytics). These events do not include your financial figures.
Server logs. Our services record technical logs — timestamps, error messages, and, for the WhatsApp bot, the sending phone number when a message fails to process. Logs are kept for troubleshooting and rotate out over time.

We do not collect your contacts, your location, your photos, your bank credentials, or your SMS messages. MoniLog never connects to your bank or mobile money account: every figure in MoniLog is one you entered yourself.

4. How we use your information

Purpose	Data used
Run the product — store your ledger, compute balances and analytics, sync between your devices	Account details, financial records, preferences
Answer your WhatsApp messages and write the entries they describe	WhatsApp phone number, message text
Identify which MoniLog account a WhatsApp number belongs to	Phone number, account id
Fix crashes and improve the app	Diagnostics, usage events, server logs
Run the closed beta — invite codes, tester records, feedback, and beta updates	Email address, invite code, agreement acceptance
Keep the service secure and prevent abuse	Account details, server logs

We rely on your consent (which you can withdraw) and on the necessity of processing to provide a service you asked for. We do not use your data for advertising or automated decision-making, and we never sell it.

5. The WhatsApp bot

MoniLog offers an optional WhatsApp bot built on the WhatsApp Business Platform (Meta’s Cloud API). Using it is entirely voluntary — the app works fully without it.

You opt in by linking your number. The bot only responds to phone numbers that have been linked to a MoniLog account. An unlinked number gets a message explaining how to link, and nothing is stored.
We only see messages you send to the bot. We have no access to any other WhatsApp conversation, to your contacts, or to your WhatsApp profile beyond the phone number that messages us.
What happens to a message. The text is parsed to work out an amount, date, category, and account, and the resulting transaction is saved to your MoniLog ledger. The note you typed is stored as part of that transaction. We do not keep a separate transcript of your chat.
Replies. Replies are delivered through Meta’s WhatsApp Business Platform, so Meta processes them under its own terms and privacy policy. Messages in WhatsApp are end-to-end encrypted in transit between you and the WhatsApp Business Platform.
We never message you first. The bot only ever replies to a message you send. We do not send marketing, promotions, or newsletters over WhatsApp.
Stopping. Stop messaging the bot at any time, ask us to unlink your number, or block the number in WhatsApp. Unlinking does not delete your ledger — see deleting your data.

6. Where your data is stored

MoniLog is offline-first. Entries are written to storage on your own device (the Android app’s local database, or your browser’s storage on the web) and work with no connection at all. If you are signed in, that data is also synced to the cloud so it reaches your other devices and the WhatsApp bot.

Cloud data is held in Google Firebase (Firestore and Firebase Authentication), on servers operated by Google. Each account’s records are stored under its own user id and protected by security rules so that one account cannot read another’s data. Your data may be processed in countries other than your own, including the United States and the European Union.

We do not sell your personal information and we do not share it with advertisers. We use a small number of service providers to run MoniLog, and they may only process your data on our instructions:

Provider	What it does for MoniLog
Google (Firebase, Google Cloud)	Sign-in, cloud database and sync, crash reporting, analytics
Meta Platforms (WhatsApp Business Platform)	Delivering messages between you and the MoniLog bot
Railway	Hosting the WhatsApp bot service
Vercel	Hosting this website and the web app, plus page analytics
Supabase	Storing beta invite codes and the beta waitlist

We may also disclose information where the law requires it, or where it is necessary to investigate abuse or protect the safety of our users.

8. How long we keep it

Your ledger and account: kept until you delete the data or ask us to close your account.
Local device data: stays on your device until you clear it, reset the app data, or uninstall the app.
Server and diagnostic logs: kept for a short troubleshooting window and then rotated out.
Beta waitlist and tester records: kept for the duration of the beta program, then removed.

9. Your choices and rights

Access and export. Export your transactions to CSV, or take a full local backup, from the app’s data settings.
Correct. Edit or delete any entry in the app, or send edit and undo to the WhatsApp bot.
Delete. Reset local app data from settings, or request full deletion of your account and cloud data — see Delete your data.
Withdraw consent. Sign out to stop syncing, unlink your phone number to stop using WhatsApp, or stop using MoniLog entirely.
Complain. If you are unhappy with how we handle your data, write to us first — we would rather fix it directly.

Depending on where you live, you may also have rights to object to or restrict processing, and to receive your data in a portable format. Email us and we will honour those requests.

10. Security

All traffic between the apps, the bot, and our services runs over HTTPS.
Cloud records are stored per account and protected by database security rules.
Incoming WhatsApp webhooks are cryptographically verified, so only genuine messages from the WhatsApp Business Platform are processed.
Access to production credentials is limited to the people who operate the service.

No system is perfectly secure, and MoniLog is beta software. Please keep your own backups using the export feature, and do not rely on the beta as your only financial record.

11. Children

MoniLog is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We will update this page when our practices change, and we will change the “last updated” date at the top. If a change is significant, we will tell beta testers directly. Continuing to use MoniLog after an update means you accept the revised policy.

13. Contact us

Questions, requests, or complaints about privacy: mbahlesky4@gmail.com. We aim to reply within seven days.