How we protect your data
In short. Your transactions are stored on our server in Russia. Your e-mail and name are encrypted, and the encryption key is kept separately from the database. If you'd rather Monya didn't know who you are at all, turn on hidden mode: no e-mail and no name, sign in with your fingerprint or Face ID and a password.
What is encrypted
- your e-mail and name;
- Google, Apple, Yandex and VK sign-in links;
- your Telegram name;
- a gift recipient's e-mail and the gift message;
- addresses for e-mails from Monya and support requests.
The encryption key lives in the server settings, not in the database, and in backups it is stored separately and encrypted too. If the database or a backup is stolen, your transactions cannot be linked to your e-mail.
What is not encrypted, and why
Amounts, categories, descriptions and tags of transactions, accounts, the last 4 digits of cards, and your country. Without them reports, budgets, search and phrase parsing wouldn't work. In regular mode this data belongs to your account, and the account to your encrypted e-mail.
What we don't store
- voice recordings — audio is transcribed and deleted right away;
- the text of bank SMS, notifications and e-mails — only a mark that the message has been processed;
- full card numbers and passwords — a password is stored only as a one-way hash;
- your sign-in address and phone model for more than 30 days after a session was last used.
Before a phrase is sent to the AI model, we remove e-mails, card, account and phone numbers from it.
How the server is protected
- the app and the website connect only over HTTPS;
- the database is closed to the internet: only the app on the server itself can reach it;
- backups are encrypted;
- the app shows where you are signed in, and you can end any session (Settings → Security).
Hidden mode
Sign up without an e-mail or a name: you get a sign-in name like monya-k7q2-x9fd and set a password, and on your phone you sign in with your fingerprint or Face ID. The database holds no e-mail, no name, and no Google, Apple or Telegram account. Even if the data ever leaks, it cannot be linked to you.
Keep in mind: we still store transactions with descriptions, tags, the last 4 digits of cards and your country — Monya can't work without them. In theory they could hint at who you are, so what you write in descriptions and tags is up to you. In hidden mode we shorten people's names in bank SMS and e-mails to initials ourselves. Subscription purchase data is kept by Apple, Google or the payment provider, not by us.
If you forget your password and lose your phone, access cannot be restored: we don't have your e-mail and don't know whose account it is. In hidden mode the Telegram bot, e-mails from Monya and Google and Apple sign-in don't work. You can turn the mode on and off at any time: More → Settings → Privacy.
What this doesn't protect against
If an attacker takes over the whole server together with the encryption key, they could read the e-mails of regular accounts. Hidden mode protects you even then: it has no e-mail.
Deletion
You can delete your account and all data in the app (More → Settings → Delete account) or on the account deletion page. Data disappears from backups within 30 days. For what data we process, see the privacy policy.