Privacy Policy
Moner (“the app”) is a personal spending tracker for Android. In short: your spending data stays on your phone. Moner has no server and no account, and the developer never receives your data. Gmail is read only to find payment receipts, on your phone. A receipt photo leaves your phone only if you turn on AI reading.
Everything stays on this phone
No account, no server, no ads, no analytics.
1. Data stored on your phone
- Payments you record: what it was for, amount, category, date and time, how you paid, and notes.
- Receipts found in Gmail (only if you connect Gmail): merchant or recipient, amount, date and time, payment method, bank or app, and reference number.
- Quick actions: payments you chose to save for one-tap reuse.
- Profile and settings: the name and optional photo you set, your monthly limit, week start, appearance and other settings.
- A short activity log of what the app did (for example, receipts recorded or payments edited), kept on the phone.
This data is kept in the app’s private storage on your device. It is not sent to the developer or to any server run by the developer. If Android device backup is on, Android may include it in your own Google backup; you can turn that off in Android settings. Uninstalling the app, or Delete everything in Moner’s Settings, deletes it.
2. Gmail (optional)
If you choose Connect Gmail, Moner asks Google for read-only access to your Gmail (https://www.googleapis.com/auth/gmail.readonly). Moner uses this access only to:
- search your mailbox for payment receipts from banks, e-wallets, QRIS, and ride or delivery services; and
- read those receipt emails on your phone to fill in the amount, merchant, date and payment method.
While Gmail is connected, Moner checks for new receipts when you open Home, the first time you open Receipts, and when you tap Fetch now. It does not check in the background.
Moner does not send, delete, modify or label any email. Email content is processed only on your device. It is never sent to the developer, never sent to any AI service, never used for advertising, and never shared with or sold to anyone. Only the receipt details listed in section 1 are kept, in the app on your phone. You can disconnect Gmail at any time in Moner’s Settings, which removes the access; you can also remove it at myaccount.google.com/permissions.
Moner’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Camera and photos
Moner uses the camera, or a photo you pick from your gallery, only when you scan a receipt or split a bill. By default the photo is read on your phone with Google ML Kit (on-device text recognition) and is not kept after reading.
4. AI receipt reading (optional, off by default)
If you turn on Read receipts with AI in Settings (you are asked to agree first), the photo of a receipt you scan or split is sent to Google’s Gemini model through Google Firebase AI Logic so it can be read more accurately. Only that photo is sent: no Gmail content, no payment history and no profile data.
Google processes it under the Gemini API Additional Terms and the Google Privacy Policy. On Gemini’s free tier Google may use what is sent to improve its products, so avoid scanning receipts that show card numbers or personal details. You can turn AI reading off at any time; scans then stay on your phone. If AI reading fails or you are offline, the on-device reader is used instead.
5. App integrity
To stop others misusing the AI service, the app uses Google Firebase App Check with Google Play Integrity. When AI reading is used, it sends a device and app integrity check to Google. This check does not include your spending, receipts or Gmail data.
6. Sharing and exporting
Nothing is shared unless you do it. A Split bill summary is drawn as an image on your phone and passed only to the app you choose in Android’s share sheet. Export my data creates a CSV file that you save where you choose.
7. What Moner does not do
- No advertising, analytics or tracking SDKs.
- No selling or sharing of your data, and no use of it for advertising, profiling or credit decisions.
- No account with the developer, and no developer server.
8. Your choices
- Disconnect Gmail in Settings at any time.
- Turn AI reading on or off in Settings.
- Export your data as CSV, or delete everything, from Settings › About.
- Uninstall the app to remove all of its data from your phone.
9. Children
Moner is not directed at children under 13 and does not knowingly collect their data.
10. This website
These pages are hosted on GitHub Pages and load fonts from Google Fonts, so GitHub and Google may receive your IP address when you visit, under their own privacy policies. The site sets no cookies and uses no analytics.
11. Changes
If this policy changes, the new version will be posted on this page with a new effective date. Material changes will also be noted in the app’s release notes.
12. Contact
Questions or requests: alviy.dev@gmail.com