Privacy Policy

1. Introduction

Monyqa (“we”, “our”, or “the app”) is a personal income and expense tracking application for mobile devices. This Privacy Policy explains what information the app processes, where it is stored, and which third-party services are used when you choose to enable them.

Monyqa is designed to work primarily on your device. Signing in with Google is optional. You can use the app without an account.

2. Information stored on your device

By default, your financial data and app preferences are stored locally on your device using on-device storage (Hive). This includes, for example:

• Transaction records (income and expenses)
• Monthly and category budgets
• Recurring transactions and occurrence records
• App settings such as selected currency, language, and theme
• Your custom category catalog
• Notification preference settings

This data remains on your device unless you export it, restore a backup, or enable optional cloud backup described below.

3. App lock data

If you enable app lock (PIN, pattern, or password), the lock configuration is stored in your device’s secure storage (Android Keystore / iOS Keychain). Your secret is not stored in plain text. App lock data is not included in Monyqa backup files.

4. Optional Google sign-in (Firebase Authentication)

If you choose to sign in with Google, Monyqa uses Firebase Authentication together with Google Sign-In. During sign-in, Google may provide basic profile information such as your name, email address, and profile photo URL. Monyqa uses the Firebase user identifier to associate optional cloud backups with your account.

Sign-in scopes requested for authentication are limited to email and profile. You may sign out at any time from within the app.

Firebase is operated by Google. See Google’s privacy documentation for how Firebase processes authentication data.

5. Firebase Analytics

When Firebase is successfully initialized, Monyqa uses Firebase Analytics to collect limited usage analytics, such as:

• App open events
• Login events (method: Google), when you sign in
• Screen view events (screen names within the app)

Analytics data does not include the contents of your transactions, budgets, or other financial records. If Firebase cannot be initialized (for example, due to missing configuration), analytics collection does not occur and the app continues to function locally.

6. Optional Google Drive cloud backup

If you are signed in with Google and explicitly enable cloud backup, Monyqa may upload an encrypted-style backup snapshot to Google Drive. This uses a separate authorization step for the scope https://www.googleapis.com/auth/drive.appdata.

Important limitations:

• Backups are stored only in the Google Drive appDataFolder — a hidden, app-specific area not visible in your normal Drive file list.
• Monyqa stores a single file named monyqa-backup.monyqa in that folder.
• Monyqa does not access, browse, or modify your other Google Drive files, photos, or documents.
• Automatic backup (when enabled) runs after local data changes, with a short delay, and only while you remain signed in and authorized.
• You can disable automatic backup or sign out to stop further cloud uploads.

Backup content may include your local financial data and app preferences (similar to a manual .monyqa export), plus metadata such as export time, app version, and your Firebase user ID. App lock secrets are not included.

7. Manual export and import

From the app settings, you may export or import data manually:

• .monyqa — full app backup file (JSON format)
• PDF / CSV — financial reports for selected months

These exports are created on your device. You choose where to save or share them using your device’s native share or file picker. Monyqa does not automatically upload PDF or CSV exports to the cloud.

8. Local notifications

If you enable notifications, Monyqa may schedule local reminders on your device (for example, budget alerts, recurring payment reminders, or daily logging reminders). Notification preferences are stored locally. Monyqa does not send push notifications through a remote messaging server for these features.

9. Data we do not collect

Based on the current app implementation, Monyqa does not:

• Sell your personal or financial data
• Access your general Google Drive files outside appDataFolder
• Perform currency conversion or share data with banks
• Require an account to use core local features

10. Data retention and deletion

Local data remains on your device until you delete it within the app, uninstall the app, or clear app storage. Cloud backup files remain in your Google appDataFolder until you delete them through Google’s account data controls or revoke the app’s Drive access. Signing out stops further uploads but does not automatically delete existing cloud backups.

11. Children

Monyqa is not directed at children under 13, and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy when the app’s data practices change. The “Last updated” date at the top of this page will reflect the latest revision.

13. Contact

If you have questions about this Privacy Policy or how Monyqa uses your data, email us at support@monyqa.com.