Privacy policy

MoneyGlass Limited (company number 17523818), which runs MoneyGlass(“we”), is the controller of your personal data. This page explains what we collect, why, and your rights under UK data protection law.

What we collect

Your email address and password (stored hashed by our authentication provider); which version of our Terms you agreed to when you created your account; the financial figures you enter, such as income (your wages and any extra income, including what you record as received in particular months), bills, debts, savings and daily spending; reports you generate; your subscription status and Stripe customer reference; and sign-in records (time, IP address, approximate location, device type) kept to protect your account, with a random device code stored in a security cookie so we can tell you when a new device signs in. So that the free trial is one per person, we also keep a scrambled code made from your email address (never the address itself) and, for 30 days, a scrambled code made from the internet connection you signed up from. If you switch on two-step sign-in, our authentication provider also stores the secret key that links your authenticator app to your account. If you import a bank statement, we receive only the spending lines you choose to add (see “Importing a bank statement” below), never the statement itself. If you use the contact form, we keep your name, email address and message so we can reply. We also keep a private count of a few actions on the site (see “How we measure what people use” below). We never see or store your card number: Stripe handles it.

Importing a bank statement

You can import spending from a PDF or Excel (.xlsx or .csv) statement you have downloaded from your bank. The file is opened and read inside your own web browser, on your device. It is not uploaded to MoneyGlass, and it is not sent to or stored by us or by any of the providers listed below, so details on it such as your name, address, account number and sort code, payments into your account and your balance never reach us. You then see each payment out and choose which to add. Only the lines you add are sent to us, each as an ordinary spending entry (date, amount, category and the payee description from the statement as a note), exactly as if you had typed it in. They are kept, used and deleted in the same way as the rest of your spending entries. When you close or leave the page, the copy your browser read is discarded. Please only import statements for accounts you are entitled to use.

Why we use it

To provide the service you signed up for (contract), to take payment and keep records (contract and legal obligation), to keep the service secure and prevent fraud, including more than one free trial per person (legitimate interests), and to understand how many people use MoneyGlass each month and which features they use, so we can decide what to build next (legitimate interests). Sign-in records are used for both security and that monthly count. We do not sell your data and do not use it for advertising.

How we measure what people use

We keep a simple, private count of a few actions: using a calculator, choosing to save results, clicking a button for a feature we have not built yet, and starting checkout. Each count records the action, the page, the time, your account if you are signed in, and a scrambled form of your internet (IP) address used only to stop automated abuse. We use no cookies or third-party analytics for this. We do it to decide what to build next (legitimate interests).

We also use Vercel Web Analytics to count visits to each page and see which websites or campaigns people arrive from. It sets no cookies, and visits are not tied to you or your IP address: Vercel recognises a visit using a scrambled code made from the request, which it discards after 24 hours. Each visit records the page address, the website you came from, your approximate location (town and country), and your device type, browser and operating system. We send only the page address and any campaign tag in it, never anything you type into MoneyGlass. We do this to understand how people find us (legitimate interests).

Who processes it

Supabase (database and authentication, hosted in the EU/Ireland), Vercel (application hosting and visitor counts), Stripe (payments) and Resend (sending our emails; emails are sent from Ireland, and Resend stores account records in the United States). If you turn on phone alerts, each alert passes through your browser's own push service (Apple, Google or Mozilla, depending on your device), encrypted so that it cannot read it. They act on our instructions under their own data protection terms. Some may transfer data outside the UK using approved safeguards.

Monthly summary email

On the first days of each month we email you a short summary of the previous month, worked out from the figures you entered: what was free to spend, what you logged, where it went, your net worth and the fixed bills coming up. We do this as part of the service (legitimate interests). You can stop it at any time with the link in the email or on your Profile page. The email loads no images or trackers, so we cannot see whether you open it. We keep a record of which months we have emailed you for 400 days. The email sent in early January also tells you that your year in review is ready and links to it.

Emails during your free trial

While you are on a free trial we send up to six short emails: a welcome when it starts, four tips on getting set up (on days 1, 3, 6 and 10, and the first two only if you haven't yet added bills or spending), and a reminder the day before your trial ends. To decide which tips to send, we check whether you have added bills or spending, using the figures you entered. We send the tips because you signed up for the service (the “soft opt-in” in the Privacy and Electronic Communications Regulations); you can turn them off with the link in each tip or on your Profile page. The welcome and the trial-ending email are about your account, so they are sent either way. Emails stop as soon as you subscribe. We keep a record of which ones we have sent for 90 days.

Reminders and phone alerts

Reminders are off unless you turn them on, on your Profile page. If you do, we use the figures you entered to tell you the day before a fixed bill is due, and at most once each pay period when your daily amount until payday falls to half your usual or less. We send them by email, and as phone alerts on any device where you allow them (as part of the service you asked for). For phone alerts, your browser gives us an address for that device and two codes used to encrypt each alert, and we note the type of device so you can tell them apart. Phone alerts show no amounts, because they can appear on a locked screen. You can turn reminders off at any time on your Profile page, with the link in each email, or in your device's settings. We keep a record of which reminders we have sent for 90 days, so you don't get the same one twice, and forget a device that hasn't been sent an alert for 400 days.

Year in review

The year in review page adds up the figures you have already recorded for a calendar year (your income each month, the spending you logged, and the monthly records of your net worth and debts). It is worked out each time you open the page and is not stored separately, so it uses no new kinds of data and is removed with the rest of your data.

How long we keep it

Your data is kept while your account is open. Sign-in records are deleted after 90 days. Contact form messages are deleted 180 days after you send them once we have dealt with them, and after 365 days at the latest. In the usage count, the scrambled internet address is removed after 30 days, and counts linked to your account are deleted when you delete your data or close your account. The scrambled email code used to allow one free trial per person is kept for two years, even if you close your account sooner, and its scrambled internet address for 30 days. Payment and invoice records are kept as long as tax law requires. When you ask us to delete your account, we delete your data, except records we must legally retain.

Your rights

You can ask to see, correct, export or delete your data, object to or restrict processing, and complain to the Information Commissioner's Office (ico.org.uk). Use the contact page or email admin@moneyglass.co.uk and we will respond within one month.

Questions? Contact us. See also our Terms, Privacy Policy and Cookies.