MONEE
MONEEPersonal Money System
Privacy First

Your Money is Your Business.
Not Advertisers'.

Last Updated: September 2026. This policy outlines how MONEE ("monee.co.ke", "we", "our") handles your data with zero institutional lock-in and strict client-side encryption.

No PINs or Passwords

We never ask for your M-Pesa PIN, banking passwords, or account credentials.

Zero Data Selling

We never sell, rent, or trade your cash flow data or spending habits to any third party.

1-Click Full Wiping

You retain complete ownership. Export your ledger or delete your entire account in one click.

1. The Core Privacy Model

MONEE is designed around one personal question: What is happening to my money? We believe personal financial visibility should never require granting third-party access to your bank accounts. MONEE does not connect to banks via screen-scraping or credential-based aggregators. You maintain complete custody of your financial accounts.

2. Statement Ingestion & Local Parsing

When you paste an M-Pesa SMS or upload a PDF/CSV bank statement:

  • Text analysis and regex extraction occur client-side in your local browser runtime.
  • Only the structured transaction records (date, amount, counterparty, and category) are committed to your personal ledger.
  • Raw statement documents or SMS payloads are never retained or archived on external training servers.

3. What We Store

If you authenticate to use cloud sync, we store:

  • Account Profile: Your authenticated email address and anonymous user ID.
  • Personal Ledger: Your accounts (e.g. M-Pesa, KCB, Cash), transactions, recognized identities (merchants/people), and custom categories.
  • Cash Flow Rules: Custom categorization heuristics learned from your manual edits (e.g. "Naivas = Food & Dining").

4. Encryption & Graph Security

All cloud data synchronization is governed by InstantDB with strict CEL (Common Expression Language) permission rules. Records associated with your profile can only be read or modified by your authenticated session token. Data in transit is protected using TLS 1.3 encryption.

5. Data Retention & Deletion

You may export your complete financial record at any time in standard JSON or CSV format via the Profile Drawer. Upon requesting account deletion, all profiles, accounts, transactions, and learned rules associated with your user ID are immediately and irreversibly purged from our database.

6. Contact

For privacy inquiries, audit requests, or data erasure, contact us directly at privacy@monee.co.ke.