Privacy Policy

This Privacy Policy explains how Hermann Wagenleitner, the controller responsible for Money Flow, processes personal data. Full controller and contact details are provided in Section 11.

This Privacy Policy applies to the Money Flow application, the Money Flow website, Money Flow Sync, and customer support.

1. Data Stored on Your Device

By default, data that you enter or create in Money Flow is stored locally on your device and is not transmitted to us. This may include transactions, accounts, categories, budgets, goals, notes, tags, counterparties, locations, images, and other content and settings created in the application.

Data entered or created in the application is transferred from your device only when you choose to use an optional cloud feature, such as iCloud Backup or Money Flow Sync.

2. iCloud Backup

You may choose to create a backup of your Money Flow data in your iCloud account. This feature is optional.

The backup is stored in iCloud and is not transmitted to Money Flow servers. Apple processes data stored in iCloud under its own terms and privacy policy.

3. Money Flow Sync

Money Flow Sync is an optional service. Data is not transmitted to the sync service unless you enable the service and create a sync profile.

To provide Money Flow Sync, we process:

• your email address and authentication information;
• profile, device, and session identifiers;
• data supported by the sync service, such as transactions, accounts, categories, budgets, goals, notes, tags, counterparties, locations, and related application settings;
• technical information necessary to operate and protect the service.

An email address is required to create a sync profile. If you do not provide the required information, you cannot use Money Flow Sync, but you can continue using the local features of the application.

We process this information because it is necessary to synchronize data between devices, provide shared access, protect sync profiles, and diagnose technical problems as part of the service requested by you.

Data in a sync profile is accessible on every device signed in to that profile, including devices belonging to other people to whom you provide access.

Money Flow Sync servers and their backups are located in Germany.

Sync profile data is stored until you delete the profile in the application. Deletion removes the profile and its data from active systems. Residual copies may remain in rotating backups for up to 14 days and are then automatically deleted.

4. Purchases

Payments made through the App Store are processed by Apple. We do not receive your payment card number, bank account details, billing address, or Apple Account credentials.

We receive the App Store receipt and purchase information made available to developers, such as the purchased product, transaction identifiers, purchase status, and relevant dates. We use this information to validate, provide, and restore purchases.

We process this information because it is necessary to provide the purchased features. We also have a legitimate interest in preventing errors, fraud, and misuse.

Purchase information is retained for as long as necessary to validate, provide, and restore the corresponding purchase rights, including lifetime purchases.

Apple processes App Store purchases under its own terms and privacy policy.

5. Technical Logs

When the application or website communicates with our servers, limited technical logs are generated. They may contain the time and result of a request, error information, and other technical information necessary to operate, secure, and diagnose the service.

Technical logs are retained for no longer than 14 days.

We process this information based on our legitimate interest in maintaining the security, stability, and correct operation of the application, website, and related services.

6. Customer Support

If you contact customer support, we process your email address, the contents of your message, attachments, and any other information you choose to provide.

We use this information where necessary to respond to your request and provide the service, based on our legitimate interests in providing support and defending legal claims, or where processing is required by law.

We use PrivateEmail, a service provided by Namecheap, Inc., to receive and store support correspondence. Namecheap may process this data in the United States. Relevant transfers are protected by the European Commission's Standard Contractual Clauses.

Support correspondence and attachments are retained for as long as necessary to handle the request, maintain relevant support history, comply with legal obligations, and establish or defend legal claims.

7. Recipients and International Transfers

Personal data may be made available to:

• service providers involved in operating server infrastructure in Germany;
• Namecheap, Inc. for email hosting and support correspondence;
• Apple when you use iCloud or App Store services;
• other people to whom you provide access to your sync profile;
• public authorities where disclosure is required by applicable law.

Money Flow servers and backups are located in Germany.

Namecheap may process support correspondence in the United States. The European Commission's Standard Contractual Clauses apply to relevant transfers. Further information about these safeguards is available on request.

Apple may process data in countries outside the European Economic Area in accordance with its own terms, privacy policy, and applicable transfer safeguards.

8. Data Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Access is limited to the persons and service providers that need it for the purposes described in this Privacy Policy.

9. Your Rights

Subject to applicable law, you may have the right to:

• obtain information about the processing of your personal data and receive a copy of it;
• correct inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive personal data that you provided in a structured, commonly used, machine-readable format;
• lodge a complaint with a competent data protection supervisory authority.

You can delete a Money Flow Sync profile and the data stored in that profile directly in the application.

For other privacy requests, contact . Where necessary, we may request information needed to verify that the request relates to you.

We may retain particular information where this is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.

10. Changes to This Privacy Policy

We may update this Privacy Policy when our processing practices change. The current version and its effective date will be published on the Money Flow website.

11. Controller and Contact

The controller responsible for the processing of personal data is:

Hermann Wagenleitner


Germany

Email:

Effective date: August 7, 2026