The Money is developed by Umang Chaudhari. This policy explains how the app handles your information. Your ledgers are stored locally by default. You can choose to share a ledger through Apple's iCloud service. You do not need to create an app login or connect a bank to use a private ledger.
1. Information stored on your device
The app stores the financial information you enter or confirm, including account names and balances, transactions, categories, notes, dates, currencies, investments, transfers, budgets, repayment records, recurring schedules, tags and attached receipt photos. It also stores unfinished entries, preferences and any account-suffix mappings you configure for smart entry. This information is used to display your records, calculate totals and provide the features you choose.
The app does not include advertising, tracking or a developer-operated analytics service. It does not sell your information or send your ledger to a developer-operated server. Your selected country or region helps suggest banks and currency; the app does not request your location.
2. Optional iCloud sharing and participant names
If you choose to share a ledger, its saved financial records and receipt attachments are uploaded to Apple's CloudKit service and made available to the people you invite. Other private ledgers, unfinished drafts and pending SMS reviews are not included. Participants with editing permission can add, change or delete shared records. Each participating device keeps a local copy for offline use and later synchronization.
Restore from iCloud finds ledgers previously synced by your signed-in Apple Account and ledgers whose invitations that account has already accepted. Choosing a ledger downloads its latest available saved records and reconnects synchronization. This does not recover records that were kept only on another device or changes that never reached iCloud.
New shared transactions record their creator's identifier within this app's iCloud container. The app temporarily displays participant names supplied by iCloud so people can identify contributors and manage access. These iCloud-supplied names are not saved in ledger files or exported backups. The app does not read participants' email addresses, phone numbers or Contacts for these labels. A name you explicitly enter under Sharing & people is saved in that ledger and included in its sharing and exports; you can change or clear it.
The owner can manage invitations and remove participants in Sharing & people. Removing access takes effect through iCloud and does not erase another person's previous downloads or exports. Apple processes iCloud account, sharing and service information under its own privacy terms. CloudKit manages encryption and access controls; protection also depends on your Apple Account and service settings.
3. Optional SMS smart entry
The app cannot browse your Messages inbox. Smart entry receives only the content passed to it by a shortcut or Message automation you configure. The current direct-message workflow processes extraction with Apple's on-device model when available. The app does not send the original message to a developer server or a remote AI model. Older shortcuts containing their own Use Model action are controlled separately in Shortcuts; use On-Device or replace them with the current direct-message shortcut.
While a suggestion awaits review, the app keeps its original message locally so you can check the extracted information. Successfully saving, dismissing or deleting the review removes that message from the app's inbox. Closing a review or an interrupted save keeps it until review or save recovery finishes. The original message is not included in saved transactions, exported ledger backups, iCloud ledger sharing or Live Activities. Deleting it from The Money does not delete it from Apple's Messages app.
Confirmed transaction fields and review metadata remain with your records. A separate local history retains up to 200 handled suggestions without original message text; it has no fixed time-based expiry. Up to 100 pending reviews may be retained until handled or removed. The app keeps identifiers and reference digests to help prevent duplicate SMS entries. A skipped duplicate's original message is not retained. Disable smart entry in Settings and disable its automation in Shortcuts to stop new deliveries.
4. Photos, app lock and notifications
The app uses camera access only when you choose to photograph a receipt. Photos you select or capture are compressed and stored with the transaction; camera captures are not automatically saved to your photo library. Attached receipts are included if you export or share that ledger.
Optional app lock uses your device's Face ID, Touch ID or passcode through Apple's authentication system. The app does not receive biometric data or your device passcode. Lock preferences remain in the device's Keychain and are not shared or exported.
Optional local bill reminders can display ledger and bill names. Smart-entry Live Activities can display an amount if you enable that option. These presentations may appear on the Lock Screen or connected devices according to your Apple settings. Original SMS text is not included. You can manage notifications and Live Activities in Settings.
5. Storage, backups and deletion
Ledger files use iOS data protection. The separate SMS inbox uses protection that permits incoming reviews after the device's first unlock; viewing or confirming a review still requires access to the unlocked app. No storage system can guarantee absolute security.
Ledger and SMS storage are marked as excluded from system backups, subject to Apple's operating-system behavior. You can export a ledger through Files. Exported files contain financial details, attached receipts and applicable contributor information, and are not password-protected. A cloud destination you select may upload the export under that provider's terms. Private ledgers have no automatic app-operated cloud backup. Losing or deleting the app or device can lose records without a usable backup; synchronization is not a historical backup.
Records remain until you delete them. Archiving a ledger preserves its data. Settings → Delete All Local Data removes the app's local ledgers, drafts and SMS inbox/history and clears bill reminders. It does not delete exported files, your Shortcuts automations, the iCloud copy of a shared ledger or copies held by other participants. App-lock preferences remain in the device Keychain; turn app lock off separately in Settings → Security if desired.
Manage sharing or leave a shared ledger through Sharing & people. Owners can manage the app's cloud data through iCloud settings. Deleting shared records requires synchronization to reach other participants. Copies previously exported or downloaded remain outside the app's control. File deletion is not a guarantee of forensic erasure from device storage.
6. Apple and other services you choose
While the app is open, it periodically checks Apple's public App Store listing for an available update. You can also check manually in Settings. This sends the app's public identifier and App Store country or region to Apple; ordinary connection information, such as your IP address, is visible to Apple's service. No ledger contents, SMS messages, participant names or app-generated user identifier are included. A reminder preference is stored locally. These checks do not prevent offline use, and installing an update remains your choice in the App Store.
Apple independently operates iCloud, Messages, Shortcuts, model downloads, App Store services and system diagnostics under its own settings and privacy policy. Downloading a shortcut or opening a website uses the relevant service. A Files provider you select handles exported files under its own policy. These choices do not give The Money access to your bank login or payment services.
7. Your choices and privacy questions
You can use private ledgers offline, decline optional permissions, edit or delete records, export a ledger, turn off smart entry, and manage sharing access. The developer cannot retrieve or delete private records stored only on your device; the app provides those controls locally.
For privacy questions, contact Umang Chaudhari using the support contact on The Money's App Store product page. If you contact the developer, the information you choose to send is used to respond to your request. Do not send bank passwords or unnecessary financial records. You can request deletion of support correspondence, subject to resolving ongoing issues or applicable legal obligations.
8. Changes to this policy
This policy may be updated when the app's features or data practices change. The published policy and its last-updated date will reflect those changes.