1. Who we are
Moneta ("the App") is published by AnnMar Limited (company number 16014219, registered in England and Wales), trading as AnnMar Studio ("we", "us"). We are the data controller for personal data processed through the App and this website. Contact: info@annmarlimited.co.uk.
In short: your financial data is stored on your device. We don't sell data, run ads or use third-party tracking. Bank access is read-only, needs your explicit consent and expires automatically.
2. What data we process
| Data | Source | Where it is kept |
|---|---|---|
| Profile: first name, currency, pay date and pay amount you enter | You | On your device |
| Bank account details, balances and transactions (read-only) | Your bank, through our authorised open-banking provider, after your consent | On your device. Passed through our provider only to deliver it to you |
| Imported statements (CSV) and manual entries | You | On your device |
| Crypto-exchange read-only API keys and balances | You / the exchange | Keys encrypted at rest. Balances on your device |
| Family module: children's first names, pocket money, chores, goals | You (the parent/guardian) | On your device |
| Plan: commitments (mortgage, rent, cards, loans, contracts, insurance), payment history you enter, income & expenditure figures, and the name and postal address you add for letters | You (some figures pre-filled from your transactions) | On your device only. PDFs you create are shared only where you choose to send them |
| Purchase status: an anonymous app user ID and your purchase/trial entitlement | Apple and RevenueCat | RevenueCat (our purchase processor) |
| Support emails | You | Our email provider |
We do not collect your bank login details. You only enter them on your bank's own website or app. We do not collect precise location, contacts or advertising identifiers, and we do not track you across other apps or websites.
3. Why we use it (lawful bases, UK GDPR)
- To provide the App you asked for (contract, Art. 6(1)(b)): showing balances, categorising spending, calculating safe-to-spend, detecting subscriptions and budgets.
- Bank data: only with your explicit consent, given at your bank under the Payment Services Regulations 2017. You can withdraw consent at any time in the App or with your bank.
- Purchases and trial (contract): to check whether you have an active trial or Lifetime unlock.
- Legal obligations (Art. 6(1)(c)): tax and accounting records for purchases (held by Apple), and responding to lawful requests.
- Support and security (legitimate interests, Art. 6(1)(f)): answering your emails and keeping the App secure.
Spending insights and "money stress" signals are generated on your device. They are not used to make automated decisions with legal or similarly significant effects about you, and they are never shared with lenders or credit agencies.
4. Who we share it with
- Yapily Connect Ltd (open banking): an FCA-authorised Account Information Service Provider (FRN 827001) that connects to your bank on your behalf, only after you approve. It receives a random, anonymous connection ID, not your name or Moneta profile. See Yapily's Privacy Notice.
- Cloudflare, Inc.: hosts the secure relay between the App and Yapily. Bank data passes through it in transit and is not stored.
- Apple: handles App Store payments, Family Sharing and app distribution under Apple's own privacy policy.
- RevenueCat, Inc.: processes purchase receipts to unlock Lifetime access. It receives an anonymous ID, not your name or bank data.
- Crypto exchanges: only the read-only API key you choose to connect.
- Authorities, where the law requires it.
We never sell or rent personal data, and we never share it for advertising.
5. International transfers
Some processors (for example RevenueCat and Apple) may process data outside the UK. When they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Data on your device stays until you delete it in the App (Settings → Data & privacy → Delete my account & data) or delete the App.
- Bank consent expires automatically, normally within 90 days, unless you renew it.
- Purchase records are kept by Apple and RevenueCat as long as needed for your entitlement and their legal duties.
- Support emails are kept for up to 24 months.
7. Security
Bank data travels over encrypted connections (TLS). The App supports Face ID / passcode lock, and on-device data benefits from iOS data protection. Exchange keys are encrypted and must be read-only, so keys with withdrawal permission are rejected. No system is 100% secure. Please keep your device passcode private.
8. Children
Moneta is intended for adults (18+). The Family module lets a parent or guardian record pocket money for their children. Children do not have their own accounts, and that information is entered and controlled by the adult on their own device.
9. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your data, to data portability (Settings → Export my data (CSV)), and to withdraw consent at any time. To exercise these rights, email info@annmarlimited.co.uk. We reply within one month.
If you are unhappy, you can complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.
10. Changes
We will post any changes on this page and, where they are significant, tell you in the App.