CalmMoney Privacy Policy

Effective date: June 10, 2026

CalmMoney ("the app", "we", "us") is a budget-planning app operated by Zihnova ("the operator"). This policy explains what information CalmMoney collects, why, and what control you have over it. It applies to the CalmMoney mobile apps and the APIs behind them, published from zihnova.com.

The short version: we never connect to your bank, we never see your banking credentials, and the app contains no advertising or analytics trackers. The only financial data in CalmMoney is what you type in yourself.

1. What we collect

Information you give us

• Account information. When you create an account, our authentication provider (Clerk) collects your email address, your name if you provide it, and — if you sign in with Google or Apple — the basic profile information those services share (name, email, avatar). CalmMoney never sees or stores your password; passwords and sign-in security are handled entirely by Clerk.
• Financial data you enter. Transactions (amount, date, category, description), budgets, savings goals, recurring schedules, and notes. This data exists only because you typed it in — CalmMoney has no access to your bank, card, or any financial institution.
• Receipt photos. If you attach a photo of a receipt, the image is uploaded to our storage provider and linked to your transaction.
• Budget Space membership. If you join or create a shared space (couple, family, or group), we store the space's membership list, member roles, and invitations you send (including the invitee's email address).

Information created by using the app

• Activity records. Shared spaces keep an activity feed (e.g. "X added a transaction", "Y joined the space") so members can see what changed. These entries are visible to the other members of that space.
• Subscription status. If you subscribe to CalmMoney Premium, our billing provider (RevenueCat) tells us whether your subscription is active. Payment itself is processed by Apple or Google — we never see your card number.
• Basic technical logs. Our servers keep standard, short-lived request logs (timestamps, IP addresses, request paths) for security and debugging.

What we deliberately do NOT collect

• No bank or financial-institution credentials, ever.
• No advertising identifiers, no ad networks.
• No third-party analytics or behavioral-tracking SDKs.
• No contact-list, location, or background data collection.

2. How we use your information

• To provide the service: storing and syncing your budgets and transactions across your devices and with the members of your shared spaces.
• To operate shared spaces: showing your name/avatar and your contributions to the other members of spaces you belong to.
• To manage subscriptions: unlocking Premium features when our billing provider confirms an active subscription.
• To secure the service: rate-limiting, abuse prevention, and debugging.

We do not sell your data, use it for advertising, or share it with anyone except the service providers below.

3. Service providers (data processors)

CalmMoney is built on a small number of infrastructure providers. Each receives only what it needs to do its job:

4. Shared Budget Spaces — what other members see

If you join a shared space, the other members of that space can see the transactions, budgets, notes, and receipts inside it, along with your name, avatar, and activity entries. Personal spaces are visible only to you.

Two things to understand before joining or creating a shared space:

• If you leave a space (or delete your account), the content you contributed to spaces owned by others — transactions, receipts, schedules, activity entries — remains in the space so the group's financial history stays intact, but it is disassociated from your identity.
• If you own a shared space and delete your account, that entire space is deleted — including content other members created in it. Other members permanently lose access to that space's data.

5. Data retention and deletion

• Your data is retained for as long as your account exists.
• You can delete your account at any time in the app (Settings → Delete Account) or by following the steps at zihnova.com/calmmoney/delete-account. Deletion removes your account, your authentication record at Clerk, your personal spaces and everything in them, your receipt photos, your subscription record, and any shared spaces you own. Content you contributed to other people's spaces is anonymized as described in section 4.
• Deletion is processed immediately on request; residual copies in encrypted backups expire on the backup rotation schedule (at most 30 days).
• Unconfirmed receipt uploads and expired invitations are cleaned up automatically.

6. Data export

You can export the complete transaction history of any space you belong to as a CSV file at any time (Settings → Data → Export Transactions). Export is free and is never limited by subscription tier.

7. Where your data is stored on your device

The app keeps an offline cache of your data on your device so you can view it without a connection, and stores your sign-in session in your device's secure storage (Keychain on iOS, Keystore on Android). Deleting the app removes both.

8. Security

All traffic between the app and our servers uses TLS. Sign-in security (password hashing, session management, OAuth) is delegated to Clerk. Space-invitation tokens are stored only as cryptographic hashes, so they cannot be redeemed from a database leak. Access to production systems is restricted to the operator.

No system is perfectly secure; if we become aware of a breach affecting your data we will notify you as required by applicable law.

9. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, export, delete, or restrict the processing of your personal data, and to lodge a complaint with a supervisory authority. The in-app tools cover most of these directly (export in section 6, deletion in section 5); for anything else, contact us at the address below and we will respond within 30 days.

10. International transfers

Our servers are hosted in Germany (Hetzner); our service providers may process data in other regions, including the United States, under their own compliance frameworks. By using CalmMoney you understand your data may be processed outside your country of residence.

11. Children

CalmMoney is not directed at children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the app evolves. Material changes will be announced in the app or by email before they take effect. The "Last updated" date at the top always reflects the current version.

13. Contact

Zihnova
Email: support.calmmoney@zihnova.com
Website: https://zihnova.com