Privacy Policy
EcoMoney
This Privacy Policy explains what information EcoMoney (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using EcoMoney you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| Financial Info (on-device by default) | No | No | Provide envelope budgeting, spending tracking, and savings goals — the core function of the app. This data is stored only in a local database on your device and is never transmitted to us or any third party unless you turn on the optional Sync & Backup feature below; receipt and statement parsing both run entirely on-device either way. |
| Sync account (optional) | Yes | No | EcoMoney is local-only until you explicitly turn on Sync & Backup from Settings. If you do, your data is sent over an encrypted connection to our self-hosted sync server (Cloudflare Worker + D1 + R2) and stored there so you can sign in and pick up the same budget on another device. You can stop syncing at any time; see "Your rights and choices" below for how to delete your account and synced data. |
| Purchases (optional) | No | No | Manage and restore the optional EcoMoney Plus subscription through Apple/Google via RevenueCat. We never store card numbers. |
| App Preferences (on-device only) | No | No | Remember your preferences and schedule local spending-insight reminders. Stored on your device only; no push token is collected and no remote notification server exists. |
What we collect
Financial Info (on-device by default)
- Accounts, category budgets, and transactions you enter or import
- Savings goals and goal contributions
- Receipt photos and the text extracted from them (receipt scan)
- Bank/card statement rows imported from a CSV or PDF file you choose
Provide envelope budgeting, spending tracking, and savings goals — the core function of the app. This data is stored only in a local database on your device and is never transmitted to us or any third party unless you turn on the optional Sync & Backup feature below; receipt and statement parsing both run entirely on-device either way.
Sync account (optional)
- Email address and a securely hashed password (PBKDF2-SHA256), if you create a Sync & Backup account
- The Financial Info above, plus receipt photos, sent to our sync server so your budget stays the same across devices
EcoMoney is local-only until you explicitly turn on Sync & Backup from Settings. If you do, your data is sent over an encrypted connection to our self-hosted sync server (Cloudflare Worker + D1 + R2) and stored there so you can sign in and pick up the same budget on another device. You can stop syncing at any time; see "Your rights and choices" below for how to delete your account and synced data.
Purchases (optional)
- EcoMoney Plus subscription state and purchase history
Manage and restore the optional EcoMoney Plus subscription through Apple/Google via RevenueCat. We never store card numbers.
App Preferences (on-device only)
- Settings, currency, and spending-insight notification preferences
Remember your preferences and schedule local spending-insight reminders. Stored on your device only; no push token is collected and no remote notification server exists.
What we do NOT do
- No account or sign-in is required to use EcoMoney — your budgets, transactions, receipts, and goals stay on your device unless you explicitly turn on the optional Sync & Backup feature.
- Receipt scanning and CSV/PDF statement import are both parsed entirely on-device, whether or not sync is on; no image, receipt, or statement data is ever sent anywhere as part of that parsing.
- No third-party analytics or crash/diagnostics SDK is used.
- No ads are shown.
- We do not sell your personal information.
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- RevenueCat — Optional EcoMoney Plus subscription and entitlement state
- Apple App Store — Optional EcoMoney Plus billing and receipts
- Google Play — Optional EcoMoney Plus billing and receipts
- Cloudflare — Infrastructure host (Workers, D1 & R2) for the optional Sync & Backup server; only receives data if you turn sync on
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email [email protected].