Privacy PolicyPRIVACY

Who is responsible

The app and this website are operated by ANDREEV ALEKSANDR VLADIMIR, IE, an individual entrepreneur registered in the Republic of Armenia (registration number 286.1586729), address: 40 Sayat-Nova Ave, Kentron district, Yerevan 0001, Armenia. In this policy “we” and “us” mean this entrepreneur. Questions about privacy: iammeteros@gmail.com.

Using the app without an account

You can use Money Hamster without creating an account. Everything you enter — accounts, balances, transactions, transfers, categories, labels, budgets and notes — is then stored only on your iPhone, and the app sends nothing to us.

Using the app with an account

An account is optional and exists to sync your data between your devices. When you create one or sign in, we store on our server:

• Your email address. If you use Sign in with Apple, we store the identifier Apple gives our app for you and the email address Apple shares with us — which may be a private relay address if you chose “Hide My Email”. We also keep the token Apple issues for the sign-in, so that we can revoke it when you delete your account.
• Your password, if you set one, only as a one-way bcrypt hash. We never see or store it in plain text.
• Session tokens. On your iPhone they are kept in the iOS Keychain; on our server only their hashes are stored.
• The financial records you enter: accounts and their balances, transactions and transfers, categories, labels, budgets and notes.

We use this data only to provide the app: to keep your records in sync and to restore them when you sign in on another device. It is linked to your account, because it is your account’s content. We do not use it for advertising or profiling, we do not track you, and we do not sell it. All traffic between the app and our server is encrypted (HTTPS).

Microphone and voice entry

• Voice entry asks for access to the microphone. Speech is turned into text on your iPhone by the speech recognition built into iOS. Audio is never recorded, stored or sent to us or to anyone else.
• The recognised text is turned into a draft entry on your iPhone, using Apple’s on-device model where it is available. You review the draft before saving it; once saved, it is an ordinary entry and syncs like any other if you are signed in.
• Cloud parsing. Where the app offers cloud parsing — for example, for a language the on-device model does not support — and you are signed in, the recognised text of the phrase (never the audio) is sent to our server together with the names of your categories and accounts. Our server asks an AI language model provider to turn the phrase into draft entries and returns them to the app. Our server does not store or log the phrase or the model’s answer; the provider processes it only to produce that answer for us.
• If you add entries through Siri or Shortcuts, Siri processes your request under Apple’s privacy policy, and the app receives only the resulting text.

Emails

We email you only to send a password reset code when you ask for one. We do not send newsletters or marketing emails.

Who else processes data

We share personal data only with service providers that help us run the app, and only for that purpose:

• the hosting provider of the server that stores account data;
• an email delivery provider, for password reset codes;
• an AI language model provider, for cloud parsing of voice phrases as described above;
• Apple, for Sign in with Apple, the App Store and TestFlight. If you test a beta through TestFlight, Apple shares with us the information TestFlight collects under Apple’s terms, such as the email you were invited with, crash reports and the feedback you choose to send.

We do not sell personal data or share it with anyone else, unless the law requires us to.

What we don’t do

• No advertising and no analytics or crash-reporting SDKs in the app.
• No tracking across other companies’ apps and websites.
• No connection to your bank: the app never asks for bank logins and does not import statements.

How long we keep data, and deleting it

• We keep account data for as long as the account exists.
• To delete your account, open your profile in the app and choose Delete Account. This permanently deletes the account and all data synced to it from our server, and revokes Sign in with Apple for our app if you used it.
• You can also ask us to delete your account by email: iammeteros@gmail.com.
• Data stored only on your iPhone stays under your control: you can delete it in the app or by deleting the app.

Security

Traffic is encrypted with HTTPS, passwords are stored only as bcrypt hashes, session tokens only as hashes, and the app keeps its tokens in the iOS Keychain. No system is perfectly secure, but we limit what we collect to what the app needs to work.

Your rights

You can access, correct and delete your data. Most of it you can change directly in the app; for anything else, or to object to how we process your data, email iammeteros@gmail.com. We aim to respond within 30 days.

Children

The app is not directed at children under 13, and we do not knowingly collect personal data from them.

This website

This site is a set of static pages: no cookies, no analytics, no third-party scripts or fonts. The web server may keep standard technical logs (IP address, time, requested page, browser) to operate and protect the site.

Changes to this policy

We will publish any changes on this page and update the effective date at the top.

Contact

ANDREEV ALEKSANDR VLADIMIR, IE · 40 Sayat-Nova Ave, Kentron district, Yerevan 0001, Armenia · iammeteros@gmail.com