Information we process
- Account and sign-in information: your username, hashed password, email address used for registration and password recovery, email verification status, and identifiers and necessary information from Google or Apple accounts you choose to link. We do not receive or store your Google, Apple, or email password.
- Financial records: ledgers, income and expenses, categories, merchants, currencies, assets, recurring transactions, splits, and notes.
- User content: receipt, invoice, and transaction-list images you choose to take or upload.
- LINE information: your linking identifier, LINE display name used to show the linked account, messages and images you send to our official account, and temporary state needed to complete commands.
- Purchase information: product, transaction, expiration, and revocation information provided by Apple, and a random identifier linking purchases to your Mony Planet account. We do not receive your full payment card details.
- Service information: synchronization times, AI quota and its source, error logs, security verification, and technical information needed to prevent duplicate operations.
How we use information
Your recovery email is used to send verification codes for registration, password changes, and email changes. Google or Apple information is used only for the sign-in method you choose to link; it does not automatically replace your recovery email. LINE linking uses a single-use code valid for 15 minutes. An email sent in LINE is not proof of identity. Other information supports bookkeeping, synchronization, queries, analysis, receipt recognition, shared ledgers, LINE commands, and abuse prevention. We do not sell personal information or use it for third-party advertising.
Local storage and cloud synchronization
New iOS transactions are saved on your device first. Once a ledger is connected to the cloud, the app attempts to sync after saving; you can also sync manually. A ledger must be synchronized before it can be used on the web or LINE. Active shared-ledger members can read synchronized content. AI recognition uses temporary high-quality images. After confirmation, cloud storage keeps a readable, zoomable version targeting approximately 500 KB, up to 800 KB, with camera and location metadata removed. LINE bookkeeping also requires cloud synchronization. Device credentials are stored in the iOS Keychain. If secure storage fails, they are not written to an ordinary data file.
AI recognition
When you choose AI receipt recognition, transaction-list recognition, text assistance, or the bookkeeping assistant, necessary images, text, and limited ledger context are sent to cloud services protected by sign-in and app verification, then processed by Google Cloud Vertex AI. You can review AI results before saving. Recognition alone does not create a transaction.
Service providers
We use Google Firebase authentication, Cloud Functions, Firestore, Cloud Storage, App Check, and hosting. Resend delivers necessary verification emails. Google and Apple provide identifiers and necessary account information when you choose to link their sign-in services, but do not provide your platform passwords. Google Cloud Vertex AI processes AI requests you submit. LY Corporation's LINE platform transmits messages for our official account. Apple App Store processes iOS subscriptions and supplies the required subscription status.
Retention and deletion
Device data remains until you delete the app or remove the data. Cloud data remains until account deletion or service-related cleanup. Recovery email and third-party sign-in identifiers are retained while the account is active and needed for sign-in, security, or support. Changing your email unlinks the old address. Email codes expire after 10 minutes; LINE linking codes expire after use or 15 minutes. Minimal records necessary for abuse prevention, security incidents, legal obligations, or disputes may be retained for a limited period, then deleted or de-identified. Unreferenced cloud images left by canceled, duplicate, failed, or deleted transactions or accounts are also removed. Account deletion removes your personal information and ledgers you created. Historical transactions in other people's shared ledgers may remain for their reconciliation, while your access is removed.
Security
Cloud operations require authentication; the production iOS app also uses App Attest. The database prevents the app from bypassing the backend to write directly. The server stores irreversible password hashes. Credentials needed for offline sign-in are stored only in the iOS Keychain. Network traffic uses HTTPS. We do not ask you to send your email, password, or six-digit email code in LINE. Only send the linking command shown by the website or signed-in app, such as 綁定 XXXX-XXXX.
Your choices
In Settings, you can change your recovery email, link Google or Apple, and obtain a LINE linking code. To unlink LINE, send 解除綁定 to the official account. You may choose not to use AI, export ledger data and PDFs, or permanently delete your account from the app's profile page. Connected ledgers may sync automatically; check the app's sync status.
Contact
For privacy or data assistance, email kai.app.support@gmail.com. You may also contact the official LINE account @202ftffb and mention Mony Planet privacy assistance.
Policy updates
We will update this page's date when our data practices change materially and notify users through the app or official LINE account when appropriate.