Privacy policy
Monthpot is a household budget planner. You trust it with your household's money, so this page explains plainly what we collect, why, who else sees it, and how you stay in control.
1. Who we are
Monthpot is run by Affintech LLC, registered at Sharjah Media City (Shams) Free Zone, Sharjah, United Arab Emirates. In this policy, "we" and "us" mean Affintech LLC.
Affintech LLC is the controller of the personal data described here. That means we decide why and how it is used, and we are responsible for it.
For anything about privacy, email us at info@affintech.com.
2. The short version
- We collect what you enter into Monthpot and what we need to sign you in and bill you.
- We use it to run the app for your household. We do not sell it, and we do not use it for advertising.
- Only the members of your household see your household's data.
- We use no analytics, advertising or tracking cookies.
- AI statement reading sends a statement to an AI provider only after your household agrees to it. You can always import without AI.
- You can see, export, correct and delete your data.
3. What we collect
Your account
Your sign-in identifier from our sign-in provider, your email address and display name, your currency and theme preferences, and your referral code.
Your household and its members
The household's name, currencies and plan. Billing identifiers and dates for its subscription. Who belongs to the household and their role (Owner, Admin or Member). Invitations, including the email address of the person invited.
The finances you enter
Income, expenses, recurring bills, categories, budgets, goals, loans, projects, money owed to you, and exchange rates.
Cards and statements
- For each card: the last 4 digits, a nickname, the issuer, limits and dues. We never ask for or store full card numbers.
- If you choose to save a password for a protected PDF statement, we store it encrypted.
- When you import a statement, we keep a fingerprint (a hash) of the file so the same statement is not imported twice. We do not store the statement file itself.
- The transactions read from the statement, once you confirm them.
Loan agreements
If you use signed loan agreements: the terms and each version of them, the instalments (including cheque numbers), and bank details for payment (account holder, IBAN, SWIFT code and bank). For each signature we record the signer's email, typed name, drawn signature image, and an audit trail of events such as when the agreement was sent, viewed and signed.
Each party to an agreement is named by name and email: a member of your household, or anyone else you send it to. We keep that name and email with the agreement, so it reads the same if either party later deletes their account. Someone outside your household who is sent an agreement gets an email with a signing link. To read and sign it they sign in with that email address, which our sign-in provider has verified; they do not join your household and see nothing else of it.
Billing and referrals
Your household's billing history (plan, amounts, dates and status) and referrals made with your referral code. We do not receive full card numbers. See Payments.
Emails we send
A copy of each email we send you (recipient, subject and content) while it waits to be delivered and for a short time after.
Technical data
Our server keeps logs of requests and errors. These can include your IP address, the address requested, the time, and your browser's user agent. We use them to keep the service running and secure.
4. How we use it, and our legal bases
Data protection laws such as the GDPR require a legal basis for each use of personal data. Here is ours.
| What we do | Legal basis |
|---|---|
| Create your account, sign you in, run your household's plan, budgets, cards, loans, goals and agreements | Contract: we need it to provide the service you signed up for |
| Send invitations, agreement signing requests, due reminders and other service emails | Contract |
| Bill your household's subscription (through Paddle) | Contract |
| Read imported statements with AI | Consent, given once per household before first use |
| Keep the service secure, prevent abuse and fix errors (server logs, sign-in protection) | Legitimate interests: running a safe, working service |
| Track referrals so the right person gets credit | Legitimate interests |
| Keep records that tax, accounting or other laws require | Legal obligation |
We do not use your data for advertising, we do not sell it, and we do not share it with anyone for their own marketing. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
5. AI statement reading
Monthpot can read a card or bank statement for you and list its transactions. When AI reading is on and you import a statement, we send it to an AI provider to read:
- Anthropic (Claude) receives the whole PDF, or
- OpenAI or Microsoft Azure OpenAI receives the statement's text,
depending on which provider the service is set up to use.
A statement can contain your name, address, card or account details and your transactions. Before AI reading is used for the first time, someone in your household must agree to it. You can import statements without AI at any time.
We process the statement file in memory and do not store it. We store only the transactions you confirm and the file's fingerprint.
6. Who in your household sees what
Monthpot is built for shared money. Everyone who belongs to a household can see that household's data. Owners and Admins can also invite and remove members. Invite only people you want to see your household's finances.
The parties to a loan agreement can see that agreement, its versions, instalments, signatures and audit trail, even if they are not in your household, including someone outside any household who was sent it by email. They see only that agreement.
8. Payments
Our orders are processed by our online reseller Paddle.com. Paddle is the merchant of record for all our orders. Paddle collects and processes your payment details, handles billing questions, and deals with sales tax.
We never see or store your full card number. We receive from Paddle what we need to manage your subscription: identifiers for your customer record and subscription, the plan, amounts, dates and status.
Paddle uses your data under its own privacy notice, at paddle.com/legal/privacy.
10. International transfers
Monthpot is used by households around the world, and our providers may process data in the United States and other countries. These countries may not have the same data protection laws as yours.
Where the law requires it, we rely on recognised safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details.
11. How long we keep data
- Account and household data: for as long as your account and household exist.
- After you delete: we delete the data from the live database. Copies in our daily backups are gone within 14 days, when those backups expire.
- Statement files: never stored. They are processed in memory only.
- Copies of emails we send: 30 days after sending.
- Server logs: a limited time, then overwritten.
- Records the law requires: as long as the law requires. Paddle keeps payment records as merchant of record.
Signed loan agreements involve other people. If you delete your account, agreements you are a party to keep your name and email as they were recorded there, because they are the other party's record too; your account is no longer linked to them. If you delete your household, the other party may keep their own copy of an agreement they signed.
12. Your rights
Depending on where you live, you have the right to:
- Access and take your data with you. Use "Download all household data" in Settings, or ask us.
- Correct it. Edit your details and your household's data in the app, including in Settings.
- Delete it. Delete your household or your account in Settings, or ask us. You can also leave a household at any time.
- Withdraw consent. Stop using AI statement reading and import without it. This does not affect reading done before.
- Object to or restrict how we use your data where we rely on legitimate interests.
- Complain to a data protection authority. See Contact and complaints.
To use any of these rights, email info@affintech.com. We may need to confirm who you are first. We will reply within one month. We do not charge for this.
13. Security
We protect your data with:
- encrypted connections (HTTPS) for all traffic;
- sign-in through WorkOS, so we never handle your password;
- checks that let each person see only the households they belong to;
- encryption of saved statement passwords;
- daily backups, so data can be recovered after a failure.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
14. Children
Monthpot is not for children under 16. We do not knowingly collect data from them. If you believe a child under 16 has given us personal data, email us and we will delete it.
15. Changes to this policy
We may update this policy as Monthpot changes. We will update the date at the top. If a change matters, for example a new provider receiving your data, we will tell you by email or in the app before it takes effect.
16. Contact and complaints
Affintech LLC
Sharjah Media City (Shams) Free Zone
Sharjah, United Arab Emirates
Email: info@affintech.com
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the data protection authority where you live or work, or where you think the problem happened. In the European Union, you can find yours at edpb.europa.eu. In the United Kingdom, it is the Information Commissioner's Office at ico.org.uk.