Fill in before sharing. This notice describes how Money Track 4.0 actually works. Replace the text in [BRACKETS] and check the items marked ⚑ Owner to verify. Money Track is a private, free tool for a small group of friends. This notice is written to be accurate and plain, not to claim legal compliance. If the app ever becomes public, paid or much larger, have it reviewed by a Philippine privacy lawyer.
Privacy Notice
In short
- Money Track is a free, private budget calendar run by [YOUR NAME] for a few invited friends. It is not a business.
- Your entries are stored in a database under your own account and sync across your devices.
- Other users can't see your entries: the database itself blocks it.
- The owner manages the database and could technically view stored entries through the database dashboard. The owner promises not to, and the app never does.
- No ads, no analytics, no tracking, no selling or sharing of your data.
- You can export, correct and delete your data, and delete your account, yourself, at any time.
1. Who runs it
[YOUR FULL NAME], contact: [EMAIL OR MESSENGER]. There is no company and no Data Protection Officer.
2. What is stored, and why
| Information | Why | Where |
|---|---|---|
| Your email address | To sign in and to know who was invited | Supabase (sign-in system), and the invite list |
| Your password | To sign in. It is stored only as a one-way scrambled “hash” by Supabase; nobody, including the owner, can read it | Supabase |
| Your entries: date, money added or spent, amount, currency, category, optional note (≤ 80 characters) | The budget calendar | Supabase database, linked to your account |
| Settings: language, display currency, last backup date | To remember your choices on every device | Supabase database |
| Debts: what each debt is for, amount owed, currency, deadline, optional “owed to” and notes, date added | Debt tracking: remaining balance, deadlines, reminders inside the app | Supabase database, linked to your account |
| Debt payments: amount, date, optional note, and whether it was also recorded as a budget expense | Payment history and remaining balance | Supabase database, linked to your account |
| Sign-in records kept by Supabase (time of sign-in, IP address, browser) | Security of the sign-in system | Supabase, under its own policies ⚑ Owner to verify retention |
| Website request logs (IP address, browser, time) | Delivering the website, blocking abuse | Cloudflare, under its own policies ⚑ Owner to verify retention |
“Owed to” may be another person’s name. Write only what you need to recognise the debt (a first name or nickname is enough); it stays private to your account like everything else.
Please don’t type bank or card numbers, passwords or ID numbers into notes. The app doesn’t need them, and never asks for your name, phone, location, contacts or government IDs.
3. Who can see your entries
- You, on any device where you sign in.
- Not other users. Every request to the database carries your sign-in token, and the database’s Row Level Security rules only return or change rows that belong to that token’s account. This is enforced by the database, not by the website, and was tested before launch.
- The owner, technically. As the administrator of the Supabase project, the owner can open the database dashboard, where these rules don’t apply. The owner commits not to look at anyone’s entries, and to tell everyone before any change to how data is stored.
- Service providers (section 5) run the systems and are technically able to access stored data under their own terms.
4. What stays on your device
| Item | When | Removed |
|---|---|---|
| Sign-in session (tokens that keep you signed in) | Always | When you sign out. On a shared device (“This is my own device” unticked) when you close the tab |
| A copy of your entries and debts + changes waiting to sync | Only on your own device, for offline use | When you sign out or delete your account |
| Your settings | Only on your own device | When you sign out |
| Exchange rates; the app’s own files (offline use) | Always; no personal data | Replaced on updates |
Money Track sets no cookies and uses no trackers. Everything above is needed for the app to work (signing in, syncing, working offline), so there is no cookie banner. If anything optional is ever added, this notice will change first and you’ll be asked before it runs.
5. Service providers (data may leave the Philippines)
- Supabase: database and sign-in. Region: [e.g. Southeast Asia (Singapore)]. supabase.com/privacy
- Cloudflare: hosts the website files. cloudflare.com/privacypolicy
- ExchangeRate-API (open.er-api.com) and jsDelivr: your browser downloads public exchange rates from them. They see your IP address but receive none of your entries.
- [Only if password-reset emails are switched on: Google (Gmail) sends those emails.]
⚑ Owner to verify each provider’s current terms and server locations.
6. How long it’s kept
- Entries and settings: until you delete them, delete your account, or the owner closes Money Track (with notice, see the Terms).
- Deleting an entry or a debt, “Delete all my entries and debts” or “Delete my account” removes the data from the live database immediately.
- Database backups: [Free plan: Supabase keeps no backups you can restore from. / Pro plan: daily backups are kept for 7 days, so deleted data disappears from backups within 7 days.] ⚑ Owner to verify
- Backup and spreadsheet files you download are yours. Deleting data in the app doesn’t delete those files. They aren’t encrypted, so keep them somewhere private.
7. Your choices and rights
You can, at any time and without asking anyone:
- See and export everything: Settings → Download backup (JSON, includes debts), Export spreadsheet (CSV) or Export debts (CSV).
- Correct entries: tap the pencil icon on an entry.
- Delete entries one by one, all at once (Settings → Delete all my entries), or your whole account (Settings → Delete my account).
- Change your password (Settings → Change password).
For anything else, or to ask what’s held about you, contact [CONTACT]. Under the Philippine Data Privacy Act of 2012 you may also complain to the National Privacy Commission (privacy.gov.ph).
8. Security
- Every request goes over HTTPS. The website only runs its own code (no third-party scripts) and may only contact the database and the two exchange-rate services.
- Database rules make each account’s rows reachable only by that account. The database also rejects invalid data (amounts over 18 digits, unknown currencies, and so on).
- Only invited email addresses can create an account.
- If something goes wrong (for example someone gets access who shouldn’t), the owner will tell everyone affected as soon as possible, explain what happened and what to do, and report it to the National Privacy Commission if the law requires it.
9. Changes
If how Money Track handles data changes, this notice is updated first, with a new date, and everyone is told.
← Back to Money Track