In short
Your numbers never leave the phone.
GoodMoney does not operate a backend for your finances. We do not ask you to create an account. We do not sell data, show ads, or run third-party analytics inside the app.
Transactions, goals, budgets, and any profile details you add are written to the iOS Keychain on that device. Delete the app — or use Delete Everything in Profile — and they are gone.
No accountNothing to sign in to
No GoodMoney serversWe don’t receive your ledger
Encrypted at restKeychain, not a readable file
You can wipe itIn the app, or by uninstalling
Who we are
GoodMoney
This policy is for the GoodMoney app (bundle identifier com.money.goodmoney) and the public website that describes it. “We” means the developer of GoodMoney.
If a company name, support email, or App Store listing is published later, that listing is the place to confirm who operates the app. This page is the privacy policy for the product as it works today.
On your device
What GoodMoney stores
Only what you enter, plus a few preferences the app needs to look the way you left it. All of the following live on the device, not on a GoodMoney server:
- Money you log — income and expenses, names, categories, dates, amounts, and whether a transaction repeats.
- Setup answers — income, housing, recurring bills, debts, and goals you add during the 60-second setup (or skip).
- Goals and budgets — names, emojis, dates, target amounts, “deduct from income,” and any category limits the app keeps for those goals.
- Categories you create — custom labels on top of the built-in list.
- Profile fields you fill in — name, nickname, and email, if you add them. They are optional and stay on the device. We do not use an email address to message you or to create an account.
- Preferences — currency, language, light/dark/system appearance, notification toggle, and recently used emojis.
- Review prompt counters — how many qualifying sessions and self-logged expenses have happened, so the in-app “rate GoodMoney?” request is only asked once. Those counts never leave the device as a report to us.
Amounts in the interface are marked privacy-sensitive so iOS can hide them in the app switcher, in screenshots you take while recording, and in similar system previews.
Not collected
What we do not take
- No sign-in, Apple ID login to GoodMoney, or password stored for our service — there is no GoodMoney service to log into.
- No bank connections, card numbers, or open-banking feeds. You type amounts yourself.
- No advertising identifier, no tracking pixels, no crash-reporting or analytics SDK in the app.
- No sale or sharing of personal data with data brokers.
- No precise location, contacts, photos, or microphone access for the product as it exists today.
A notification preference can be stored on the device. GoodMoney does not run a push server, so we cannot send you remote notifications from our side.
Encryption
How it’s stored
Everything the app persists is held as one encrypted blob in the iOS Keychain (a Data Protection keychain item), not as a plain JSON file you could open in Files. The item is set to be available after the first unlock so the app can keep working after the device locks.
Older builds briefly used UserDefaults or a file under Application Support. If any of that is still on a device, GoodMoney imports it into the Keychain once and deletes the unencrypted copy.
GoodMoney does not turn on iCloud Keychain sync for this item, and it does not upload your ledger to iCloud Drive by itself. If you use iCloud Backup or an encrypted computer backup, iOS may include Keychain data in that backup under Apple’s backup encryption. That is Apple’s backup system, not a GoodMoney cloud.
Apple
The App Store and the system
Installing GoodMoney from the App Store is a transaction with Apple, under Apple’s Privacy Policy. Apple may process purchase, download, and device information as they describe.
After you have used the app for a while, GoodMoney may ask iOS to show Apple’s standard review dialog (StoreKit). Apple decides whether that dialog appears. We do not receive the text of a review through that prompt; a public review you post on the App Store is governed by Apple.
The app is sandboxed. A network-client entitlement exists so the process can talk to Apple’s services (for example StoreKit). It is not used to send your transactions to us.
This site
The GoodMoney website
This marketing site is static HTML. It does not have a GoodMoney account system.
If you use the light/dark control, the choice is saved in your browser’s localStorage under a theme key so the next visit can match. That stays in that browser until you clear site data.
Pages load the Inter typeface from Google Fonts. Google may see technical data about that request (such as IP address) under their own policies. We do not use Google Analytics or advertising cookies on this site.
Your control
How to delete your data
- In the app. Open Profile, choose Run Setup Again, and confirm Delete Everything. That wipes the on-device vault. The app behaves as if you just downloaded it.
- By deleting the app. iOS removes the app’s Keychain items with the app. A reinstall starts empty.
- Backups. If you need a copy gone from iCloud Backup or a computer backup, you have to manage those backups in Apple’s settings. We cannot reach them.
- This website. Clear this site’s data in your browser to remove the saved theme.
Because we do not hold a copy of your ledger, we cannot export or erase “your account” on a server — there isn’t one. Whatever is on the device is the only copy we know about.
Children
Not directed at children
GoodMoney is a personal finance tool. It is not directed at children under 13 (or the equivalent age in your country), and we do not knowingly collect personal information from children. If you believe a child has stored personal details in the app, delete the app or use Delete Everything on that device.
Updates
Changes to this policy
If the app starts sending data off the device — for example a future optional backup — this policy will change before that behavior ships, and the effective date at the top will move. Using a newer version of GoodMoney after an update means that version’s policy applies.
Contact
Questions
For privacy questions about GoodMoney, use the support or developer contact on the app’s App Store listing once it is live. We do not need your transaction history to answer how the app stores data — that is described on this page.
Back to GoodMoney
