Contents
1.Who we are and what this covers
MyMoniesTracker is run by Visval Solutions LLC, a Texas limited liability company doing business as My Monies Tracker (“we”, “us”). This policy explains what we collect when you use mymoniestracker.com and the MyMoniesTracker app (the “Service”), why, who receives it, and the choices you have. It does not cover other companies' sites or services — such as your bank, Plaid, Stripe or a perk provider — which have their own policies.
The short version: we collect what the Service needs to work, we never sell your data, we show no ads, and you can delete your account at any time (a few records are kept for set periods — section 7).
Contact for anything in this policy: [email protected] · 5900 Balcones Drive, Ste 100, Austin, TX 78731.
2.What we collect
We collect the kinds of information below. We never see or store your bank username or password — you enter those with Plaid, not with us.
| Kind | What | How we get it |
|---|---|---|
| Account | Name, email address, multi-factor settings, invite code used, plan, settings and preferences. Sign-in is handled by Amazon Cognito, which stores your password in hashed form | You, when you sign up and use Settings |
| Financial | Account names, types and the last digits of account numbers; balances; transactions, including merchant and payee names and merchant locations as your bank reports them; holdings and liabilities (Pro); property addresses and estimated values (Pro); budgets, goals, bills, categories, notes and hidden-account settings; data you import by CSV | Your banks through Plaid; RentCast for property estimates; what you enter or import |
| Connection | Plaid connection identifiers and the encrypted access tokens that let us retrieve your bank data | Plaid, when you connect a bank |
| AI features | Your Ask questions, and the Insights reports and Ask answers generated for you | You and the Service, only if you turn these features on |
| Billing | Name, email, billing address, plan, subscription and invoice history, and card brand, last four digits and expiry date. Full card numbers go to Stripe and never reach us | Stripe, when you subscribe |
| Usage and security | Sign-in times, IP address, device and browser type, pages and features used, errors, security events | Automatically, when you use the Service |
| Communications | Emails you send us, including support and early-access requests; your email preferences; and, if you were invited, the email address the invite was sent to | You |
We do not collect your device's location, contacts or photos, or anything from other apps on your device; bank transactions may include a merchant's city or address. On the Explore plan with no bank linked, we hold your account, usage and security information, what you enter or import, and anything kept from earlier use — such as disconnected bank history, reports, communications and billing records.
Sensitive information. Some state laws treat your sign-in credentials and the tokens that give access to your financial accounts as sensitive. We use them only to provide the Service, never to infer characteristics about you.
Cookies and similar technologies. The app uses first-party cookies that keep you signed in and protect your session. Cloudflare, our network provider, may set security cookies (such as __cf_bm or cf_clearance) to block bots and attacks, and adds two scripts to our public website: one hides email addresses from spam bots, and Cloudflare Web Analytics counts page views and measures page speed. Web Analytics sets no cookies, does not fingerprint your device and does not track you across other websites; we see only aggregate totals. We use no analytics or advertising cookies and no third-party trackers, our website fonts are served from our own site, and our emails contain no open or click tracking. Two steps happen on our providers' own pages, under their own policies: payment pages hosted by Stripe, which use Stripe's cookies and device signals to prevent fraud, and Plaid Link, which opens when you connect a bank.
3.How we use it
We use your information for the purposes below. We will not use it for a materially different purpose without asking you first.
| Use | Examples | Data involved |
|---|---|---|
| Run your account | Sign-in, multi-factor, invite codes, settings | Account, usage |
| Show your finances | Balances, net worth, spending, budgets, bills, alerts, trends, exports | Financial, connection |
| Insights and Ask (optional, off by default) | A monthly (Basic) or weekly (Pro) report, and answers to questions you type, generated by Claude (Anthropic). We send automatically a financial summary — spending by category, budget and bill status, balances by account type, net-worth totals, trends, and business (merchant) names as reported for your transactions. Payments to individuals appear only as “transfer to a person” with the amount. We build it to exclude account numbers, bank logins, your name and email, the names of people you pay, the names you give your bills, and accounts you hide. Your Ask question goes as you wrote it, so anything identifying you type in goes with it | Financial summary, your Ask text |
| Financial literacy | Learn tracks and your Score, computed from your own data inside the Service. Your Score is for you only and is not used to make decisions about you | Financial |
| Billing | Charge your plan, send receipts and renewal reminders, handle failed payments and refunds | Billing, account |
| Communications | Security, account and billing notices, including renewal and price-change notices; product news and perk offers only if you opt in | Account, communications |
| Support, security and reliability | Answering your messages (using them and the account records needed to answer), detecting abuse and fraud, diagnosing errors and incidents, audit logs, backups | Account, usage and security, communications; financial only as needed to resolve your issue |
| Legal and safety | Complying with law and lawful requests, enforcing our Terms, handling disputes and chargebacks | As needed |
| Improve the Service and offer new products | Usage analytics, product research, and designing new features and products for our customers. Computed from usage records and used or shared only in aggregated or de-identified form: we take reasonable measures so it cannot reasonably be linked to you or your device, we commit not to re-identify it, and we require the same of anyone who receives it. Where identifiable information is needed for research (a customer interview, a usability session) we ask you first | Aggregated or de-identified |
How Anthropic handles Insights and Ask data. Anthropic processes this information under the commercial terms and data-processing agreement applicable to our integration, which do not permit it to train models on our data. Standard API inputs and outputs are generally deleted within 30 days, subject to the exceptions in Anthropic's retention policy, including legal requirements, safety enforcement and feature-specific storage. Turning Insights or Ask off stops new submissions; reports and answers already generated stay in your account until you delete them.
4.What we never do
No ads. We never sell your data. Perks are opt-in and never targeted.
- We do not sell your personal or financial information. “Sell” means sharing it for money or other valuable consideration, as US state privacy laws use the term; disclosures to providers acting on our behalf are not sales.
- We do not share it for cross-context behavioral advertising or targeted advertising, we run no ads and no ad trackers, and we do not use profiling to make decisions that produce legal or similarly significant effects about you.
- We do not sell or give it to marketers, data brokers, lenders or insurers for their own use. Any future feature that would send your information to a partner — for example, to show you a credit score — will be off until you turn it on, and we will tell you who receives what first.
- Perks are extras (such as a free course) offered to everyone on a plan who opts in. Your financial data is never used to choose who sees an offer. We tell you if we earn money from a perk or if it is our own product — for example, a personal-finance course by our founder on Udemy. Redeeming a perk on another site is governed by that site's privacy policy.
- We do not use your personal or financial information to train AI models, and our AI provider may not train on it.
- Providers processing personal information on our behalf are subject to contractual restrictions appropriate to their role and applicable law; Plaid and Stripe also process certain information independently, as described in their privacy policies. Each provider is listed in section 5.
If we are acquired or our assets are transferred, including in a bankruptcy, your information may go to the new owner, who must honor this policy for information collected under it. Any materially different use will require your consent. MyMoniesTracker is a business of Visval Solutions LLC, which also runs other, unrelated businesses; we do not use or share your personal information for any of them, and aggregated or de-identified information from MyMoniesTracker is used only for MyMoniesTracker.
6.Security
We protect your information with the measures below. We update these measures as our systems change, keeping protection appropriate to the sensitivity of your information.
- Bank access tokens are encrypted with keys managed in AWS Key Management Service, and only the systems that need them can decrypt them.
- Data is encrypted in transit and at rest; backups are encrypted and stored in two US AWS regions. Emails we send leave out full account numbers and keep balances out of subject lines.
- Sign-in requires a password and a second factor; sensitive actions ask you to re-verify.
- Each user's data is separated by database access controls designed to prevent one user from reading another's.
- We log administrative actions and keep those logs for 400 days.
- Our code is regularly scanned for known vulnerabilities and reviewed before release.
- Administrative access is limited to authorized personnel, through a separate sign-in, for support, security, maintenance and compliance, and is logged.
No system is perfectly secure. If a security breach involving your personal information occurs, we will give the notices the law requires, to you and to regulators, within the time it requires — by email and, where needed, in the app or on our website — and we may also tell you where notice is not required. Notice may be delayed where law enforcement asks or where needed to secure our systems.
7.Retention and deletion
We keep your data while your account is open. When you delete your account, we remove it from our active production systems within 7 days, except the records below, each kept only for the period shown.
| Data | Kept for | Then |
|---|---|---|
| Your account content in our active production systems | While your account is open | Deleted within 7 days of account deletion, except the records below |
| Bank connections at Plaid | While connected | Removal request sent to Plaid (item removal) when you disconnect a bank or delete your account; it completes on Plaid's systems, and Plaid retains data under its own policy |
| Encrypted backups | 30 days, rolling | Expire automatically. If a backup is restored for disaster recovery, deletion records are reapplied before restored content becomes available through the Service |
| Deletion marker (account and provider identifiers and dates only — no financial data, no email) | 400 days | Prevents a deleted account reappearing after a restore |
| Billing records (name, email, invoices) | 7 years under our records policy (tax and accounting) | Deleted; Stripe keeps its own records under its own policy |
| Audit and security logs (actor, action, target identifiers; no financial data) | 400 days | Deleted |
| Application logs (no financial data) | 30 days | Deleted |
| Support emails | Up to 2 years after your last message | Deleted |
| Copies held by providers (Stripe, Anthropic, RentCast, Cloudflare, IONOS) | Under each provider's policy (Anthropic: generally 30 days — section 3) | Deleted by the provider |
| Data under a legal hold or court order | Until the obligation ends | Deleted |
You can delete your account yourself from Settings. When you confirm, we disable sign-in, send removal requests to Plaid and a cancellation request to Stripe, stop new AI submissions, and stop routine service and marketing emails; necessary deletion confirmations, security communications and legally required notices may still be sent. Identifiers in the retained records above can still be personal information; we protect them and never use them for any other purpose.
Disconnecting a single bank disables scheduled retrieval for it and sends Plaid a request to remove the connection. You choose at that moment whether to keep that bank's history in your account or delete it (deleted from active systems within 7 days, backups expiring within 30 days). Summaries are recomputed without that bank; Insights reports and Ask answers already generated stay until you delete them. When a paid plan ends or you move to a lower plan — by downgrade, cancellation or failed payment — banks above the new plan's limit are disconnected (all of them on Explore); their history stays, marked disconnected, unless you chose in Settings to delete it.
We may close a free Explore account after 12 months of inactivity, after an email warning. The same steps and schedule apply when we close an account.
8.Your rights and choices
You control your data. Most of these work from Settings; the rest take one email to [email protected]. We respond within 45 days, or sooner where applicable law requires; if we need more time we may extend once by up to 45 days and will tell you why. To protect your account, we confirm requests from your account email or after you sign in. Someone you authorize in writing may make a request for you; we may ask you to confirm it.
| Right | How |
|---|---|
| See and export your data | Settings → Export: a CSV of your accounts and transactions (hidden accounts included), or your full account as an encrypted file; or ask us |
| Correct it | Edit budgets, goals, bills, categories and notes in the app; account details in Settings |
| Delete it | Settings → Delete account, or email us (section 7 lists the limited records retained) |
| Disconnect a bank | Settings → Connections → Remove; stops future retrieval and sends Plaid a request to remove the connection; you choose whether to keep or delete that bank's history |
| Turn Insights or Ask off | Settings → Insights; nothing further is sent to Anthropic |
| Stop emails | Product news and perk emails are opt-in and have an unsubscribe link; alert and report emails can be turned off in Settings; security, account and billing notices continue while your account is open |
| Opt out of sale, sharing, targeted advertising or profiling | Nothing to opt out of — we do not sell or share your information or use it for targeted advertising. We analyze your financial information only to provide the features you request, and do not use profiling to make decisions that produce legal or similarly significant effects about you |
| Appeal | If we decline a request, reply “Appeal” within 60 days. We will review it again and answer in writing within 60 days, or sooner where applicable law requires, with our reasons. If we still decline, you may complain to your state attorney general (in Texas, through the Attorney General's online consumer complaint form) |
Some state privacy laws give their residents these rights. We offer them to every user, whether or not a law requires it, and we do not discriminate against you for using them.
Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal as an opt-out request, although there is nothing to opt out of. We do not track you across other websites over time and do not let other companies do so through the Service, so we treat a Do Not Track signal the same as no signal.
9.Children, changes, contact
Children. The Service is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
Changes. We may update this policy as the Service grows. For a change that reduces your rights or expands how we use information, we email you at least 30 days before it takes effect and show a notice in the app; you can delete your account before then if you disagree. We will not use information already collected in a materially different way without your consent. Small clarifications take effect when posted. The date and version at the top identify the current policy; previous versions are available on request.
Contact. Visval Solutions LLC dba My Monies Tracker · 5900 Balcones Drive, Ste 100, Austin, TX 78731 · [email protected]
10.Financial privacy notice
Federal law gives consumers the right to know how financial companies collect, share and protect their financial information.
| What we collect | The information in section 2 — from you, from your banks through Plaid, and from your use of the Service |
|---|---|
| How we share it | We do not disclose nonpublic personal information about current or former customers to anyone outside MyMoniesTracker except: to providers that perform services for us under contracts that limit their use of it; as needed to provide and service your account and the features you request; with your consent or at your direction; and as otherwise permitted or required by law. We do not share it with affiliated companies for any purpose, and do not share it for anyone's marketing |
| Your choices | Because we share only in these ways, there is nothing to opt out of |
| How we protect it | Section 6 |