GoodMoney
Get the app
Sign-in is optional

Privacy Policy

GoodMoney keeps your numbers on the device by default. Plus is optional: if you sign in, a copy can sync to GoodMoney’s servers so it is there on another iPhone or iPad.

Effective 4 September 2026 · Applies to the GoodMoney app on iOS and iPadOS, and to this website.

In short

On this device, unless you choose Plus.

By default, transactions, goals, wallets, and preferences stay on your iPhone or iPad, encrypted in the iOS Keychain. Sign-in is optional: Apple or Google, no GoodMoney password.

If you sign in and subscribe to Plus, a copy can sync to our servers — including photos you attach — so it is there on another device. Profile → Delete All My Data wipes this device, and asks again to delete the account copy if you are signed in.

Local by defaultNothing leaves the phone unless you sign in
Plus is optionalBackup, sharing, export, and scans
Encrypted at restKeychain on the device
You can wipe itDelete All My Data in Profile

Who we are

GoodMoney

This policy is for the GoodMoney app (bundle identifier com.money.goodmoney) and the public website that describes it. “We” means the developer of GoodMoney.

GoodMoney is published on the App Store by BRAVESET LTD. The listing is the place to confirm who operates the app. This page is the privacy policy for the product as it works today.

On your device

What GoodMoney stores locally

You can use GoodMoney without an account. In that case, the following stay on that iPhone or iPad:

  • Money you log — income and expenses, names, categories, dates, amounts, photos you attach, and whether a transaction repeats.
  • Wallets — names, emojis, and who belongs to each one.
  • Goals and budgets — names, dates, targets, and category limits.
  • Preferences — currency, language, appearance, notification toggle, and similar settings.

Amounts in the interface are marked privacy-sensitive so iOS can hide them in the app switcher and in screenshots.

Optional

Sign-in and Plus

You can sign in with Apple or Google. We do not create a GoodMoney password. Apple or Google confirm who you are, and we keep an account so Plus features can work across devices.

When you sign in we store your name, email if the provider shares one, a profile photo URL if there is one, and which provider you used. Plus subscription status comes from the App Store via RevenueCat.

If you use Plus, a copy of your ledger can sync to GoodMoney’s servers: transactions, goals, wallets, categories, and preferences. Photos you attach are stored so they are there on another device. A shared wallet link lets someone else log into that wallet after they enter a name.

Scanning a receipt sends that image to our servers so it can be read. We count how many free scans you have used.

Not collected

What we do not take

  • No GoodMoney password. Sign-in is Apple or Google.
  • No bank connections, card numbers, or open-banking feeds. You type amounts yourself, or scan a receipt.
  • No advertising identifier, no tracking pixels, and no sale of personal data to brokers.
  • No precise location, contacts, or microphone.
  • Camera and photo library only if you scan a receipt or attach a picture. We do not browse your library in the background.

If you turn notifications on, iOS may share a device token so we can send reminders. That is off until you allow it.

Encryption

How it’s stored

On the device, the app’s data is held as an encrypted blob in the iOS Keychain, not as a plain file in Files. It is available after the first unlock.

If you sign in with Plus, a copy also lives on GoodMoney’s servers so it can sync. Receipt images are sent to Google’s Gemini to extract the totals, then discarded after the read. Transaction photos are stored with our file host (Bunny.net).

GoodMoney does not turn on iCloud Keychain sync for the on-device vault. If you use iCloud Backup, Apple’s backup may include Keychain data under Apple’s encryption. That is Apple’s backup, not a GoodMoney upload.

Providers

Apple, Google, and the rest

Installing or buying Plus is a transaction with Apple, under Apple’s Privacy Policy. Sign in with Apple is also Apple’s.

Sign in with Google is Google’s, under Google’s Privacy Policy. Receipt reading uses Google Gemini. Product analytics in the app use Google Analytics for Firebase — app opens and similar events, not your ledger, and not for ads.

Plus purchases are checked with RevenueCat. Photos are stored with Bunny.net. Each of those companies processes only what they need to provide that service.

This site

The GoodMoney website

This site is the public page for the app, and the API the app talks to when you sign in.

Shared wallet links and export download links live here. Anyone with a share link can log a transaction after entering a name. Export links expire.

If you use the light/dark control, the choice is saved in your browser’s localStorage. Pages load the Inter typeface from Google Fonts. We do not use advertising cookies on this site.

Your control

How to delete your data

  • On the device. Open Profile, choose Delete All My Data, and confirm. That wipes the on-device vault and photos, then returns you to setup.
  • Sign out. Signing out asks whether to keep the data on this device or delete it. Keeping it leaves transactions, goals, wallets, and recurring data on the phone. Deleting it wipes that copy and returns you to setup. The account copy stays until you use Delete All My Data.
  • Signed in. You’ll be asked a second time whether to also delete from your account. Confirming removes the synced copy, attached photos, shared wallet links, and the account itself, then returns you to setup signed out.
  • By deleting the app. iOS removes the app’s Keychain items. A reinstall starts empty on that device. A cloud copy remains until you delete it while signed in, using Delete All My Data.
  • Plus. Buying Plus is an App Store subscription. Deleting your GoodMoney data does not cancel it. Manage or cancel Plus in iOS Settings → Apple ID → Subscriptions.
  • Backups. iCloud Backup and computer backups are Apple’s. We cannot reach them.
  • This website. Clear this site’s data in your browser to remove the saved theme.

Children

Not directed at children

GoodMoney is a personal finance tool. It is not directed at children under 13 (or the equivalent age in your country), and we do not knowingly collect personal information from children. If you believe a child has used the app, delete it on that device and, if they were signed in, use Delete All My Data in Profile to wipe the account.

Updates

Changes to this policy

If the app starts collecting new kinds of data, this policy will change before that behavior ships, and the effective date at the top will move. Using a newer version of GoodMoney after an update means that version’s policy applies.