Privacy Policy

Monfeel · operated by Hypetige · Last updated 15 October 2026

Monfeel is a personal money journal. You log expenses and income by voice, typing, receipt photos, or by connecting your Gmail so payment receipts are drafted for you. This policy explains what we collect, why, and the choices you have.

1. Data we collect

Account: your email address, nickname, and a salted hash of your password (we never store the password itself).
Your entries: transactions, wallets, categories, budgets, goals, subscriptions and settings you create.
Receipts and shared screenshots you upload, used only to read the amount, merchant and date.
Gmail (only if you connect it): see section 3.
Technical: a session cookie to keep you signed in, and short-lived security logs (IP address for rate limiting).

2. How we use it

Only to provide Monfeel to you: show your balances and reports, draft transactions for your review, send reminders you turned on, and keep your account secure. We do not sell your data, we do not show ads, and we do not use your data to train AI models.

3. Gmail data

If you choose Connect Gmail, Monfeel requests the read-only scope https://www.googleapis.com/auth/gmail.readonly. We use it only to:

search your inbox for payment and receipt emails from banks, e-wallets and stores (for example messages containing "Rp" or "IDR");
read the amount, merchant, date and payment method of those emails;
create draft transactions that you review and approve before they are saved.

Monfeel never sends, deletes, labels or modifies your email. Email text is processed to extract those fields and is not stored after processing; only the drafted transaction and the message ID (to avoid reading it twice) are kept. You can disconnect at any time in Settings → Connected apps, which deletes the stored access token; you can also revoke access at myaccount.google.com/permissions.

Limited Use. Monfeel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is not used for advertising, not sold, not used to train generalized AI or ML models, and not read by humans except with your explicit consent for support, for security purposes, or to comply with law.

4. Service providers

To read receipts and payment emails, the relevant text or image is sent to an AI language-model provider (through our own gateway) that processes it only to return the extracted fields. Voice and typed entries are read by Monfeel itself without AI. Gmail, Google Sheets and Google Calendar connections are handled through Composio, an authorized connection provider. Data is stored on our server and encrypted backups are kept in Cloudflare R2. Providers act on our instructions and may not use your data for their own purposes.

5. Storage and security

Each account's data lives in its own separate database. Connections use HTTPS, passwords are hashed with PBKDF2, sign-in is rate-limited, and daily backups are encrypted. No system is perfectly secure, but we work to protect your data.

6. Retention and deletion

We keep your data while your account is active. You can export your transactions (CSV) or delete all data in Settings → Data. To delete your account entirely, go to Settings → Profile → Delete account. Your account, all its data and any shared books you own are deleted immediately, and Gmail, Google Sheets and Google Calendar access is revoked. Copies inside our encrypted backups are removed automatically within 30 days.

7. Children

Monfeel is not intended for children under 13.

8. Changes and contact

We will post changes on this page. Questions: [email protected].