Privacy Policy

Moolah (“Moolah”, “we”, “us”) is a personal finance web application at https://moolah.joelucas.dev. The personal information controller for this service is Joe Lucas. For privacy requests, email support@joelucas.dev.

This Privacy Policy explains what we collect, why we collect it, how we store and share it, and the choices you have. It applies to the website, API, and related services that make up Moolah.

Moolah is a manual ledger. You create accounts and enter transactions yourself. We do not connect to bank APIs, do not ask for banking passwords, and cannot move money, charge cards, or make payments on your behalf.

Moolah is not a bank, e-money issuer, investment adviser, or licensed financial adviser. Nothing in the product is financial advice.

We collect only what is needed to run your account and the ledger features you use:

• Account credentials: email address and a hashed password (we store a one-way hash, not your plain password).
• Profile and preference data: display name, preferred currency, language, appearance settings, and similar UI preferences.
• Ledger data you enter: profiles (ledgers), accounts, transactions, categories, tags, budgets, goals, debts, receivables, installments, loans, recurring items, notes, templates, and attachments you upload (such as receipt images or PDFs).
• Session data: authentication cookies or tokens so you stay signed in securely.
• Support communications: content you send us by email when you contact us.
• Technical logs: limited server and security logs (for example timestamps, request paths, and error codes) used to operate and protect the service. We do not intentionally log ledger amounts or notes in application analytics.

Sensitive financial details you type into the ledger (for example account names, notes, and related free-text fields) are stored so the product can show them back to you. Selected fields are encrypted at rest with an application encryption key in addition to database access controls.

When Google Sign-In (or another Google OAuth flow) is enabled for Moolah, and you choose to use it, we receive basic account information from Google that you authorize—typically your Google account email address and name, and sometimes a profile image URL. We use that information only to create or sign you into your Moolah account and to communicate about the service.

We do not use Google user data for advertising. We do not sell Google user data. Access to Google user data is limited to providing or improving user-facing features of the sign-in experience. If Google Sign-In is not offered in your build of the product, this section does not apply until it is.

Google’s own use of your information is governed by Google’s Privacy Policy. You can manage Google account permissions in your Google Account settings.

Moolah may use privacy-oriented product analytics (currently Google Analytics 4 with Consent Mode) to understand which public and in-app routes people use. Analytics starts with storage denied until you allow it in the consent banner.

When analytics is allowed, we send page routes with record identifiers stripped (for example account or transaction IDs are redacted). We do not send balances, transaction amounts, account names, notes, or other ledger contents to analytics.

Essential cookies or similar storage are used for sign-in sessions and to remember your analytics choice. Declining analytics does not block you from using the ledger.

• Provide, maintain, and secure your account and ledger.
• Sync your data across devices when you are signed in.
• Export or import backups you request in Settings.
• Improve reliability, fix bugs, and prevent abuse.
• Respond to your support or privacy requests.
• Comply with law and enforce our Terms of Service.

Quick-log / natural-language drafting in Moolah uses local rules on our servers. It does not send your text to a third-party cloud large language model for that feature.

We do not sell your personal information. We share data only with processors that help us run the service, under contracts that limit their use to providing those services, for example:

• Hosting and database providers that store application data and encrypted backups.
• Email or transactional infrastructure if used for account messages.
• Analytics providers when you have consented to analytics.
• Google, only if you choose Google Sign-In, as described above.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or transfer of the service—subject to appropriate protections.

We keep your account and ledger data while your account is active. Operational database backups may retain copies for a limited period for disaster recovery. When you delete ledger data in the product, it is removed from the live database subject to those backup windows.

You can export your ledger from Settings → Data. You can empty or remove individual ledgers in Settings → Ledgers. Full account deletion is available by emailing support@joelucas.dev from the address on your account; we will verify ownership and delete or anonymize personal data except where we must retain limited records for security, dispute, or legal reasons.

We use industry-standard measures appropriate to a small personal finance app: encrypted transport (HTTPS), hashed passwords, session controls, field-level encryption for selected ledger fields, access controls, and rate limiting. No method of transmission or storage is perfectly secure. You are responsible for choosing a strong password and keeping your devices and email account secure.

Depending on applicable law (including the Philippine Data Privacy Act of 2012 where it applies), you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. To exercise these rights, email support@joelucas.dev. You may also update much of your account data directly in Settings.

Moolah is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will take appropriate steps.

Servers and processors may be located outside your country (including outside the Philippines). By using Moolah, you understand that your information may be processed in those locations with safeguards appropriate to the service.

We may update this Privacy Policy as the product or law changes. We will post the updated policy on this page and revise the effective date. Material changes may also be called out in the product or by email when appropriate.

Privacy questions and data requests: support@joelucas.dev.

Related: Terms of Service.