Privacy Policy

My Bookkeeper Moana (ABN 97 859 295 171) ("we", "us", "our") provides the Money with Moana budgeting tool ("the App"). This policy explains what personal information we collect, how we use it, and the choices and rights you have. It's written to meet our obligations under Australia's Privacy Act 1988 (Cth) and the Australian Privacy Principles, and New Zealand's Privacy Act 2020.

By creating an account or using the App, you agree to the collection and use of information in line with this policy.

1. Information we collect

We collect only what's needed to run the App:

• Account information: the email address you sign up with. Your password is handled directly by our authentication provider (Google Firebase) and is never visible to us in plain text.
• Financial information you choose to enter: income amounts and frequency, bills, one-off spending, categories, savings preferences, and pay frequency. This is entered voluntarily by you to use the budgeting features.
• Bank-statement information you choose to import: PDF and CSV statements are read and analysed locally in your browser. The original statement is not uploaded to our servers. Only the categorised information you review and choose to import is saved to your account.
• Marketing and waitlist information: your email address and whether you've opted in to receive product updates, including joining the Money with Moana Boost waitlist.

We do not collect bank account numbers, card details, or government identifiers, and the App does not connect to your bank.

2. How we use your information

• To create and secure your account, and let you log in.
• To store and display your own budgeting information back to you, privately.
• To operate, maintain, and improve the App.
• To send you marketing or product updates, only if you've explicitly opted in. You can withdraw this consent at any time using the unsubscribe link in any email, or by contacting us.

We do not use your financial data to profile you, sell it, or share it with advertisers.

3. Where your information is stored

Your account and financial data are stored using Google Firebase (Authentication and Firestore), a cloud infrastructure provider. We use authentication and access controls designed to restrict your saved budgeting information to your logged-in account.

The App is hosted by Cloudflare. Cloudflare may process limited technical information needed to securely deliver the App, such as your IP address, browser information, request details, and security or performance logs.

Data may be processed or stored on servers located outside Australia or New Zealand as part of Google's global infrastructure. Google is contractually bound to appropriate data protection standards as a service provider.

4. Sharing your information

We do not sell your personal information. We only share information with:

• Service providers who help us operate the App, currently Google Firebase for authentication and data storage, and Cloudflare for hosting, security, and delivery of the App.
• Authorities, if required by law.

5. Data security

We take reasonable technical steps to protect your information, including encrypted connections (HTTPS) between your device and our servers, and account-level access restrictions on stored data. No online service can guarantee absolute security, and you're responsible for keeping your own password confidential.

6. Your rights

Under Australian and New Zealand privacy law, you have the right to:

• Ask what personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your account and associated data.
• Withdraw marketing consent at any time.

To exercise any of these rights, contact us using the details below. We will respond within a reasonable timeframe.

7. Data retention

We retain your information for as long as your account is active. If you ask us to delete your account, we will delete your personal and financial data from our systems, except where we're required to retain records by law.

8. Children's privacy

The App is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes means you accept the revised policy.

10. Complaints

If you have a concern about how we've handled your personal information, please contact us first so we can try to resolve it. If you're not satisfied, you may lodge a complaint with:

• The Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
• The New Zealand Office of the Privacy Commissioner — privacy.org.nz

11. Contact us