Privacy policy.

Who this covers

Monkeep is operated by Hanabi. This policy covers the Monkeep mobile app and this website. Monkeep does not connect to your bank. It only knows what you give it.

Questions or requests about your data: deydevelops@gmail.com.

What we collect

• Account. You sign in with Google or Apple, where available. We receive the account details that provider shares with us. Monkeep has no password of its own.
• Financial content. Bank and card statements you upload (PDF, CSV or XLSX), and the accounts, transactions, categories, notes, budgets, rules and corrections you create or approve. This is the most sensitive data we hold.
• Receipts and voice. Receipt photos you choose to scan, and typed or dictated text you give the assistant.
• Purchase status. Whether you have an active subscription, supplied by RevenueCat and the app stores. We do not see your card details.
• Service records. Limited metadata needed to run and protect the service, such as action timestamps, import status, usage counts and security events. In-app notices may summarize your own financial records.
• Waitlist. If you join the waitlist on this site, your email address and phone platform, used to tell you when Monkeep opens.

Why we use it

We use this information to organize and synchronize your records, calculate budgets and summaries, remember your corrections, process requests you approve, verify subscription access, respond to support requests, and enforce security and usage limits. If waitlist sign-ups are open, we use the address you submit for Monkeep availability messages; you can ask us to remove it.

Where your data lives

On your phone. The app keeps an offline copy of your records and a queue of manual entries made without a connection, so you can read and add things offline. Sign-in credentials use the phone's secure storage.

On our servers. Your records are stored in our backend (Convex) and tied to your account. Every private read and write checks that the record belongs to you.

In a separate extraction service. Statements are read by a sandboxed service on a separate server. It extracts text from digital PDFs, recognizes text in scanned pages, and reads spreadsheet cells. It returns source evidence to the backend; optional external AI interpretation is described below.

Statement files

An uploaded file is a temporary working copy. If you never confirm the import, it expires automatically (currently after 24 hours). When you confirm an import, the original file is deleted unless you turn on “Keep statement files” in Privacy settings, which is off by default. The transactions you confirm stay in your account until you delete them.

If a statement is password-protected, the password is used to open it. It is not saved with your records and is never sent to the AI provider. It does pass through our hosted services in order to reach the extraction service, and we do not promise those providers keep no operational logs.

AI features

AI is optional and asks for your consent first. We send requests directly to Nebius, our AI provider. Nothing is sent to it unless you agree for that upload or request.

• Statements. If you allow it when uploading, content extracted from the statement may be sent to the AI model to help interpret it. Familiar CSV and spreadsheet layouts are read without AI.
• Receipts. The photos you choose are sent to the AI model to read them.
• Assistant and voice. Speech-to-text runs on your device when your phone supports it. The resulting text, or text you type, may be sent to the AI model to answer or draft an entry.

AI results are drafts. Nothing is saved to your records until you review and confirm it. Nebius processes the content sent in these requests under its service terms. Provider logging and retention may differ from the retention of records inside Monkeep. Contact us for questions about a request or the providers that process it.

Monkeep does not currently use your data or corrections to train models. Corrections and rules are remembered for your own account.

Who else handles data

We use a small set of service providers to run Monkeep: Vercel (website hosting), Convex (backend and storage), Nebius (AI, when you consent), RevenueCat with Apple and Google (subscriptions), and Apple and Google (sign-in). We send providers the information needed for their role. Hosting and other service providers may record technical data such as IP addresses, request times and errors. Data may be processed outside your country.

We do not show ads, sell your financial data, or share it for marketing. We may disclose information if the law requires it.

Notifications are in-app only. Monkeep does not send push notifications.

Security and its limits

Connections use TLS. Private data is checked against your account on every request. Our admin tools show metadata only and are not meant to show financial content.

Monkeep is not end-to-end encrypted, and it does not currently add its own application-level encryption on the server. Because our servers process your statements, the service can read that content while doing so. No system is risk-free, so protect your phone and sign-in, and tell us if you suspect a problem.

Your choices and rights

• Export. Create CSV, spreadsheet or PDF exports of your data in the app. Monkeep does not keep a copy of an export.
• Delete statement files. Remove any original files we still hold. Transactions stay.
• Delete history. Remove all transaction history, or the data from a single statement, after seeing what will change.
• Delete your account. This permanently removes your account, stored statement files, transactions and rules.

Copies in provider backups or logs may outlast a deletion for a time we cannot state exactly. You can also email us to ask for access, correction or deletion, or to withdraw a waitlist sign-up. Depending on where you live you may have further rights, and we will consider any request you make.

Changes

When this policy changes we update this page and its date. Contact Hanabi at deydevelops@gmail.com with any question.