Monaza

Privacy Policy

Last updated: September 28, 2026

This policy explains how Tumaio, Inc. collects, uses and protects your data when you use Monaza.

In short

1. Who we are

Monaza is a product of Tumaio, Inc., a Delaware corporation. Tumaio is responsible for your personal data.

2. Data we collect

  • Account data: name, email and profile photo, if you add one.
  • Financial data you enter or import: accounts, balances, transactions, bills, budgets, investments and loans.
  • Preferences: language, currency, time zone and app settings.
  • Technical data: device type, OS and app version, and crash reports.
  • Usage data: which features you use, never amounts or anything you type.

Monaza doesn't connect to your bank and never asks for your bank credentials.

3. How we use your data

  • To provide the service and calculate your summaries.
  • To send the notifications and emails you've turned on.
  • To improve the app and fix bugs.
  • To respond to support requests.
  • To meet legal obligations.

We process data based on our contract with you, our legitimate interest in improving and protecting the service, your consent, or legal obligations.

We don't sell your data or use it for advertising.

4. Third-party services

We use trusted providers to run Monaza. Each one receives only the data it needs to do its job.

Clerk
Purpose
Authentication
Location
US
Neon
Purpose
Database
Location
UK
Railway
Purpose
Hosting
Location
Netherlands and US
PostHog
Purpose
Product analytics
Location
US
Sentry
Purpose
Crash reporting
Location
US
Resend
Purpose
Email
Location
US
Expo
Purpose
Notifications
Location
US

Market prices and exchange rates, including BODIVA quotes, come from public sources. We don't share your data with them.

We may disclose data when required by law.

5. Security

Your data is encrypted in transit and at rest, on our servers and on your phone. You can lock the app with Face ID or fingerprint. Learn more on our security page.

6. Retention and deletion

We keep your data while your account is active. When you delete your account, we delete your data within 30 days, except where the law requires us to keep it. See how to delete your account.

7. Your rights

You can access, correct and delete your data, request a copy, and object to certain processing. Most of this can be done in the app. For anything else, email hello@getmonaza.com. We respond within 30 days.

If you're in Angola, the EU, the UK or Brazil, you have the rights set out in Law 22/11, the GDPR or the LGPD, including the right to complain to your data protection authority.

8. International transfers

Tumaio is based in the United States, and our providers may process data outside your country. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Children

Monaza is not intended for anyone under 16.

10. Changes

If we make material changes to this policy, we'll let you know in the app or by email.

11. Contact

Privacy questions: hello@getmonaza.com.

Other documents

Monaza is a product of Tumaio, Inc., a Delaware corporation.

hello@getmonaza.com← Monaza