1. The short version
We do not sell your data. We do not give it to advertisers. We hold what we need to run the app for you — your account, your entries, and enough technical detail to keep the service working — and you can export or delete it whenever you want.
The rest of this page is the detail behind that. If anything here is unclear, write to help@moneybook.ae and ask us.
2. Who we are
MoneyBook is a product of FEXO FZC LLC, a company registered in the United Arab Emirates. In data protection terms we are the controller of the personal data described here. You can reach us at help@moneybook.ae.
3. What we collect
Information you give us
| What | When |
|---|---|
| Your name and email address | When you create an account |
| Your password, stored only as a one-way hash | When you create an account |
| Your phone number | When you create an account |
| Your business name, logo, address and contact details | Optional, if you set up a business |
| Your books: entries, amounts, dates, notes, categories, payment modes, and any photos of bills you attach | As you use the app |
| Your contacts: the names, phone numbers and balances of customers, suppliers and staff you record | As you use the app |
| The names and email addresses of people you invite to your team | When you send an invitation |
Information we collect automatically
- Device and app details — device model, operating system version, app version, language and time zone. This tells us which builds to support and which translations matter.
- Usage signals — when the app is opened and for roughly how long. We use this to understand whether the product is working, not to follow you.
- Install source and app analytics — when the app is first opened it notes where it was installed from (for example one of our Google Ads campaigns, a Play Store search or our website, as reported by the app store), and counts a few steps such as sign-up and your first entry, using Google Analytics for Firebase without advertising identifiers. We use this only to see which of our own campaigns work.
- Technical logs — IP address, request times and errors, kept briefly so we can find and fix faults and detect abuse.
- Delivery records for email — whether a message we sent you arrived, bounced or was marked as spam, so we stop mailing an address that does not work.
What we deliberately do not collect
- We do not ask for, or store, your bank account or card details. MoneyBook records what you type; it does not connect to your bank.
- If you let MoneyBook read your phone's address book, the email addresses and phone numbers in it are checked with our server only to show which of your contacts already use MoneyBook. They are not saved; only a contact you pick is added.
- We do not track you across other apps or websites, and we run no advertising networks in the app.
4. Why we hold it
| Purpose | Our basis |
|---|---|
| Running the service — storing your books, syncing your devices, showing your team what they are allowed to see | Performing our contract with you |
| Sending account email — verification codes, password resets, team invitations | Performing our contract with you |
| Keeping the service secure and available — fault diagnosis, abuse prevention, backups | Our legitimate interest in a working, safe service |
| Understanding how the product is used, in aggregate | Our legitimate interest in improving it |
| Meeting legal obligations where they apply | Legal obligation |
5. What we never do
- We never sell your personal data. Not to advertisers, not to data brokers, not to anyone.
- We never share your books for marketing. Your entries, balances and contacts are not a product we offer to third parties.
- We do not use your books to train advertising or profiling systems.
- We do not put third-party advertising trackers in the app.
6. Who else sees it
A small number of service providers process data strictly on our instructions, so that the app can function:
| Type of provider | What they handle |
|---|---|
| Cloud hosting | Our servers, database and encrypted backups |
| Email delivery | Sending account email and reporting whether it arrived |
| Sign-in provider you choose | Only if you use a third-party sign-in, and only to confirm the sign-in |
| Mobile platform notification services | Delivering notifications to your device |
| App analytics | Counting app installs, sign-ups and first entries, and where installs came from (no advertising identifiers) |
Each is bound by contract to process data only on our instructions, and none of them may use it for their own purposes. We do not publish the names of our suppliers; if you need them for a legal reason, ask us and we will tell you.
Beyond that, we disclose data only where the law compels us to, or where it is necessary to protect our rights or someone's safety. If we are ever bought or merged, your data may transfer as part of the business — and this policy travels with it.
People you invite. When you add someone to your business, they see what you grant them — and what you grant is visible to them, book by book. You decide that, not us. If you invite someone by email, they learn your name and business name, because that is what the invitation says.
7. Where it is stored
Your data is stored in secure data centres operated by established cloud providers, with encrypted backups kept in more than one geographic region so a single failure cannot take them all. Our company is in the UAE, so our staff may access data from there when supporting you.
That means your information may be transferred to and stored in countries other than your own, which may have different data protection laws. Where such a transfer is subject to rules such as the UK or EU GDPR, we rely on appropriate safeguards, including standard contractual clauses with our providers, to protect it.
8. How long we keep it
- Your books and account: for as long as your account exists.
- After you delete your account: it stays recoverable for 30 days in case you change your mind, then it is purged with everything it owns and your email address is freed. Backup copies age out within a further 30 days, so nothing of yours remains anywhere 60 days after deletion.
- Anything you delete inside the app — an entry, a book, a contact, a photo — is scrubbed from our live systems 30 days after you delete it, and out of every backup within 30 days more.
- Technical logs: a short period, typically weeks, for fault-finding and security.
- Email addresses that hard-bounced: we keep a record that the address does not work, so we do not mail it again. This is a safety measure and survives account deletion.
9. Your rights
Wherever you live, you can do all of the following:
- See your data — it is in the app, and you can export your books as PDF or Excel at any time.
- Correct it — edit your profile, your entries and your contacts yourself.
- Delete it — delete individual entries, whole books, or your entire account from within the app.
- Take it elsewhere — your exports are ordinary PDF and Excel files, not a locked format.
- Object or restrict — ask us to stop a particular use of your data.
- Withdraw consent — where we relied on consent, you can take it back.
- Complain — to us first, we hope, but you may also complain to your local data protection authority.
To exercise any of these, write to help@moneybook.ae. We answer within 30 days. We may need to confirm who you are first, so that nobody else can ask for your books.
10. Security
We take security seriously and use measures appropriate to the risk, including:
- Encryption in transit (HTTPS/TLS) everywhere, including between our own systems.
- Passwords stored only as salted one-way hashes.
- Access rules enforced on our servers rather than merely hidden in the app, so a modified client cannot see another person's books.
- Encrypted, geographically separated backups, with restores tested rather than assumed.
- Internal access limited to the few people who need it to operate the service.
No online service can promise perfect security, and we will not pretend otherwise. What we can promise is that we will tell you: if a breach affects your personal data and the law requires notification, we will notify you and the relevant authority within the time the law allows.
Your part matters too — use a password you do not reuse elsewhere, turn on the app lock, and remove team members who no longer need access.
11. Children
MoneyBook is a general-purpose ledger that anyone can use, and it is not designed specifically for children. Where the law requires a parent or guardian to consent before a young person’s data is processed, that young person should use MoneyBook only with that consent. We never use anyone’s data for advertising or profiling. If you are a parent or guardian and believe your child has given us personal data without your consent, write to us and we will delete it.
12. Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects your rights, we will tell you in the app or by email before it takes effect — not quietly, after the fact.
13. Contact us
Questions, requests, or complaints about privacy:
FEXO FZC LLC
Email: help@moneybook.ae
Web: moneybook.ae
This policy is written to be read and understood rather than to be impressive. It is not legal advice, and it does not replace any rights you have under the law where you live.