Family Money Privacy Policy

This policy explains what data the Family Money app for iPhone and Mac (“the app”) uses and where it goes. Family Money is made by Nanda Mochammad (“I”, “me”).

The short version: your money data is stored on your devices and in your own iCloud. I do not run a server for the app and I cannot see your data. Receipt scanning runs on your iPhone. The app has no account, no analytics, no ads and no tracking.

Data the app stores

Family Money saves what you enter:

Wallets, categories and sub-categories.
Transactions: expenses, income and transfers, with amount, date and time, category, wallet and note.
Budget plans and your chosen start day for each financial period.
Loans and their payment dates (Mac).
Receipt photos you attach or scan.
App settings, such as language, App Lock and Hide Amounts.

iCloud sync

The app syncs your data through your own private iCloud database, so your iPhone and Mac show the same numbers. iCloud is run by Apple under Apple’s privacy policy. If iCloud is not available, the app keeps working with data on the device only.

Amounts are encrypted. Before they are saved, money amounts (transactions, wallet balances, budgets and loans) are encrypted with AES-256-GCM. The key is made from a family secret. That secret is kept in your device’s Keychain and in your family’s iCloud data, so every device in the family can read the amounts. Wallet names, category names, notes and dates are not encrypted by the app. They are protected by iCloud’s own security.

You can invite a family member, for example your spouse, with an iCloud share link.

Anyone who opens the invite link can join with read and write access, so send it only to the person you mean to invite.
Once they join, they can see and edit the shared wallets and transactions, including notes.
When someone in the family adds an expense, the app can show a notification on the other devices. The notification is created by the app on the device.

Receipt scanning

When you scan a receipt, the app reads it with Apple’s Vision text recognition and Apple’s on-device Foundation Models. The photo and the text are processed on your iPhone and are not sent to me or to any AI service.

Receipt photos are saved on the device where you took or picked them. They are not uploaded to iCloud, so other family members do not receive the photos, only the transaction details.

Permissions

Camera: only when you scan a receipt.
Photos: only for the photos you pick to attach to a transaction.
Face ID or passcode: only if you turn on App Lock. The app gets a yes or no from the system and never sees your face data.
Notifications: for family spending alerts and loan payment reminders.

Data I collect

None. The app does not send your financial data or usage data to me or to any third party. It contains no analytics, advertising, crash reporting or tracking tools. It does not connect to your bank.

Importing and deleting your data

Import. On Mac, you can import a CSV export from Money Lover. The file is read on your Mac.
Reset to Factory Defaults. This permanently deletes all transactions, wallets and categories, including the copies in iCloud that your family shares, and restores the default wallet and categories. Your language and privacy settings are kept.
Delete the app. Deleting the app removes what it stored on that device, including receipt photos. Data in iCloud stays until you reset it or remove it in Settings, then your name, then iCloud, then Manage Account Storage.

Children

Family Money is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

If the way the app handles data changes, I will update this page and the effective date at the top.

Contact

Questions about this policy: hello@nandamochammad.xyz