Privacy Policy

Effective October 25, 2026

The short version

Monthbee reads your receipts and expense notes so it can sort your spending. That is the only thing we use your data for.
No ads, no tracking, no analytics SDKs. We don't sell or share your data for advertising.
Your data lives on our server in Germany. Receipt files are encrypted.
To read a receipt, we send it to an AI model provider (Anthropic or OpenAI). They process it for us and don't use it to train their models.
You can delete any receipt or expense in the app, and you can delete your whole account in the app at any time.

1. Who we are

Monthbee (the iOS and Android app and monthbee.com) is built and run by an independent developer, referred to here as "the Monthbee developer", "we" or "us". We are the data controller for the personal data described here.

Questions or requests: f.trukhan@gmail.com.

2. What we collect

Your account

Sign in with Apple: a user ID from Apple, and the email address and name Apple shares the first time you sign in. If you choose "Hide My Email", we only get Apple's relay address. We may also keep an encrypted sign-in token from Apple, used only to cancel Monthbee's Apple sign-in link when you delete your account.
Sign in with Google: Google shares your Google account ID, email address and name (the basic "openid", "email" and "profile" permissions). We keep the account ID, the email address and the name. We don't get or keep access to your Google account or any Google data beyond that.
Sign-in session: we keep only a hashed copy of your session token. Sessions expire after 180 days without use, and signing out ends the session.
Settings: your main currency.

What you add

Receipts: photos, screenshots and PDF files you scan, choose or share to Monthbee.
What we read from them: store name and address, date and time, items and prices, totals, taxes and tips, currency, payment method, and the last 4 digits of a card if they're printed.
Online receipts: when you share or paste a link, the app opens the page on your phone and saves the link, the page's final address, its text, up to 6 screenshots, and a PDF if the link points to one. Our server never opens the link itself.
Quick entries: the phrase you type or dictate (for example "coffee 4.50 with my Wise card"), and the amount, merchant, date, payment method, account or card and payee read from it.
Your corrections: when you change a category, we save a rule like "store → category" for your account.
Bank and card statements (coming soon): the files you import and the transactions read from them. Statements can include account numbers and other details your bank prints.

Context from your phone

Photo time and country: for each receipt photo, the app sends the time the photo was taken and the country it was taken in, as a two-letter code. The country is worked out on your phone from the photo's location. Exact coordinates never leave your phone: a photo with location data is re-saved without it before upload.
For quick entries: your phone's local date, time zone and the currency of your phone's region. We use them to understand "yesterday" or an amount with no currency. We don't store them.
Monthbee does not ask for location permission and does not use your device's location.

Voice

Dictation uses Apple's speech recognition. It runs on your phone when the language is installed for it; otherwise Apple processes the audio under Apple's privacy policy. Only the text reaches Monthbee. We never receive or store audio.

Technical data

Our web server logs IP addresses, requested pages and the browser or app version for security. These logs are deleted after 14 days.
For each AI model call we log the model, number of tokens, cost, duration and any error type, linked to your account. These records never include receipt content.

What we don't collect

No advertising IDs, no analytics or crash-reporting SDKs, no contacts, and no bank or card login passwords. We don't connect to your bank.

3. How we use it

To read your receipts and entries and sort them into categories and months, convert currencies and show your totals. This is the service you asked for (performance of a contract).
To keep the service secure and working, stop abuse and keep AI costs in check (legitimate interests).
To reply when you contact us.

We don't use your data for advertising or profiling, and we don't make decisions about you that have legal or similar effects.

We share data only with these providers, only for what Monthbee needs, and they may use it only to provide their service to us.

Provider	What for	What they get
Hetzner Online (Germany)	Hosting our server and database	Everything stored in Monthbee, on servers in Nuremberg, Germany
Anthropic (USA)	Reading receipts (Claude models)	Receipt images and PDFs, online receipt text or screenshots, photo time and country
OpenAI (USA)	Double-checking receipts, "Read more accurately", reading quick entries (GPT models)	The same receipt content as above; the quick-entry phrase and your local date
Apple	Sign in with Apple, voice dictation, App Store purchases	See Apple's privacy policy
Google	Sign in with Google; Google Play purchases (coming soon)	See Google's privacy policy
Cloudflare	DNS and delivery for monthbee.com	Website visitors' IP addresses and requests

AI providers: files are sent inside each request, not stored with the provider. We ask OpenAI not to store responses. Under their API terms, neither OpenAI nor Anthropic trains its models on this data, and each may keep it for a limited time (generally up to 30 days) for safety and abuse monitoring.
Notifications (coming soon): if you turn them on, we'll store your device's push token and send notifications through Expo's push service and Apple Push Notification service or Firebase Cloud Messaging. Notification text may mention a receipt or a total.
Subscriptions: Monthbee Plus is free during the beta. When paid plans launch, Apple or Google handle payment; we never see your card details. We'll receive your subscription status from them.

We may also disclose data if the law requires it, or to protect the rights and safety of users or the service. If Monthbee is ever transferred to a new owner, this policy will continue to apply to your data.

5. Where it's stored and how it's protected

Monthbee's server and PostgreSQL database run on a server in Nuremberg, Germany.
Receipt files (photos, PDFs, page text and screenshots) are encrypted with AES-256-GCM before they're written to disk. The key is kept separately from the database.
The app talks to the server only over HTTPS. Files are shown through links that expire within minutes.
On your phone, your sign-in token is kept in the iOS Keychain.
When we send data to Anthropic or OpenAI in the USA, we rely on their data processing terms, including the EU Standard Contractual Clauses.

No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it, as the law requires.

6. How long we keep it

Receipts, entries and rules: until you delete them or your account. Receipts are kept because they're useful for warranties and returns.
Statement files (coming soon): the original files will be deleted 90 days after they're read by default, and you'll be able to change that. The transactions read from them stay until you delete them.
Web server logs: 14 days.
AI call records (model, tokens, cost): kept for cost accounting. When you delete a receipt or your account, they're no longer linked to it, and they contain no receipt content.

7. Deleting your data

A receipt: open it and tap "Delete receipt". This deletes the receipt, its items and its files from our server.
An expense: delete it from its row or its edit screen.
Your whole account, in the app: go to Settings → Delete account and confirm. This immediately and permanently deletes your account, your receipts with their items and files, your expenses, rules and settings from our server, and clears what Monthbee keeps on that phone, including photos still waiting to upload. All your sessions end. If you signed in with Apple, we also ask Apple to cancel Monthbee's sign-in link. AI call records stay for cost accounting with no link to you (see section 6).
Your whole account, by email: if you can't use the app, email f.trukhan@gmail.com from the address on your account (or tell us your Apple relay address, shown in your iPhone settings under Sign in with Apple). We'll delete your account and everything in it within 30 days and confirm by email.

Deleting your account doesn't cancel a subscription bought through the App Store or Google Play. Cancel it in your Apple or Google account subscriptions.

If you signed in with Apple or Google, you can also remove Monthbee from your Apple or Google account settings. That doesn't delete your Monthbee data by itself.

8. Your rights

Wherever you live, you can ask us to:

show you a copy of your data or give it to you in a portable format;
correct it;
delete it;
stop or limit some processing.

Email f.trukhan@gmail.com. We'll reply within 30 days. If you're in the EU, EEA or UK, you can also complain to your data protection authority.

We don't sell your personal information or share it for cross-context behavioral advertising, as those terms are defined in California law.

9. Children

Monthbee isn't meant for children under 13, or under the minimum age for digital services where you live. We don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.

10. This website

monthbee.com sets no cookies and runs no analytics or trackers. Cloudflare delivers it and our web server keeps standard logs for 14 days.

11. Changes

We'll update this policy when Monthbee changes, for example when statements or notifications launch. The date at the top shows the latest version. If a change matters for how your data is used, we'll tell you in the app before it applies.

12. Contact

The Monthbee developer · f.trukhan@gmail.com