moneYco1. Who we are
moneYco (the “app”) is developed and operated by Drag & Code Tunisia (“we”, “us”). This policy explains what information we handle when you use the moneYco mobile app and this website, why we handle it, and the choices you have.
Contact for privacy questions: support@drag-and-code-tunisia.com.
2. Information we collect
Information you give us
- Account data: first name, last name, email address and password (the password is stored hashed by our authentication provider; we never see it in plain text). If you sign in with Google, we receive your name, email address and profile picture from Google.
- Profile data: display name, avatar photo, preferred language and currency.
- Expense data: personal and shared expenses, amounts, categories, notes, budgets, groups, group members, invitations and settlements.
- Photos: receipt images, group covers and avatars that you choose to upload or capture with the camera.
- Support messages you send us by email.
Information collected automatically
- Device and diagnostics: app version, device model and OS version, language, crash and performance information.
- Advertising data: the free app shows ads served by Google AdMob, which may collect your Advertising ID and ad interaction data, subject to your consent choices.
Guest mode
If you use moneYco as a guest, your data stays on your device and is not sent to our servers.
3. How we use information
- Create and secure your account, and send verification and password-reset codes by email.
- Provide the core service: tracking expenses, splitting costs in groups, calculating balances and syncing between devices.
- Read receipts you scan, to pre-fill the amount, merchant and date.
- Show ads that keep the app free, and respect your consent choices.
- Prevent abuse, keep the service secure, fix bugs and improve the app.
- Respond to your requests and comply with legal obligations.
We do not sell your personal information and we do not use your expense data for advertising profiles.
4. Legal bases (EEA / UK)
We process data to perform our contract with you (providing the app), with your consent (for example personalised ads and the camera or photo permissions), and for our legitimate interests in security, fraud prevention and product improvement, balanced against your rights.
5. Who we share information with
We share information only with service providers that process it on our behalf, and with other members of groups you join (they see the group's expenses, your display name and avatar).
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage and server functions | Account, profile, expense data, uploaded images |
| Brevo | Sending verification and password-reset emails | Email address, one-time code |
| Mistral AI | Reading receipts you choose to scan (OCR) | The receipt image you submit |
| Google (AdMob, UMP consent, Sign-In) | Ads, consent management and optional Google sign-in | Advertising ID, device and ad interaction data, Google account basics |
We may also disclose information if required by law, or to protect the rights, safety and security of our users and the service.
6. App permissions
- Camera: to scan receipts and group invite QR codes. Images are only processed when you take or pick them.
- Photos / media picker: to attach receipts and set a profile picture. We only access the images you select.
- Internet access: to sync data and send authentication emails.
- Advertising ID: used by Google AdMob for ads, according to your consent settings.
- Vibration: haptic feedback.
moneYco does not request your location, contacts, microphone or SMS.
7. Retention and deletion
We keep your data for as long as your account is active. You can delete your data at any time:
- Reset data: Settings → Data → Reset all expenses removes your personal expenses, budgets, notifications and settlements.
- Delete account: Settings → Data → Delete account permanently deletes your account, profile, expenses, budgets, notifications and uploaded images. Groups you own are transferred to another active member, or deleted if no other member remains. Expenses you paid in shared groups are removed.
You can also request deletion without the app: see Delete your account. We complete deletion promptly, and backups are purged within 30 days. Limited data may be retained where the law requires it.
8. Your rights
Depending on where you live (for example the EEA, UK, Tunisia or California), you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Email support@drag-and-code-tunisia.com and we will respond within 30 days. You can change ad consent at any time under Settings → Ad privacy choices (shown where required).
9. Advertising
The free app shows ads from Google AdMob. In the EEA, UK and other regions where required, we ask for your consent through Google's consent form before personalised ads are shown. You can choose non-personalised ads, and you can reset your Advertising ID in your Android settings (Settings → Privacy → Ads).
10. Security
We use encrypted connections (HTTPS/TLS), hashed passwords and database access rules so that people can only read data they are entitled to. No system is perfectly secure, so please use a strong, unique password.
11. Children
moneYco is not directed to children under 13 (or the higher minimum age in your country) and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.
12. International transfers
Our providers may process data in countries outside your own, including outside the EEA. Where required, we rely on appropriate safeguards such as standard contractual clauses.
13. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date and, for material changes, notify you in the app.
14. Contact
Drag & Code Tunisia
Email: support@drag-and-code-tunisia.com
Website: drag-and-code-tunisia.com/en