Money Planner Privacy Policy
Money Planner Privacy Policy
Last updated: 10 October 2026 (version 3.1)
Money Planner ("Money Planner: Budget Manager" on the App Store) is developed by SOBESOFT WEB İLETİŞİM BİLGİ HİZMETLERİ TİCARET LİMİTED ŞİRKETİ ("Sobesoft", "we"). This policy explains which data the iOS and Android versions of the app use and how.
In short
- You can use the app without an account. Then your income, expense, account, category and budget records and your receipts are stored only on your phone; we cannot see them.
- If you want, you can sign in with Apple, Google or email. Signing in is needed for cloud sync and shared accounts. You choose where your data lives: "On this phone" or "In the cloud".
- If you choose "In the cloud", your records and receipt photos are stored on Google Firebase servers, linked to your account, so they appear on your other phones.
- You can delete your account from inside the app; your cloud data is deleted too.
- The free version shows ads. For ads, Google AdMob processes some technical information about your device. Pro has no ads.
- We do not sell your data, use it for advertising or share it with others (other than the service providers below and the shared accounts you set up).
Data that stays on your phone
Your accounts, transactions, notes, categories, budgets, recurring transactions, assets and settings are stored in the app's storage on your phone. If your phone's iCloud / Google backup is on, this storage is included in that backup, which is Apple's or Google's responsibility.
The app lock code is kept only as a one-way hash in the phone's secure storage (iOS Keychain / Android Keystore). Face ID / Touch ID / fingerprint checks are done entirely by the operating system; we have no access to your biometric data.
Receipt photos you attach to transactions are downsized before saving, and photo metadata, including location, is removed. The camera and photo library are accessed only when you add a receipt and only if you allow it. When you permanently delete a transaction, its photos are deleted too.
Backup files you make and export files (CSV, Excel, PDF) are sent only when you share them, to the place or app you choose.
Sign-in and account
If you sign in, Google Firebase Authentication stores your email address, your sign-in method (Apple, Google, email), your name and your profile photo (with Sign in with Apple, Apple asks whether to share your name and email; "Hide My Email" works). With email sign-in your password never reaches us; Firebase stores it hashed. If you add a profile photo, it is kept in Firebase Storage.
Signing in also links the Pro you bought to your account: instead of a random app ID, your Firebase user ID (a random ID, not your email) is sent to RevenueCat. That is how Pro comes back when you sign in on a new phone.
Deleting your account: Settings → My account → Delete account. Your cloud records, receipt photos, profile photo and sign-in account are deleted. To remove the copy on your phone, delete the app. Shared accounts you created are closed, and your membership in other people's shared accounts ends.
Cloud sync ("In the cloud")
If you choose "In the cloud", your accounts, transactions, categories, budgets, recurring transactions, notes, assets and receipt photos are stored on Google Firebase (Cloud Firestore and Cloud Storage) in a space linked to your sign-in account. Only you can access this space; access rules are enforced on the server. Data is encrypted in transit (TLS) and encrypted at rest by Google.
Cloud sync is a Pro feature. You can switch back to "On this phone"; the cloud copy is then deleted.
Shared accounts
If you share an account with someone, that account's transactions, categories and receipts are kept in a shared space with the people you invite. Members see each other's name (the name on their profile) and the records in that account; they cannot see your other accounts. An invite code is valid for 7 days and can be used once. The owner can remove a member or stop sharing; the data in the shared space is then deleted.
Voice entry and Siri
Voice entry uses your phone's speech recognition service (Apple on iOS, Google on Android). Depending on your device, your speech may be converted to text on these companies' servers, under their policies. The audio never reaches us and is not stored; only the resulting text is used on your phone to fill in the transaction. The Siri shortcut also runs on your phone.
Third-party services
| Service | Purpose | Data processed |
|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Storage) | Sign-in, cloud sync, shared accounts, uploading receipt photos | If you sign in: email, name, profile photo, sign-in method, user ID. If you choose "In the cloud": your financial records and receipt photos. For former Pocket Manager Pro users, also the old anonymous ID and old cloud accounts (moved to the phone once). |
| Google AdMob (free version only) | Showing banner ads | Device and app information, an app-scoped identifier (IDFV / Android advertising ID), approximate location from your IP address, ad interactions. On iOS no tracking permission (ATT) is requested and the advertising identifier (IDFA) is not used. In the EU/UK you are asked for consent first; you can change your choice in Settings → Ad privacy options. |
| RevenueCat and Apple App Store / Google Play | Buying and restoring Pro, linking Pro to your account | Purchase information (product, date, country, price) and an app user ID (your Firebase user ID if you are signed in). Your payment details stay with Apple / Google; they never reach us or RevenueCat. |
| Apple / Google speech recognition | Voice entry | The sentence you speak (only when you start voice entry). |
| Central Bank of the Republic of Türkiye | Fetching daily exchange rates | A public rates file is downloaded; the server sees your IP address. No personal data is sent. |
| Google Fonts (only when needed) | Downloading fonts for Arabic, Bengali, Hindi or Chinese PDF reports | A file download request; Google's server sees your IP address. |
Each service's own privacy policy applies: Google (policies.google.com/privacy), Firebase (firebase.google.com/support/privacy), RevenueCat (revenuecat.com/privacy), Apple (apple.com/legal/privacy).
International transfers
Google Firebase and RevenueCat servers may be outside your country (mainly in the US and the EU). When you sign in or choose "In the cloud", this transfer happens to provide the service to you and at your explicit choice. If you use the app without an account and with "On this phone", your financial records are not sent abroad.
Retention
Your cloud data is kept while your account is open; it is deleted when you delete your account or switch back to "On this phone". Deleted transactions stay in "Recently deleted" in the app for 30 days, then are deleted permanently. Invite codes expire after 7 days at the latest.
Former cloud data (Pocket Manager)
In the old app, buying Pro created an anonymous record in the cloud (Firebase Realtime Database), and "cloud" and "shared" accounts were kept there. The new version moves these accounts to your phone once and does not change the old cloud record. To have that record deleted, write to [email protected]; including the text from Settings → Migration info helps us find it.
Children
The app is not directed at children under 13 and does not knowingly collect data from children.
Your rights (KVKK and GDPR)
Under Turkey's Personal Data Protection Law No. 6698 and (if you are in the EU) the GDPR, you have the right to access, correct, delete and port your data and to object to its processing. You can view, edit and export your data and delete your account from inside the app. For other requests: [email protected].
Changes
If this policy changes, the current version is published on this page and the "Last updated" date changes. For important changes we also let you know in the app.
Contact
SOBESOFT WEB İLETİŞİM BİLGİ HİZMETLERİ TİCARET LİMİTED ŞİRKETİ Email: [email protected] · Web: https://sobesoft.com.tr