Money Planner Privacy Policy

Updated: October 15, 2026.

1. Data controller and scope

The data controller is Timur Robertovich Galiakbarov, a self-employed individual subject to the Russian professional income tax regime, taxpayer identification number 026814203349, Ufa, Russia. Contact: timurgaliakbarov1@gmail.com. Telegram: https://t.me/timur_galiakbarov.

This policy covers https://moneyplanner.app, the Money Planner Android and iOS application, cloud backups, support and Premium purchases. Payment provisions apply to Premium purchases; renewal provisions apply only if automatic renewal is introduced. This policy is not itself consent to processing or marketing.

2. Data and purposes

Basic financial tracking does not require an account. Financial entries are stored on your device. They are transmitted to cloud storage only when you enable cloud backup yourself. When the feature is disabled, no new backups are uploaded. Disabling the feature does not itself delete previously stored cloud backups. When enabled, backup files containing your entries, amounts, categories, accounts and notes are uploaded to Yandex Object Storage in its Russian ru-central1 region. Up to 10 recent backups are retained; older backups are removed when new ones exceed that limit.

Yandex sign-in is used for cloud backups and Premium identification. We process the Yandex user identifier, login, email when supplied by Yandex, and authentication tokens to provide the requested functions. Signing in with the same Yandex account identifies the same user across Android and iOS.

For Premium transactions, we process the account identifier, contact email, order number, selected plan, amount, payment status and date, subscription period, payment-service transaction identifiers, and the permission to renew or its withdrawal. These data are used to fulfil the purchase, manage authorised renewals, issue receipts and process refunds. Payment card details and security codes are entered in the payment provider's interface; do not send them to support.

Support processes your email or Telegram profile, messages, relevant order information and attachments you choose to provide. Technical logs may contain IP addresses, request times, device and software information for operation, security and troubleshooting.

On Android, bank-notification processing requires your device permission. Operations recorded from notifications may also be included in cloud backups. The application does not ask for your online-banking password.

3. Analytics, advertising and providers

The website loads Yandex Metrica only after your separate affirmative choice. It processes cookies, IP address, device information and page interactions for site statistics. Session recording (Webvisor) is disabled. You can decline analytics or withdraw permission using “Cookie settings” in the website footer. Your choice is stored locally for up to 180 days, then requested again. Withdrawing permission stops the website tracker and removes its first-party analytics cookies. External services may retain previously received information under their own policies.

The application uses AppMetrica and Firebase Analytics for usage analytics and technical diagnostics, and Yandex Mobile Ads for advertisements in the free version. Device information, usage events, technical identifiers and advertising identifiers where allowed may be processed. Device permissions can be changed in OS settings; required legal consent is separate from those permissions.

Yandex OAuth handles sign-in, Yandex Cloud stores backups, and Robokassa and participating payment providers process available payments and refunds. Receipt services and the Russian tax authority receive legally required transaction data. Hosting, email and Telegram providers support the website and your chosen communication channel. Firebase and international communication services may process data outside Russia; applicable cross-border processing requirements must be observed.

Providers process information under their own policies. See https://yandex.ru/legal/confidential/ and https://firebase.google.com/support/privacy. Data are shared only as required for the requested function or by law. We do not sell personal data. Marketing communications require separate prior permission.

4. Legal grounds, security and retention

Data necessary for requested functions and purchases are processed to enter into and perform the agreement, comply with legal obligations, and protect legitimate rights where permitted without overriding your rights. Optional processing that requires consent uses separate consent.

Processing includes collection, storage, use, necessary disclosure, correction, blocking and deletion, through automated systems and manual support. Access is restricted and protected connections are used.

Account and subscription data are retained as needed to provide access. Backups remain until replaced within the limit, deleted following a request, or their lawful retention basis ends; Premium expiry does not itself immediately delete them. Support information is retained to resolve the request and as necessary to protect the parties' rights. Payment and tax records are retained for legally required periods. Logs and analytics are retained no longer than needed for their stated purposes. Data are deleted or anonymised when their purpose or legal basis ends, within applicable statutory deadlines.

5. Your rights and contact

You may request information about processing, correction, blocking or deletion where applicable, withdraw consent, request cessation of processing, and complain to the competent authority or a court. Send requests to timurgaliakbarov1@gmail.com with an account or order identifier where relevant. We may request proportionate verification, but not your password or card security code. Requests are handled within applicable statutory deadlines.

Withdrawal of consent does not prevent retention under an independent legal obligation, such as tax recordkeeping. Deleting data needed to identify your subscription may prevent the related service from continuing; we explain this when handling the request.

6. Changes

The current policy is published with its revision date. Changing this document does not replace consent where new processing requires it. The Russian policy is available at https://moneyplanner.app/privacy-ru.html.