Privacy Policy

Last updated: October 21, 2026

1.3.5 update notice: The AI and Offers permission controls, generic push previews, Apple authorization cleanup, and disabled Meta measurement described below are part of the privacy update being prepared for Monbark 1.3.5. These controls take effect as the corresponding app and service updates are released; they are not yet active across the current release. Older versions may behave differently. For help with your current data-sharing choices or deletion, contact support@monbark.com.

1. Who we are

Monbark is operated by MONBARK LLC, a Michigan limited liability company in the United States. This policy covers the Monbark app and monbark.com. Contact support@monbark.com for privacy, support, access, correction, export, or deletion requests.

2. Information we process

• Account and authentication information: Your email address and account identifiers, profile name when you provide one, and authentication records. Supabase handles password verification; Monbark does not retain a readable account password. If you use Sign in with Apple, we receive the name, email or private relay address, and identity information Apple makes available. We securely retain an encrypted Apple refresh token, when available, to revoke that authorization when you delete your account.
• Financial information: When you authorize a bank connection through Plaid, we receive account and institution identifiers, account names and types, masked account numbers, balances, and transaction descriptions, merchants, amounts, dates, and categories. We also process bills, income schedules, budgets, goals, and other financial information you enter. Monbark's bank access is read-only; Monbark cannot initiate transfers or payments.
• Your content and choices: Onboarding answers, Advisor questions and conversation history, planning details, typed or transcribed bill text, consent choices and their version and time, notification preferences, and optional support or cancellation feedback. Support screenshots you choose to send may show personal or financial information.
• App, device, and service information: App and operating-system versions, software-update identifiers, installation and account identifiers, notification tokens, feature interactions, purchase and bank-connection outcomes, crash reports, error stacks, and service diagnostics. Network services also receive ordinary request information such as IP addresses and browser or device information.

When a search finds no matching bank, we keep the sanitized bank name you typed as plain text to improve bank coverage. The retained name-only record is not linked to your Monbark account and contains no account, device, request, IP address or institution identifiers. We do not use this record for advertising or tracking.

3. How we use information

We use this information to authenticate you, connect the bank accounts you choose, calculate and display your budget and cash runway, organize transactions and bills, maintain goals and plans, manage subscriptions and restore access, deliver your inbox and permitted notifications, answer support requests, diagnose problems, improve features, and protect the service. We use optional AI sharing only with the permission described below. Promotional notifications require a separate Offers choice.

4. Services and recipients

• Plaid: Connects the accounts you authorize and supplies financial data. Bank credentials are entered through Plaid or your bank's authorization flow, rather than stored by Monbark. Monbark retains Plaid access tokens while a connection is active and when necessary to finish disconnection or deletion cleanup. Plaid's privacy and other legal information.
• Supabase: Provides authentication, databases, file storage, application functions, app-event storage, and service records.
• RevenueCat and Apple purchases: RevenueCat processes customer identifiers and aliases, App Store receipts, subscription status, products, and transaction information to manage subscriptions and restore access. Apple processes App Store payments. Monbark does not receive your App Store payment-card details.
• Apple sign-in and speech: Apple provides Sign in with Apple and its authorization and revocation services. If you choose voice bill entry, Apple's speech-recognition services may process your speech rather than processing it solely on your device. Monbark's bill-reading request uses the resulting text, rather than uploading a voice recording to Anthropic. Typed entry remains available.
• Expo and Apple notifications: Expo transports push messages and provides software-update delivery; Apple delivers notifications through APNs. Notification providers receive a device notification token and a generic preview, as described below.
• Sentry and service diagnostics: Sentry receives error and crash diagnostics, stack traces, device and release information, and related technical context when reporting is configured. Supabase also receives authenticated crash and operational records. We limit intentional diagnostic content, but errors and user-submitted context can contain personal information.
• Resend and support email: Resend delivers support and feedback email. These messages may include what you submit and related account/email, subscription, and bank-connection status. Email copies may remain in support mail systems after an in-app record is deleted.
• Anthropic: Processes the optional AI requests described in the next section.
• Images and external links: Merchant logos can load directly from Plaid-supplied image URLs or Logo.dev. The image host receives the requested image or merchant domain and ordinary network information. When you choose an external link or a Google search, the destination receives the URL or query and processes information under its own policy.
• Website services: Vercel hosts monbark.com and provides visit and performance measurement. Website pages load Google Fonts; authentication and support-review pages can load the Supabase browser library from jsDelivr. These services receive ordinary browser, request, and network information when their assets are requested.

5. One optional AI-sharing permission

Advisor is powered by Claude, an AI from Anthropic. Before Monbark sends personal data for AI processing, it asks for one explicit AI-sharing permission that covers the AI features described here. The server checks your saved, current permission before each Anthropic request, including requests made during background bank sync. An earlier, unverified permission does not replace the current disclosure.

• Advisor and AI financial guidance: Relevant balances, bills, recent spending, income, budget and goal context, your questions, and relevant conversation history.
• Plan builder: The trip, expense, purchase, or other planning details and messages you enter. Anthropic's web-search tool may research prices; search queries can include relevant plan details, such as a destination.
• Typed or voice bill reading: The bill text you type or the text produced by speech recognition, so it can identify bill names, amounts, and schedules.
• Bank-sync AI sorting: Selected transaction or recurring-merchant descriptions, amounts, and occurrence information to help classify activity.
• AI daily or Blunt messages: Relevant bill, spending, merchant, budget, and payday facts to generate the message.

We minimize AI payloads and redact recognizable emails, personal identifiers, account numbers, and credentials where possible. We do not intentionally attach your profile name or email, bank-login credentials, or account numbers to prompts. Free-form text and bank descriptions can still contain identifiers; do not put passwords or bank credentials into AI features.

You may decline and keep using bank sync and core budgeting. Without current AI permission, transaction sorting uses rules only and other AI features ask for permission instead of contacting Anthropic. Turn AI sharing off in Settings to stop future AI requests. Withdrawal cannot recall information already processed.

Anthropic's published Commercial Terms, section B, state: Anthropic may not train models on Customer Content from Services. Those terms define Customer Content as inputs and outputs. This describes the published commercial terms, rather than a separate claim about organization-specific retention settings or a negotiated agreement. Anthropic's processing is also subject to the terms and data-processing provisions applicable to the service.

6. Notifications and offers

Manage notifications in Monbark Settings and your device's system settings. Every server push preview uses the title Monbark and the message You have an update. Open Monbark to view it. Push previews do not include balances, amounts, merchants, bills, goals, cash runway, or other financial details. Full content stays in your authenticated in-app inbox. A badge may show your unread-inbox count.

Offers from Monbark is a separate choice, off by default. Only an affirmative, current Offers permission authorizes promotional notifications, including subscription offers. General notification or operating-system permission is not promotional consent. You can turn Offers off in Settings at any time. The server rechecks that choice when offers are enqueued, claimed, checked for eligibility, and immediately before sending. Win-back delivery is currently paused globally, including for users who opt in.

7. Tracking and Meta

Meta advertising measurement is disabled in this version. Meta auto-initialization, automatic app events, and advertiser-ID collection are off by default, and the app's Meta event transport is disabled. Monbark does not send bank-connection or other bank or money-context events to Meta.

No feature requires tracking. If Meta measurement is enabled in a future version, it will require your current Apple App Tracking Transparency permission before any event or advertiser-ID collection; denial or withdrawal will stop future transmission. We will update this policy and the relevant disclosures before changing those practices.

8. Retention and deletion

We keep personal information only for as long as needed for the purposes described in this policy. We delete Monbark-controlled personal information when you delete your account or request deletion, except where it is still needed to complete pending cleanup, protect the service, meet applicable legal obligations, or avoid affecting another active owner's provider identity. Disconnecting a bank connection alone does not delete all previously stored history.

Account deletion removes active Monbark authentication, account, and associated financial records and starts durable cleanup of bank connections, relevant stored files, RevenueCat customer identities, and Sign in with Apple authorization. The app distinguishes deletion of active records from provider cleanup that is still pending. Cleanup retries may continue after you are signed out, and failures that cannot be resolved automatically require operator attention.

We keep deletion audit records and receipts only as long as needed to verify and complete your request, prevent duplicate cleanup, and protect another active owner's provider identity. These records may remain linked to an account or provider while needed for those purposes. Temporary provider credentials needed for cleanup are erased after confirmed provider cleanup. Transaction history, service diagnostics, and support-email copies also follow this purpose-based approach; no single fixed automatic expiration applies to all these records. You can request deletion of retained Monbark-controlled information at support@monbark.com, subject to the limited needs described above.

Backups and provider systems may retain copies after active Monbark records are deleted, subject to their retention practices and applicable legal obligations. Apple may retain App Store transaction records under its own obligations. Deleting your Monbark account does not cancel an App Store subscription.

9. Your choices and requests

Optional usage analytics is off by default for each account on this device. You can turn Share usage events off in Settings → Privacy. Turning it off stops future optional feature, purchase and bank-connection event uploads from this device, discards queued events and cancels pending upload work; it cannot recall events already received. Essential service requests, error and crash reporting, and the separate unmatched bank-name log continue. AI sharing and Offers have their own controls.

• In Monbark Settings, disconnect banks, withdraw AI sharing, turn Offers off, and manage notifications.
• In device Settings, manage microphone, speech-recognition, notification, and tracking permissions. Typed bill entry is available without speech recognition.
• Use Settings → Delete account to request account deletion; giving a reason is optional. If you used Sign in with Apple and Monbark does not have a usable revocation token, the app asks you to sign in with Apple once more before deletion so it can revoke the authorization. Provider cleanup may remain pending after active Monbark records are deleted.
• Manage or cancel App Store subscriptions in your Apple account's subscription settings.
• Contact support@monbark.com to request access, correction, export, or deletion, or to ask about the status of provider cleanup. Applicable law may give you additional rights.

10. Security and other disclosures

We use authenticated access, access controls, encrypted network connections, and protected storage for service credentials. No system is completely secure. Do not send bank-login credentials or passwords through support or AI messages.

We do not sell personal information or share financial information with advertisers. We may disclose limited information when legally required or necessary to protect users and service security, and in connection with a business transfer subject to applicable protections and notice requirements.

Monbark is intended for adults 18 and older. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.

We explain material policy changes and request new explicit consent before expanding optional sharing. Continued use does not replace consent for AI sharing, promotional offers, or tracking. The contact for this policy is support@monbark.com, MONBARK LLC, Michigan, USA.