Money Go

Privacy Policy

Last updated: November 1, 2026

What Money Go is

Money Go is a personal finance app for iPhone that helps you see where your money goes. It connects to your US bank and credit card accounts through Plaid, brings in your transactions, sorts them into spending categories, and lets you ask an AI assistant questions about your own spending. Money Go is operated by German Espitia ("we", "us").

This policy covers the Money Go iOS app and the website at moneygoapp.com.

Information we collect

Account information

  • Your email address, which you use to sign in. We don't ask for your name or phone number.

Bank and transaction data (from Plaid, when you choose to link a bank)

  • Account details: institution name and logo, account name, account type (for example checking or credit card), the last 4 digits of the account number, current and available balances, credit limit, and currency.
  • Transactions: date, amount, merchant name, the bank's description of the charge, Plaid's suggested category, and whether the charge is still pending.
  • Money Go never sees or stores your bank username or password. You enter those in Plaid's screens, not ours. We don't receive full account or card numbers.

Things you create in the app

  • Your chat messages with the Money Go assistant and its replies. These are saved to your account so your conversation follows you between devices.
  • Categories you assign or create, notes you add, transaction splits and date changes, and a history of edits made to your transactions.
  • Your choice about AI features (allowed or declined), which version of the AI disclosure you answered, and when you answered.

Device and usage information

  • A device identifier (Apple's "identifier for vendor", which is specific to Money Go on your device) and, if you allow notifications, a push notification token.
  • Onboarding events, such as "app opened", "sign-up started", or "bank connected". We use these to see where people get stuck during setup. They are stored in our own database and linked to your account once you sign in.
  • Whether in-app suggestions were shown, tapped, or dismissed, so the app doesn't repeat them.
  • Your device's time zone, sent with chat requests so dates like "this month" are correct.
  • A record of each AI request we make for your account: the feature, the model name, token counts, and estimated cost. It doesn't include the text of the request.

Money Go Plus

  • If you subscribe to Money Go Plus, we store your subscription details from the App Store (plan, whether you're in a free trial or active, and when it renews or ends), linked to your account, so we can unlock Plus features. Apple handles payment; we never receive your payment details. Meta does not receive this.

Product analytics and screen recordings (PostHog)

  • From the first time you open the app, even before you sign in, it sends PostHog basic app events ("app installed", "app updated", "app opened", and "app backgrounded") under a random install ID that the app creates. When you sign in, those earlier events are linked to your account.
  • After you sign in, the app also sends PostHog usage events (for example "bank link started", "first chat sent", "paywall shown", or "trial started", and Plaid's error code if a bank link fails) and a screen recording of how you move through the app. Screen recordings only start after you sign in. This is on by default. You can turn it off at any time in Settings under Help improve Money Go, and nothing more is sent after that.
  • All text and images are hidden on your iPhone before anything is sent, so recordings show blank blocks instead of amounts, merchants, balances, account names, or chat messages. Recordings include taps and screen changes.
  • We never record the sign-in screens or Plaid's bank-connection screens. Recording stops before Plaid opens and starts again after it closes.
  • Events and recordings are linked only to the random install ID and, once you sign in, your internal Money Go user ID (also a random ID), never your email or name. PostHog also gets your iPhone model, iOS version, and app version. We turn off IP-based location in PostHog and don't send it your network traffic or app logs.

Ad measurement (Meta)

  • We advertise Money Go on Facebook and Instagram. To see how many installs our ads bring in, the app includes Meta's SDK. From the first time you open the app, even before you sign in, it sends Meta anonymous app install and app open events (including session length) for ad attribution. Meta also gets an ID that Meta's SDK creates for this install, device details (such as iPhone model, iOS version, language, time zone, screen size, and carrier), the app version, and, as with any internet connection, your IP address. Meta does not receive your App Store purchases, subscriptions, or free trials.
  • The app asks once, using Apple's "Allow tracking" prompt, whether Meta may also receive your device's advertising identifier (IDFA). Only if you tap Allow does Meta get the IDFA, which lets Meta connect your install to an ad you saw in its apps. If you tap Ask App Not to Track, the IDFA is never sent. You can change this at any time in iOS Settings → Privacy & Security → Tracking. Meta is also told whether you allowed tracking, and, if you opened the app from one of our ads, which ad campaign it was. Apple's SKAdNetwork also reports installs from ads without identifying you.
  • We send Meta no bank data, transactions, balances, chat messages, email address, or Money Go user ID, and we don't log custom events to Meta. Meta handles this data under the Meta Privacy Policy.

Voice input

  • If you hold the button to talk, Apple's speech recognition on your iPhone turns your speech into text. Apple may process the audio under its own privacy policy. Money Go receives only the resulting text, which is handled like any typed chat message. We do not receive or store audio.

What we don't collect

  • We use two outside SDKs in the app: PostHog for product analytics and Meta's SDK for ad measurement, as described above. We don't use crash-reporting SDKs or show ads in the app. We don't collect your location, contacts, photos, or health data.
  • Your financial data (bank accounts, balances, transactions, and chat) is never sent to PostHog or Meta and is never used for advertising.

How we use your information

  • To run the app: sign you in, sync your transactions, categorize spending, show summaries, answer your chat questions, apply edits you ask for, and send notifications you've allowed.
  • To improve categorization for everyone: when a merchant is categorized, we store an anonymous count of "this merchant → this category", keyed on Plaid's merchant ID. These counts don't include your user ID, amounts, or dates.
  • To understand and operate the service: we look at onboarding events, AI usage and cost records, and per-account totals (such as how many banks, transactions, and chats an account has) on an internal dashboard. Only the operator can access it.
  • To improve the app: we look at usage events and masked screen recordings in PostHog to see where people get stuck, for example while connecting a bank. Only the operator can access them.
  • To measure our ads: Meta tells us how many installs and app opens came from our ads on Facebook and Instagram, in aggregate.
  • To provide support when you contact us.

We do not sell your personal information. We don't use your financial data or chat for advertising. The only data used for advertising is the ad-measurement data sent to Meta described above, and the advertising identifier is sent only if you allow tracking.

How AI is used in Money Go

Some Money Go features send parts of your data to an AI model so it can do the work. This happens only if you allow AI features (see "Your choice about AI" below). We send only what each feature needs.

  • Automatic categorization (runs when new transactions arrive, including right after you connect a bank)
    What is sent: For transactions our built-in rules can't file: amount, merchant name, the bank's description, Plaid's suggested category and how confident Plaid is, and your list of category names (including any you created). For hard-to-identify charges, one transaction at a time, also its date and account type (for example "credit card").
    Why: To pick the right spending category.
  • Chat
    What is sent: Your message and recent messages from your conversation; your linked accounts (type, institution name, last 4 digits, balance, currency); your category names; today's date and your time zone; and the transactions and spending totals the assistant looks up to answer you (date, amount, merchant, description, category, account, and split label).
    Why:To answer questions about your spending and make the edits you ask for (recategorize, split, change a date, add a note). Money Go's own code makes the edits, and it asks you to confirm first when a request is unclear.
  • Transaction editor chat (talking about a single transaction)
    What is sent: That transaction's merchant, description, amount, date, category, note, and split details, plus your message and the conversation about it.
    Why: To understand and apply what you ask for on that transaction.
  • Notification digest (a notification twice a week, if you allow notifications)
    What is sent: Up to 40 recent transactions (merchant name, amount, category) and totals that Money Go calculated.
    Why: To write one short line for the notification.

Categorization uses only the AI model. Automatic categorization uses only the AI model: Claude, through OpenRouter with zero data retention, served by AI hosts such as Amazon Bedrock and Google Cloud. Merchant descriptions aren't sent to any search engine. If a charge is hard to identify, Money Go sends it to the model again on its own, with its date and account type. If the model still can't recognize the merchant, the transaction goes to your review list so you can categorize it yourself.

We don't include your email address, your Money Go user ID, your bank login, or full account numbers in AI requests. Anything you type into chat is sent as you wrote it. Please don't type information you don't want processed, such as passwords or Social Security numbers.

Who processes it. We send this data from our servers to OpenRouter, which passes it to AI hosts that run Claude, such as Amazon Bedrock and Google Cloud. They don't store or train on it. Money Go uses Anthropic's Claude models: Claude Sonnet 4.6 for chat, the transaction editor, and notification digests, and Claude Haiku 4.5 for categorization. Our requests don't go to Anthropic's own service. These hosts may process requests in the United States or in other countries. If we change models, we'll update this policy. If we send your data to a new kind of AI provider, we'll also ask for your permission again in the app.

Zero data retention. Zero data retention is enforced for all of Money Go's AI processing.

  • Our OpenRouter account has zero data retention turned on for all models, so OpenRouter sends our requests only to AI hosts that don't store your data and don't train AI models on it. Each host processes a request, returns the answer, and doesn't keep it.
  • Every option on our OpenRouter account that would let our data be used for training, let prompts be published, or trade our data for a discount is turned off.
  • Each request we send also tells OpenRouter to skip any host that collects or stores data.
  • OpenRouter doesn't keep our prompts or responses in its logs: prompt and response logging is turned off on our account, and so is sharing request data with outside tools. OpenRouter keeps only request metadata, such as token counts and timing.
  • Money Go doesn't use your data to train AI models.
  • Zero data retention applies to AI processing only. It doesn't cover Plaid, which handles your bank data under its own policy (see "Plaid" below).

See the policies of OpenRouter, Amazon Bedrock, and Google Vertex AI for details.

Your choice about AI

Before Money Go sends any of your data to an AI service, the app asks for your permission.

What the screen shows. The screen is titled "Share your data with AI services?" It explains that Money Go uses AI to sort your spending and answer your questions, and that it needs some of your data to do that. It then lists:

  • What we share: transaction descriptions, amounts, dates, merchants, categories and notes; bank names, account balances and last 4 digits; your chat messages.
  • Who gets it: OpenRouter, which passes it to AI hosts that run Claude, such as Amazon Bedrock and Google Cloud. They don't store or train on it.
  • Why: to categorize your transactions, answer your questions in Chat, and write insights about your spending.

It also says that your bank login and full account numbers are never shared, links to this policy, and gives you two choices: Allow or Not now.

When you're asked.

  • Right after you connect a bank.
  • If AI is off and you start something that needs it, such as opening Chat, holding the button to talk, choosing to sort transactions with AI, or typing an edit in the transaction editor.
  • If what we share, who gets it, or why changes in a meaningful way, we ask again. AI stays paused until you answer.

If you choose Not now, we won't keep asking every time you open the app. We'll ask only when you start an AI feature.

If you choose Not now, or turn AI off later:

  • Money Go stops sending your data to AI services. Our servers make no AI requests for your account, including background categorization and notification lines.
  • Your transactions still come in. They're filed using your own category rules, Money Go's shared merchant categories, and Plaid's category when Plaid is confident. Anything left over waits for you to categorize it and isn't counted in your Spending total until you do. You can still categorize transactions yourself.
  • Chat is off, including holding the button to talk and chatting about a single transaction. In the transaction editor, typing an edit is off, but the category picker and notes still work.
  • In-app suggestions that open Chat are hidden.
  • If you allow notifications, the twice-weekly notification still arrives, with a summary Money Go writes without AI.

Changing your choice. Open Settings (gear icon) and use the AI features switch. What's shared with AI in Settings shows the same disclosure at any time. Turning AI on shows the permission screen first. Turning it off asks you to confirm, and then Money Go stops sending your data to OpenRouter and the AI hosts that run Claude. Because of zero data retention, the AI hosts don't keep data from earlier requests, so there's nothing for them to delete. Your choice is saved with your account.

Plaid

Bank linking is handled by Plaid. When you connect an account, you sign in to your bank in Plaid's screens, and Plaid collects your credentials and account data under the Plaid End User Privacy Policy. Money Go asks Plaid only for transaction data (Plaid's "Transactions" product) for US accounts. Money Go can read your transactions and balances, but it can't move money. You can also see and manage the apps connected through Plaid at my.plaid.com.

Service providers we share data with

We share data only with the companies that help us run Money Go, and only for that purpose:

  • Plaid
    What they do for Money Go: Bank connections
    Data involved: Bank credentials (entered in Plaid, never seen by us), account and transaction data
  • Supabase
    What they do for Money Go: Database and sign-in. Sign-in emails are sent through our authentication provider (Supabase)
    Data involved: Everything stored in your account
  • Vercel
    What they do for Money Go: Hosts our servers and this website
    Data involved: Requests to our servers pass through Vercel, which keeps short-term logs (for example IP addresses and request URLs)
  • OpenRouter, which passes it to AI hosts that run Claude, such as Amazon Bedrock and Google Cloud. They don't store or train on it
    What they do for Money Go: AI features, if you allow them
    Data involved:The data described in "How AI is used in Money Go"
  • PostHog (PostHog Cloud, United States)
    What they do for Money Go: Product analytics and screen recordings, unless you turn them off in Settings
    Data involved: An install ID created by the app (app install/open events can be sent before you sign in), your internal Money Go user ID after you sign in, usage events, masked screen recordings (all text and images hidden; sign-in and Plaid screens never recorded), and device details such as iPhone model, iOS version, and app version. No email, name, bank data, or chat text
  • Meta (Meta Platforms, Inc.)
    What they do for Money Go: Measuring installs from our ads on Facebook and Instagram
    Data involved:Anonymous app install and open events (sent from first launch, before you sign in, for ad attribution), an install ID created by Meta's SDK, device details, IP address, and your advertising identifier only if you allow tracking. No bank data, chat, email, or Money Go user ID. Meta is a separate company that uses this data under its own privacy policy, not just on our behalf
  • Apple
    What they do for Money Go: Push notifications (Apple Push Notification service) and speech-to-text
    Data involved: Push token and notification text; your speech, if you use voice input

We may also disclose information if the law requires it, or to protect the rights, safety, or security of Money Go, our users, or others.

How long we keep data

  • We keep your data until you delete your account. That covers your account, bank, transaction, and chat data, plus everything else listed above. We don't delete it on a schedule while your account exists.
  • When you delete your account, the data listed under "Deleting your account" is deleted from our database right away.
  • Analytics: PostHog deletes screen recordings automatically 30 days after they're recorded (the deletion can take a little longer to finish). PostHog keeps usage events for 1 year, after which it may delete them.
  • Ad measurement: Meta keeps the data its SDK collects under Meta's own policy. That data isn't linked to your Money Go account, so deleting your account doesn't delete it.
  • Backups and logs: our database and hosting providers keep logs, and on some plans backups, for limited periods under their standard settings. On our current plans, the database provider keeps logs for about 1 day and the hosting provider keeps server logs for about 1 hour. If we move to a paid database plan, daily backups are kept for up to 7 days or more, depending on the plan. Deleted data can stay in those logs or backups until they expire.
  • What stays after deletion:
    • the anonymous merchant-to-category counts described above, which aren't linked to you;
    • onboarding events recorded on a device before anyone signed in, which carry only the device identifier;
    • PostHog usage events from a device where nobody ever signed in, which carry only an install ID;
    • OpenRouter's request metadata (such as token counts and timing). The AI hosts keep nothing, because of zero data retention.
    Plaid keeps its own records under Plaid's policy.
  • Signing out or deleting the app doesn't delete your account or data. Use "Delete account".

Deleting your account

In the app: tap the gear icon to open Settings, tap Delete account, then tap Delete to confirm. This permanently deletes your Money Go account and can't be undone.

When you confirm, Money Go:

  • asks Plaid to revoke Money Go's access to every bank you connected;
  • deletes your linked accounts, transactions, notes, splits, edit history, categories you created, saved category rules, chat history, push tokens and device records, onboarding events linked to your account, suggestion history, AI usage records, your AI choice, and sync status;
  • deletes your Money Go Plus subscription record and all the subscription data we store, including the subscription notifications Apple sends us;
  • deletes your sign-in account and profile; and
  • asks PostHog to delete the usage events and screen recordings linked to your account. PostHog finishes the deletion in the background, usually within a few days.

Deleting your account doesn't cancel your Apple subscription. If you subscribe to Money Go Plus, cancel it in your Apple ID's Subscriptions settings (on iPhone: Settings → your name → Subscriptions), or Apple will keep charging you.

By email: if you can't use the app, email us from the address on your account. We'll delete your account within 30 days.

Security

We use HTTPS for all traffic between the app, our servers, and our providers. Your sign-in session is stored in the iOS Keychain on your device. In our database, access rules limit each account to its own data, and Plaid access tokens are kept only on our servers. No system is perfectly secure, and we can't guarantee absolute security.

Children and age

You must be 18 or older to use Money Go. Money Go isn't meant for children, and we don't knowingly collect data from anyone under 18. If you think someone under 18 has given us data, contact us and we'll delete it.

Your rights

Depending on where you live, you may have the right to ask for a copy of your data, to correct it, or to delete it. You can delete your data at any time in the app, and you can email us for anything else. We don't sell personal information. Sending your advertising identifier to Meta for ad measurement may count as "sharing" for targeted advertising under some US state laws. That happens only if you tap Allow on Apple's tracking prompt, and you can opt out at any time in iOS Settings → Privacy & Security → Tracking. To stop analytics, turn off Help improve Money Go in the app's Settings.

Changes to this policy

If we change this policy, we'll post the new version here and update the "Last updated" date at the top. If we change what we share with AI services, who receives it, or why, the app will also ask for your permission again.

Contact

Questions about this policy or your data? Email ge.espitia@gmail.com.