Privacy policy
Draft: not ready to publish until the bracketed items are filled in and the text has been checked for the countries where the app is published.
Effective date: on publication.
Mizaluna is a personal finance app that keeps your data on your device. There is no account and no Mizaluna server. Nothing leaves your phone unless you connect Google Drive for backups or share a file yourself.
Your data on your device
Mizaluna collects nothing. There is no server contact, no analytics, no crash reporting service and no advertising. The publisher receives none of your data.
The accounts, transactions, budgets, recurring items, goals, receipt photos and settings you enter are stored only in the app's private storage on your device. They are excluded from your phone's cloud and device-to-device backups, so a new phone or a reinstall starts empty unless you restore a Mizaluna backup.
Optional Google Drive backup
If you connect a Google account, Mizaluna copies a backup of your data to your own Google Drive once a day and whenever you ask.
- What is copied: a backup file with all your Mizaluna records (accounts, transactions, categories, tags, templates, budgets, recurring items, goals, debts, exchange rates, reconciliations) and your receipt photos. The app lock, reminder settings and device choices are not included. The 10 most recent backups are kept; older ones are deleted.
- Where: in a hidden folder of your Google Drive that only Mizaluna can open. Mizaluna asks Google only for access to that folder (the
drive.appdatapermission): it cannot see your other Drive files. The files are stored by Google under your Google account, not by the publisher, who has no server and never receives them. - On your phone: Mizaluna remembers the Google account's e-mail address and the times of the last backups, to run the daily backup.
- Protection: transfers are encrypted (HTTPS) and Google encrypts the files it stores, but Mizaluna doesn't encrypt the backup itself: it is not end-to-end encrypted. Anyone with access to your Google account could restore it.
- Stopping and deleting: in Mizaluna, Settings → Your data and backups → Disconnect Google Drive stops the daily backup; the backups stay on Drive. To delete them, open your Google Account → Data & privacy → third-party apps and services, choose Mizaluna and delete its data, or in Google Drive on the web open Settings → Manage apps → Mizaluna → Options → Delete hidden app data.
Google's handling of your Drive is covered by Google's own privacy policy.
Backups and exports
When you create a backup or a CSV export, Mizaluna writes a file and opens your system's share sheet; you choose where it goes (for example your own cloud storage, email or a computer). These files contain your financial records and are not protected by a password, so keep them private. The temporary copy is deleted from the app's cache after sharing.
Permissions
- Internet: only for the optional Google Drive backup.
- Camera and photos: only when you add a receipt photo.
- Biometrics (fingerprint or face): only if you turn on app lock; the check is done by your device, Mizaluna never sees your biometric data.
- Notifications: only if you turn on reminder notifications; they never show amounts, payees or account names.
- Start at boot: so scheduled reminder notifications survive a restart.
Your rights
You can see and correct your data in the app, export it (backup or CSV), and delete the Drive backups from your Google account at any time. [Add the rights and the authority that apply where the app is published, e.g. the GDPR in the EU.]
Children
Mizaluna is not directed at children.
Contact
Mohamed Rai
mohamed.rai.mit@gmail.com