Privacy Policy
Last updated: October 6, 2026
Publisher: CHAO ZHOU · Contact: support@chaobuilds.com
MoneyJot is a local-first personal ledger. This policy explains the information used by the app, optional network services, and your controls. No online account is required. Financial accounts in the app are local records, not connections to your bank.
Information on your device
Records, amounts, financial account names, categories, work and income settings, optional nickname/avatar, saved images and app preferences are stored in the app's private storage. We do not upload your ledger to our server, provide cloud sync, or include advertising or analytics SDKs. The app does not request your bank password or connect to bank accounts.
Bill images and voice
Apple Vision reads the image you select on your device. Supported Apple speech recognition runs on-device without a cloud transcription fallback. Some devices or languages need an Apple model download first. Audio is temporary and deletion is requested after transcription or cancellation; interrupted leftovers are cleaned on the next launch. Only reviewed transaction fields and images you choose to keep enter the ledger. Choosing an iCloud photo may cause Apple's Photos service to download it.
Online reference rates
Account screens may request currency rates from Frankfurter and cryptocurrency prices from CoinGecko. Requests use fixed currency/token lists and do not include your ledger, holdings, account names or balances. Providers receive normal connection metadata such as your IP address and may process it under their own policies. Available quotes are cached locally; offline bookkeeping continues, but quotes may be old or unavailable. Opening external links connects to their websites.
Permissions and choices
Camera access is used when you take a photo; Photos access is used for the bill-image picker; microphone and speech permissions support voice entry. You can decline access and use manual entry. You can select limited photos or use the system photo picker. Local reminders require notification permission and may show the subscription name or amount you configured. Change permissions and lock-screen previews in iOS Settings.
Retention and deletion
Local records remain until you delete them. Recently Deleted allows restoration for up to 30 days; unreferenced images can remain during cleanup retention. To erase the local ledger, open Me → Data & privacy → Data protection → Clear all local data, and confirm both prompts. Uninstalling may lose local data. Erasing the app does not delete original Photos items, exported files or copies held by recipients.
Backups and sharing
The ledger folder is excluded from automatic iCloud backup and the app does not sync it. Use manual backup to keep a separate copy. A full backup contains your records and retained images and is not password-encrypted. Files and share sheets may send exports to iCloud Drive or another service you choose, subject to that service's policy. You control the destination, recipients and deletion of those copies. Restoring a backup replaces the current ledger after confirmation.
Device security and support
Local files use the iOS app sandbox and Data Protection. These do not replace your device passcode or encrypt exported backups with a separate password. We cannot recover a lost local ledger from our servers. If you contact support, you choose what information to send; avoid sending a full ledger, bank credentials or unredacted screenshots unless necessary.
Policy updates
This policy describes the current version. Material changes to processing will be reflected in an updated policy and, where required, a choice before the new processing begins. Rates and work-time equivalents are reference calculations, not bank statements or investment advice.
Reference data providers
Website visits and support
This website is hosted by Cloudflare. To deliver and protect the site, the hosting provider may process connection information such as IP addresses and request details under its privacy policy. We have not added advertising, analytics scripts or a contact form. If you email support, your email provider and ours process your message; we use the information you send to respond to your request. Contact us at the address above for privacy questions or requests about correspondence you sent us.