Privacy Policy

Introduction

This privacy policy explains how Moula ("we", "us") handles your information when you use our mobile application and our website. Moula is the data controller for the processing described here. Our approach is simple: we collect only what the service needs to work, we show no advertising, and we never sell your data. By using Moula, you accept this policy.

Data we collect

We only collect the data needed to run Moula:

• Account data: your email address and the profile details you choose, such as a username.
• Content you enter: transactions, accounts and balances, categories, projects, refunds, and the names of contacts or guests you add.
• Technical data: device and app information, error and crash reports, and server logs needed to keep the service secure and reliable.

We do not collect your banking credentials — Moula does not connect to your bank.

Authentication

You sign in with a one-time code sent to your email address. We never create or store a password for you. Authentication is operated by a specialised provider acting on our behalf.

How we use your data

We process your data only to:

• provide the service: record your transactions, compute balances and settlements, and sync your data across your devices;
• keep the service secure, prevent abuse and fix bugs;
• respond to your requests and provide support;
• comply with our legal obligations.

There is no advertising, no marketing profiling, and we never sell or rent your personal data to anyone.

Legal bases

We rely on the legal bases provided by the GDPR: the performance of our contract with you (running the service), our legitimate interest (security, preventing abuse, improving the service), your consent where it is required, and compliance with our legal obligations.

Where your data is stored

Your data is hosted on OVHcloud servers located in France, within the European Union.

Sharing and processors

We never sell your data. We share it only with the few service providers needed to operate Moula — hosting, authentication and error monitoring — under contracts that meet GDPR requirements. Some providers may process limited data outside the European Union; where that happens, transfers are protected by appropriate safeguards such as the European Commission's standard contractual clauses. We may also disclose data if the law requires it, or where necessary to protect our rights, our users or our service.

Content you add to a shared project (expenses, balances) is visible to the other members of that project — that is what the feature is for.

Data retention

We keep your data for as long as your account is active. If you delete your account or ask us to, your personal data is deleted, and residual copies held in backups are removed on a rolling schedule. We may retain limited data for longer where the law requires it.

Security

We protect your data with appropriate technical and organisational measures, including encryption in transit and restricted access. No system is perfectly secure and we cannot guarantee absolute security, but we work to keep your data safe and will inform you as required by law if a breach affects you.

Your rights

Under the GDPR, you can at any time:

• access your data and obtain a copy of it;
• have it corrected;
• have it deleted;
• request its portability;
• restrict or object to its processing;
• withdraw your consent where processing relies on it.

To exercise any of these rights, email us — we reply as quickly as possible, and at the latest within one month. You can also lodge a complaint with the CNIL (cnil.fr), the French supervisory authority.

Children

Moula is not directed at children under 15. We do not knowingly collect personal data from children; if you believe a child has provided us with data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time, for example when we add features or when the law changes. The date at the top always reflects the latest version, and we will inform you of any material change through the app or the website. Continuing to use Moula after a change means you accept the updated policy.

Contact

For any question about this policy or your data: