Privacy Policy

This Privacy Policy applies to the mPiggy app (the “Application”) for mobile devices, created by Bartosz Łaniewski (the “Service Provider”) and offered as a free-to-download personal finance app with optional paid subscriptions.

mPiggy is designed to be offline-first and private by default. You do not need an account, email address, or login to use it. Your financial data — wallets, transactions, budgets, goals, categories, and related records — is stored locally on your device in an on-device database. We do not run user accounts, we do not sync your ledger to our servers, and we do not sell your data. We do not use advertising, analytics, tracking, or crash-reporting SDKs in the Application.

Data leaves your device only when you actively use a feature that requires it, as described below.

Information Stored on Your Device

The core budgeting features work entirely on your device. The following is stored locally and is not transmitted to us:

Wallets, accounts, assets, and liabilities
Transactions, budgets, recurring rules, goals, and wishlist items
Categories and app settings
Cached currency exchange rates
Receipt data extracted from scans (including the extracted result)

You can delete this data at any time from within the Application, or by uninstalling the app.

Data We Process When You Use Specific Features

Receipt scanning (AI) — requires the AI subscription

When you scan a receipt, the receipt image is sent to our backend service, which uses a trusted third-party AI/OCR processing provider to extract details such as merchant, date, total, taxes, and line items. Together with the image we send: a locale and currency hint, the names of your own expense categories (to suggest a category), and a proof of your active subscription (store platform, product ID, and purchase token). The extracted result is returned to your device and stored locally. Receipt images are used only to provide the scanning feature.

Feature waitlist

For features that are not yet available, we may offer a waitlist. If you choose to join it, we collect your email address, your consent, and your app language so we can notify you when the feature launches. You can ask us to remove your email at any time by contacting [email protected].

Subscriptions and purchases

Subscriptions are sold and billed through the Apple App Store and Google Play. When you purchase or restore a subscription, the store provides a purchase token or transaction receipt, which we send to our backend and to Apple/Google to verify the purchase and your entitlement. We do not receive or store your payment card, bank card, or full billing details — those are handled entirely by Apple and Google.

Currency exchange rates

To display balances in different currencies, the Application requests exchange rates from a third-party rates service (Frankfurter). These requests are anonymous and contain no personal or financial data.

Offers and discounts

Where the Application shows product offers or discount vouchers, it requests them from a third-party affiliate network (TradeDoubler). These requests contain only search or category parameters and no personal or financial data.

Feedback emails

If you choose to contact support from within the Application, your device’s mail app may pre-fill technical details (such as device model, operating system version, and app version) to help us assist you. This information is only sent if you choose to send the email, and goes to [email protected].

App updates

The Application uses Expo’s update service to deliver over-the-air updates. Standard technical request data (such as IP address and device/runtime metadata) may be processed by Expo as part of delivering updates.

Third Parties

We share data with third parties only to provide the features above. Depending on which features you use, these may include:

Our backend service (operated for the Service Provider) — receipt extraction and purchase verification
A third-party AI/OCR provider — receipt data extraction
Apple App Store / Google Play — subscription billing and purchase verification
Frankfurter — anonymous currency exchange rates
TradeDoubler — anonymous product and voucher offers
Expo — over-the-air app updates

The Service Provider may also disclose information: as required by law, such as to comply with a subpoena or similar legal process; when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Permissions

The Application may request the following device permissions:

Camera — to capture receipt images for the receipt-scanning feature
Notifications — to show you local reminders and notifications on your device

The Application does not collect precise location, contacts, microphone input, or advertising identifiers, and does not track you across other apps or websites.

Opt-Out Rights

You can stop all data collection by the Application by uninstalling it, using the standard uninstall process for your device or app store. You can also choose not to use features that send data off your device (such as receipt scanning).

Data Retention

Data stored on your device is retained until you delete it or uninstall the Application. For data processed by our backend (such as receipt images sent for extraction, purchase verification records, or waitlist emails), we retain it only as long as necessary to provide the feature and to meet legal or accounting obligations. If you would like us to delete data you have provided through the Application, contact us at [email protected] and we will respond within a reasonable time.

Your Rights

Depending on your location (for example, under the EU/EEA GDPR or Poland’s RODO), you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact [email protected]. You also have the right to lodge a complaint with your local data protection authority.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13, and does not knowingly collect personally identifiable information from children. We encourage parents and legal guardians to monitor their children’s internet usage. If you believe that a child has provided personal information to us through the Application, please contact [email protected] so we can take the necessary actions. You must be at least 16 years of age to consent to the processing of your personal data in your country (in some countries a parent or guardian may consent on your behalf).

Security

The Service Provider is concerned about safeguarding the confidentiality of your information and provides physical, electronic, and procedural safeguards to protect the information we process. Sensitive tokens are stored using your device’s secure keychain/keystore. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes

This Privacy Policy may be updated from time to time. We will notify you of any changes by updating this page with the new Privacy Policy and its effective date. You are advised to review this Privacy Policy periodically. Continued use of the Application after changes are posted is deemed acceptance of those changes.

By using the Application, you consent to the processing of your information as set forth in this Privacy Policy, as amended from time to time.

Contact Us

If you have any questions about privacy while using the Application, please contact the Service Provider at [email protected].