Privacy Policy
The short version. Money HQ is offline-first. Your financial data is written to storage on your own device and stays there. Nothing is uploaded unless you deliberately create an account to use family sharing or Split & Settle. Kids' profiles never leave the device at all. There are no ads, no usage tracking, no third-party analytics, and nothing is ever sold.
1. Who this covers
This policy explains what Money HQ does with your information. "Money HQ" and "the app" mean the Money HQ Android application and the web version at musenexus.ca. "We" means Muse Nexus, the developer of Money HQ.
2. Data stored on your device
By default, everything you enter stays on your device in the browser/app local storage. We cannot see it, and it is not transmitted anywhere. This includes:
- Budget — income, bills and expenses
- Subscriptions and their renewal dates
- Debt payoff — balances, rates and plans
- Net worth — assets and liabilities
- Portfolio and dividends
- Trading journal entries
- Business bookkeeping records
- Insurance policies
- Savings goals, kids' allowance records, and app settings
Uninstalling the app or clearing its storage permanently deletes this data. We hold no copy, so we cannot restore it. Export your data first if you want to keep it.
Your Financial Health score is worked out here too
The health score, the insights on your Home screen, and every projection (debt-free date, interest saved, retirement estimates) are calculated on your device from data already on it. Nothing is uploaded to produce them, and no scoring happens on a server.
Money Coach runs entirely on your phone
The Money Coach reads your trackers and answers questions in plain language. It does this locally: your figures and your questions are never transmitted, there is no account behind it, and it works with no connection at all. It is not a chatbot service — there is no server on the other end.
3. Data stored in the cloud — only if you sign in
Creating an account is entirely optional. The app is fully usable without one. You only need an account to use features that are shared between people: family sharing, Split & Settle groups, and syncing across your own devices.
If you do sign in, data is stored on Supabase (our hosted database and authentication provider). What is stored:
| What | Why |
|---|---|
| Email address and password | To authenticate you. Passwords are hashed by Supabase Auth — we never see or store them in readable form. |
Your tracker data (user_data) | Backup and sync across your own devices. |
| Household and group membership | To know which family or Split group you belong to. |
| Invitations and join requests | To let you invite people and approve who joins. |
| Shared expenses and settlements | The core of Split & Settle — who paid what, who owes whom. |
| Receipt photos you attach | Shown to members of that group alongside the expense. |
| Group chat messages | The in-group conversation. |
| Shared bills and savings goals | Family budgeting features. |
| Notification token for your device | To deliver push notifications about group activity — including when the app is fully closed. It identifies a device, not a person, and is deleted when you sign out or remove the app. |
| Subscription status | To unlock Pro features on your account and any seats you've shared. |
Who can see it: access is enforced at the database level. Members of a family or Split group can see that group's shared expenses, chat, bills, and goals — that is the purpose of the feature. Your personal tracker data is not visible to other members.
4. Third-party services
The app contacts a small number of outside services. Each is listed here with exactly what is sent.
| Service | What is sent | When |
|---|---|---|
| Supabase | Account and shared-group data (section 3) | Only when signed in |
| Finnhub | Stock ticker symbols you track | Only if you enter your own Finnhub API key for live quotes |
| open.er-api.com | Currency codes only — no personal data | When converting between currencies |
| Open-Meteo | Approximate coordinates, rounded to ~1 km | Only if you enable the weather widget and grant location permission |
| Firebase Cloud Messaging (Google) | A device notification token. The alert text is generated by our own function; Google delivers it. | Only if you allow notifications |
| Google Play Billing | Handled entirely by Google | Only when you buy a subscription |
| Discord / Telegram | Only the content you explicitly send | Only if you configure your own webhook or bot token in Settings |
Payments. Subscriptions are processed by Google Play Billing. Money HQ never receives or stores your card number or billing address — we only learn whether a subscription is active.
5. What we never do
- Sell your data
- Show ads
- Track how you use the app
- Share data with brokers
- Read your bank accounts
- Profile you for marketing
The app contains no advertising SDK, no third-party analytics SDK, and no telemetry of any kind. It does not connect to your bank; every figure in the app is one you entered yourself or imported yourself.
One clarification, because the words overlap. Money HQ contains features called trackers and tabs called Analytics — a Budget tracker, a Debt tracker, a Trading Journal with an Analytics tab, and so on. Those analyse your money, for you, on your device. That is the product. What this section rules out is the other meaning of those words: software that analyses you, for us — measuring which screens you open, how long you stay, or what you tap, and reporting it back. There is none of that in the app.
6. Permissions the app asks for
- Internet — required for cloud sync, live prices, and currency rates. The app works offline without it.
- Notifications (optional) — to alert you about bills and shared-group activity, including while the app is closed. Decline and the app works normally; you will simply see the activity next time you open it.
- Location (optional) — only for the weather widget, only while you use it, and only sent as coordinates rounded to about a kilometre. It is never stored on our servers or tied to your account.
- Photos / camera (optional) — only when you attach a receipt to a shared expense or set a custom background. A background image never leaves your device.
7. Children
Children never get an account. There is no child sign-up, no child email address, no password and no cloud login for a child anywhere in Money HQ. We collect no personal information from children at all.
Money HQ includes a Kids area for pocket money, chores, savings goals and money lessons. A kid profile is created by the parent or guardian, on the parent's own device, and never leaves it. It is a profile inside the adult's app — not an account on our systems.
What a kid profile holds, and where
- A first name or nickname, and optionally an avatar or photo the parent chooses
- A PIN set by the parent
- Pocket money, chores, savings goals and lesson progress
All of it is stored only in the app on the parent's phone. None of it is uploaded, synced or transmitted to us or to anyone else, and it is not included in cloud sync or family sharing.
How access is controlled
Opening the app shows a "Who's using?" profile picker. Each kid profile is behind its own PIN, and leaving a kid's space requires the parent's PIN. A kid profile reaches only the Kids area — never the household's budgets, net worth, investments or any other financial record. Each kid's data is isolated from the others'.
Deletion
The parent removes a kid profile in the app, which deletes it from the device immediately. Because nothing was ever uploaded, there is nothing for us to hold, retrieve or delete on our side.
We show no ads to anyone, do not track how anyone uses the app, and do not profile or market to children.
8. Keeping and deleting your data
We keep cloud data only while your account is active.
Deleting local data
Uninstall the app, or use Settings → Reset, to erase everything held on the device. This is immediate and irreversible.
Deleting your account and cloud data
Email the support address below from the address you signed up with, with the subject "Delete my account". We will erase your account, your synced tracker data, your notification tokens, and your personal records within 30 days, and confirm when it is done.
One caveat, so there are no surprises: shared expenses in a group you belonged to may remain visible to other members, because they form part of their financial record too. Your name is removed from those entries.
9. Security
Traffic between the app and our services is encrypted with HTTPS/TLS. Cloud data sits behind row-level access rules that restrict every record to the account or group entitled to it. Passwords are hashed by Supabase Auth and are never visible to us. No system is perfectly secure, but we do not store what we do not need — which is why the default is that your financial data never leaves your device at all.
10. Your rights
Depending on where you live — including under Canadian PIPEDA, the GDPR in the EU/UK, and similar laws elsewhere — you may request access to the personal data we hold, correction of it, deletion of it, or a copy in portable form. Use the contact address below and we will respond within 30 days. The app also has a built-in export so you can take your data at any time without asking.
11. Changes to this policy
If this policy changes materially, we will update the date at the top and note the change in the app's release notes. Continuing to use Money HQ after a change means you accept the updated policy.
12. Contact
Questions about privacy, or a request to access or delete your data:
Email: support@musenexus.ca
Web: musenexus.ca