Privacy Policy

The data controller is Monvion Oy (business ID 3614498-9), a limited company registered in Finland, which operates Monvion at monvion.fi and monvion.com.

For anything about your personal data, contact simon@monvion.com.

• Account data: email address, name, and how you signed in (email, Google or Apple).
• Financial data you enter: account balances, income, bills, transactions, budgets, goals, assets and debts. Monvion never connects to your bank; we only have what you type in.
• AI Advisor conversations: the questions you ask and the answers you receive.
• Subscription data: your plan, subscription status and payment history. Card details are handled by Stripe; we never see or store your full card number.
• Usage and technical data: pages and features used, browser and device type, and error logs.

We do not sell your data, and we do not use your financial data for advertising.

• To provide Monvion — your account, Safe to Spend calculations and the features you use. Basis: contract.
• AI Advisor — when you ask a question, your question and the figures needed to answer it are sent to the AI provider listed in section 4. Basis: contract.
• Payments and bookkeeping — handling your subscription and keeping records. Basis: contract and legal obligation (Finnish Accounting Act).
• Service emails — sign-in codes, receipts and important notices about your account or these terms. Basis: contract.
• Security and fixing errors — keeping the service safe and working. Basis: legitimate interest.
• Improving Monvion — basic, in-app usage statistics. Basis: legitimate interest. You can object at any time by emailing us.
• Google Analytics — only if you accept analytics cookies. Basis: consent.
• Newsletters or marketing emails — only if you have opted in. Basis: consent. You can unsubscribe at any time.

We use the following service providers. They process data only on our instructions and under data processing agreements.

• Base44 (a Wix.com company) — hosting, database, sign-in and sending emails. Data is stored in the United States. Base44 DPA
• Anthropic — the AI model behind the AI Advisor, accessed through Base44. Receives your AI Advisor questions and the related figures. United States.
• Stripe — payment processing. Receives your email and payment details. Stripe Privacy Policy
• Google — sign-in with Google (if you choose it) and Google Analytics 4 (only with your consent). Google Privacy Policy
• Apple — sign-in with Apple, if you choose it.

Your data is stored in the United States by our hosting provider, and some other providers above may also process data there. These transfers are protected by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses. You can ask us for more information at simon@monvion.com.

• Your account and financial data are kept while your account exists.
• When you delete your account in Settings, your data is deleted immediately from our live database, and any paid subscription is cancelled. Backup copies are removed as they expire in our providers' normal backup cycle.
• Payment and bookkeeping records are kept as long as Finnish accounting law requires, currently up to six years after the end of the financial year.

All connections to Monvion are encrypted (HTTPS). Access rules in our database ensure that your financial data can only be read by your own account. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

The Safe to Spend number and AI Advisor answers are generated automatically. They are information only and do not lead to decisions that have legal or similarly significant effects on you.

Under the GDPR you have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to its processing, and withdraw consent at any time (this does not affect processing before the withdrawal).

You can delete your account yourself in Settings. For the other rights, email simon@monvion.com. We reply within one month.

You also have the right to complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

We use strictly necessary cookies and browser storage for signing in, keeping you logged in and remembering settings such as language and theme. These do not require consent.

Google Analytics cookies are used only if you choose "Accept all" in the cookie banner. You can change your choice at any time: Manage cookie preferences.

Monvion is only for people aged 18 or over. We do not knowingly collect data about children.

If we make material changes, we will notify you by email before they take effect. The date at the top shows when this policy was last updated.