Privacy Policy
Monibu ("we", "us") is a gamified budgeting app published by Tuwenti. This policy explains what we collect, why, and who processes it. We do not sell your data. We advertise Monibu on TikTok and — only with your permission, via Apple's App Tracking Transparency prompt — measure those ads using your device's advertising identifier (see §4).
At a glance. We collect a random per-install identifier, usage data (including session replay), subscription/purchase status, the content you enter for AI features, diagnostics, and your expense amounts (financial information) — all tied only to that random id, not to your name, email or Apple ID. We advertise Monibu on TikTok: only if you allow tracking (via Apple's prompt) do we share your device's advertising identifier with TikTok, which may be used to track you across other companies' apps for advertising measurement (see §4). We never sell your data.
1. The data you create stays mostly on your device
Your expenses (amounts, categories, notes, dates and an optional location) are stored on your device and in your private iCloud key-value store. We do not keep a copy of your expense history on our servers. To power the features below, an individual expense's amount, category and description may be sent to our analytics and AI providers (see §2 and §5) — but your full history lives only on your device. Deleting the app (and clearing its iCloud data) removes it.
2. Analytics & session replay (PostHog — EU)
To understand how the app is used and to improve it, we use PostHog, hosted in the EU (Frankfurt). We collect:
- Product events — e.g. screens opened, an expense logged (with its amount and category), a paywall viewed, a plan selected, a purchase started/completed. These expense amounts are your financial information; we collect them to measure usage and improve the app, tied only to the random per-install id below — never to your identity.
- Feature flags & A/B testing — which variant of a screen (e.g. the paywall) you were shown, so we can compare what works.
- Session replay — recordings of app screens to diagnose issues and improve UX. Text you type (amounts, notes) is masked and never captured in the clear.
Analytics are tied to a random per-install identifier, not to your name or Apple ID.
3. Subscriptions (RevenueCat)
Purchases of Monibu Pro are processed by Apple and managed through RevenueCat. RevenueCat receives your subscription status, product, and the App Store transaction identifier so we can unlock Pro and measure subscriptions. Payment card details are handled solely by Apple — we never see them.
4. Advertising measurement & install attribution
Apple Search Ads. If you install Monibu after tapping an Apple Search Ads ad, Apple provides a privacy-preserving attribution token (via the AdServices framework) that tells us the campaign/keyword that led to the install. This uses no IDFA and requires no tracking prompt.
TikTok. We advertise Monibu on TikTok. To measure those ads, the app includes the TikTok Business SDK, which sends app events (such as install and app open) to TikTok. On first launch we show Apple's App Tracking Transparency prompt: only if you allow tracking does the SDK share your device's advertising identifier (IDFA) with TikTok, which may be used to track you across other companies' apps and websites for advertising and measurement. If you decline, attribution falls back to Apple's privacy-preserving SKAdNetwork and no IDFA is shared. You can change this any time in iOS Settings → Privacy & Security → Tracking.
5. AI features (OpenAI, via our backend)
When you use an AI feature — auto-category, voice add, or the AI coach — the minimum necessary text (e.g. an expense description or your voice transcript, plus amount/category context) is sent to OpenAI through our AWS backend to generate the result. This text is processed to produce your result and, per the OpenAI API terms, is not used to train their models.
6. Attribution & revenue backend (AWS — EU)
To learn which campaigns and which paywall designs lead to subscriptions, our backend (Amazon Web Services, EU) stores subscription events (from RevenueCat) and paywall analytics (from PostHog), joined by the random per-install identifier. It does not store your expense history or personal identity.
7. Location
Location is optional. We request it only to (a) tag an expense with where it happened, if you allow it, and (b) show a realistic time-of-day scene (sunrise/sunset). Coordinates stay on your device with your expense and are not shared.
8. Who processes your data
- PostHog (EU) — analytics & session replay
- RevenueCat — subscription management
- TikTok — advertising measurement & attribution (app events; your IDFA only if you allow tracking)
- Apple — payments, Search Ads attribution
- OpenAI — AI generation for the features in §5
- Amazon Web Services (EU) — our backend
9. Retention
Analytics and attribution data are retained only as long as needed for product and business analysis, then aggregated or deleted. On-device/iCloud data persists until you delete it.
10. Your rights
You can request access to or deletion of the limited data we hold (analytics/attribution keyed to your install id), and you can delete all on-device data by removing the app and its iCloud data. To make a request, contact us at the address below.
11. Children
Monibu is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
12. Changes
We will update this page and the "last updated" date when our practices change.
13. Contact
privacy@tuwenti.com · reach us through the support form or at dev@tuwenti.com.