Money Moonshot.

Money Moonshot is operated by Money Moonshot LLC ("Money Moonshot," "we," "us"), a personal budgeting and financial-management app. This policy explains what information we collect, how we use it, and the choices you have. We built this app privacy-first: we do not sell your personal or financial information, and we do not show you third-party ads.

Information we collect

• Account information — the email address and password you use to sign in. Passwords are stored only as salted, hashed values; we never store them in plain text.
• Financial account data (via Plaid) — if you choose to connect a bank or card, our data provider Plaid Inc. securely retrieves information such as account names, balances, transactions, and liabilities (e.g., credit-card and loan balances, interest rates, minimum payments, due dates). We receive this data from Plaid to power your budgets, spending insights, debt-payoff plans, and Autopilot guidance.
• Information you enter — budgets, savings goals, manually added debts, and settings you configure.
• Security data — if you enable two-factor authentication, we store an encrypted authenticator secret and one-time recovery codes.

We do not collect your bank login credentials. When you connect a bank, you enter those credentials directly with Plaid — we never see or store them.

How we use your information

• To provide the app's features: categorizing transactions, tracking budgets and net worth, building debt-payoff plans, and generating Autopilot recommendations.
• To operate your account, authenticate you, and send account-related messages such as password-reset codes.
• To keep the service secure and prevent abuse.

We use your data only to provide the service to you. We do not sell it, rent it, or use it for advertising.

Plaid

We use Plaid to connect to your financial institutions. By connecting an account, you also agree to Plaid's handling of your information as described in the Plaid End User Privacy Policy. You can learn more about the data Plaid collects and manage your connections through Plaid's Plaid Portal.

How your data is protected

• Sensitive financial fields (such as account names, merchant names, amounts, and balances) are encrypted at rest. A raw scan of our database shows no readable financial data.
• Plaid access tokens are encrypted at rest.
• All traffic is served over HTTPS/TLS.
• Every database query is scoped to your authenticated account, so one user can never see another user's data.
• Two-factor authentication is available to further protect your account.

Sharing

We share data only with service providers that make the app work — principally Plaid (to retrieve financial data) and our email provider (to send account messages). These providers process data on our behalf and are not permitted to use it for their own purposes. We may disclose information if required by law. We do not sell your information.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from Settings → Account → Delete account; doing so permanently removes your stored data, including connected-account information, from our systems. You can also disconnect a linked bank at any time.

Your rights and choices

You are in control of your information. Within the app you can:

• Access and correct your profile, budgets, goals, and settings at any time.
• Disconnect a linked bank or card at any time, which stops further data retrieval.
• Delete your account and data from Settings → Account → Delete account.

Depending on where you live (for example, California under the CCPA/CPRA, or the EEA/UK under the GDPR), you may have additional rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. We honor these rights regardless of your location — to make a request, contact us at [email protected]. We do not sell or share your personal information as those terms are defined under U.S. state privacy laws, and we do not use it for cross-context behavioral advertising.

Children

Money Moonshot is not directed to children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected by updating the effective date above and, where appropriate, notifying you in the app.

Contact

Questions about this policy or your data? Reach us through the in-app contact form (Settings → Contact) or at [email protected].