MH Money Harbour Back to site
Legal

Privacy Policy

Last updated October 11, 2026

Money Harbour is built around one constraint: there is no server. This policy explains what that means in practice.

Data we don’t collect

We do not collect, store, or have access to your accounts, transactions, balances, holdings, budgets, or any other financial information you enter. We don’t ask for your bank login, and we have no aggregator relationship that would let us see it. There is no user account, no sign-up, and no profile tied to you.

Where your data lives

Everything you record is stored locally on your device. We never transmit it anywhere. If you export a backup, PDF, or spreadsheet, that file goes only where you send it through your device’s own share sheet — we never receive or hold a copy.

What does touch the network

The only network requests Money Harbour itself makes are optional price refreshes for investments you hold: ticker symbols are sent to Yahoo Finance (stocks/ETFs) or Binance and CoinGecko (crypto) to fetch current prices. These requests never include your holdings, quantities, balances, or any identifying information — only the symbol itself. If you use multi-currency accounts, refreshing exchange rates sends your home currency code (e.g. USD) to open.er-api.com, a free exchange-rate service — no account, balance, or transaction data is sent, only the currency code.

On Android, Google Play’s billing library, which the app needs to sell subscriptions, also sends Google its own technical diagnostics about the purchase system, such as the device model and app version. It never includes your records, and nothing is sent to us.

Voice entry

If you use the microphone to speak a transaction, your device’s own speech recognition — Apple’s on iOS, Google’s on Android — converts the audio to text before Money Harbour ever sees it. The app only receives the resulting text; it never receives, stores, or has access to the audio recording itself.

Receipt scanning

If you scan a receipt, the text is read from the photo on your device: by Apple’s built-in text recognition on iPhone and iPad, and by Google’s ML Kit text recognition, running on the device, on Android. The photo and the text read from it are never uploaded or sent to anyone. On Android, ML Kit sends Google technical usage statistics about the feature, such as the device model and manufacturer, Android version, the app’s name and version, and performance figures, so Google can maintain it; it never includes the photo, its text or your financial data. Details: Google’s ML Kit data disclosure.

Analytics and tracking

Money Harbour contains no analytics of how you use it, no third-party trackers, no advertising identifiers, and no behavioral profiling of any kind. (Google’s ML Kit and Play billing components on Android send Google their own technical diagnostics, described above.) Your financial data is never sent to anyone, including us.

App lock and device security

You can optionally enable a PIN or biometric lock (Face ID / Touch ID / fingerprint) on top of your device’s own security. This lock is enforced entirely on-device; we have no way to reset it or view what it protects.

Imports

CSV and PDF bank statements you choose to import are parsed entirely on your device. You review every row before anything is saved — nothing is uploaded during this process.

Children’s privacy

Money Harbour is not directed at children and does not knowingly collect information from anyone, of any age, because it does not collect financial information from anyone at all.

Changes to this policy

If this policy changes, the update date at the top of this page will change with it. Material changes will be reflected in the app’s release notes.

Contact

Questions about this policy can be sent to this email.