The short version. moneyinbox reads your Gmail, read-only, to find bills, failed payments, renewals and refunds and to show them to you. We use your email for that and nothing else. We do not sell it, we do not use it for advertising, and neither we nor our AI provider use it to train AI models. Email text and attachments are deleted automatically after 30 or 90 days, and deleting your account erases everything.
1. Who we are
moneyinbox (the mobile app and this website) is operated by SmartX s.r.o., Račianska 4, 831 02 Bratislava, Slovakia, company ID (IČO) [IČO], registered in the Commercial Register of the Bratislava III Municipal Court, section Sro, file no. [file no.] ("we", "us").
We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data or this policy, write to privacy@moneyinbox.app.
2. What we collect
Your account
moneyinbox has no passwords; you sign in with Google. From Google Sign-In we receive your email address, your first name and Google's account identifier. We record when you created your account and when you last signed in.
Data from your Gmail account
With your permission, moneyinbox gets read-only access to your Gmail account through Google's gmail.readonly permission. We use it as follows:
- Message details for screening. For each message we check, we read the sender, the subject, a short preview that Gmail provides, a few technical headers (for example, whether the message is a mailing list), and Gmail's labels. Most messages are ruled out at this step, and nothing readable from them is stored.
- Full messages that look financial. Messages that look like bills, payment notices, renewals or refunds are fetched in full: sender and recipient addresses, subject, date, the text and HTML body, and PDF or plain-text attachments up to 10 MB. Other attachment types, such as images, are not stored.
- Sender records. For senders whose mail we screen, we keep the sender's email address and domain, how often we have seen them, how often their mail turned out to be relevant, and when we last saw them. This keeps future screening fast and lets you mute a sender.
- Google access tokens. We store the tokens Google issues so that we can keep checking new mail. They are encrypted.
We never read your sent mail, drafts, chats, spam or trash, or Gmail's Social and Forums categories.
Emails can contain personal data of other people, such as a sender's name and address. We process it only as part of the email it arrives in.
What we work out from your email
From financial messages we extract the details of each bill or payment item: the merchant, a title and short description, the amount and currency, due or expected dates, and payment details printed in the email, such as an IBAN, a variable symbol or a payment reference. We also record its status (for example, due, paid or refunded), the email it came from, and a short note on why it was detected.
Subscriptions
If you buy moneyinbox Premium, the payment is handled by Apple's App Store or Google Play; we never see your card details. Through RevenueCat (see section 7) we receive the product you bought, the store, the billing period, the expiry date, whether it will renew and whether there is a billing problem.
Technical data
- Service logs. Our servers log events such as syncs and errors. These logs are designed not to contain email bodies. They can contain internal identifiers, attachment file names, the titles of detected items, and, for a failed sign-in, your IP address.
- Usage counts. We count how much AI processing each account uses (the number of requests and their size, not their content), to run fair limits and manage cost.
On your phone
The app keeps your sign-in tokens in your phone's secure storage (the iOS Keychain or Android Keystore). Attachments you choose to open are downloaded to the app's cache on your phone. The app contains no advertising, analytics or tracking tools.
3. How we use your Gmail data
We use data from your Gmail account only to provide the features of moneyinbox that you see and use:
- finding bills, failed payments, renewals and refunds in your mail;
- extracting the merchant, amount, dates and payment details and showing them to you;
- noticing when a later email confirms that something was paid or refunded, and marking the item resolved;
- showing you the original email and its attachments;
- keeping screening fast and accurate for your account (the sender records above).
When you first connect Gmail, we check messages from the last 30 days (365 days on Premium), up to 2,000 messages. After that we check new messages as they arrive.
4. Google API Services: Limited Use
moneyinbox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- We use Gmail data only to provide or improve the moneyinbox features you use, as described in section 3.
- We transfer Gmail data to others only to provide those features (to the service providers in section 7), to comply with the law, or as part of a merger, acquisition or sale of assets, and then only after telling you.
- We do not use or transfer Gmail data for advertising, including personalized, retargeted or interest-based advertising.
- We do not sell Gmail data, and we do not use it to determine creditworthiness or for lending.
- We do not use Gmail data to develop, improve or train AI or machine-learning models, whether generalized or ours, and we do not allow our service providers to do so.
- No person at SmartX reads your Gmail data unless you ask us to for specific messages (for example, in a support request), it is needed for security (such as investigating abuse), it is required by law, or the data has been aggregated and anonymized for internal operations.
5. AI processing
moneyinbox uses AI models from Anthropic (Claude) to understand your email:
- Screening. For messages that our rules cannot classify alone, the sender, subject and Gmail's short preview are sent to Anthropic to judge whether the message is likely financial.
- Extraction. For likely financial messages, the sender, date, subject, a cleaned version of the email text (with quoted replies and signatures removed, up to about 8,000 characters) and the text of PDF or plain-text attachments (up to about 8,000 characters) are sent to Anthropic to extract the bill details.
Attachment files themselves, and our internal identifiers, are not sent. Anthropic processes this data on our behalf as a service provider. Under its commercial terms, Anthropic does not use it to train its models. Anthropic keeps it only for a limited period under those terms, for example to detect abuse.
This is automated processing, but it has no legal or similarly significant effect on you. It decides what appears on your list. You can mark any item as paid or ignore it, and moneyinbox never pays, moves or commits money on your behalf. AI can make mistakes and no tool catches every email, so always check important details against the original email.
6. Why we are allowed to process it
| What | Legal basis (GDPR) |
|---|---|
| Your account, your Gmail data, detected items, AI processing, subscription status | Performing our contract with you, which is to provide the service you signed up for (Art. 6(1)(b)) |
| Personal data of other people inside your emails | Our and your legitimate interest in managing your own finances (Art. 6(1)(f)) |
| Service logs, security, abuse prevention, usage limits | Our legitimate interest in running a secure and reliable service (Art. 6(1)(f)) |
| Records we must keep by law, such as accounting records | Legal obligation (Art. 6(1)(c)) |
Connecting Gmail is necessary for moneyinbox to work. You can stop it at any time; see section 11.
7. Who we share it with
We do not sell personal data. We share it only with these service providers, who process it on our behalf under data processing agreements, and only as far as each one needs:
| Provider | Purpose | Data |
|---|---|---|
| Google LLC | Sign-in and access to your Gmail | Sign-in details; requests to your Gmail account |
| Anthropic, PBC | AI screening and extraction | Email content as described in section 5 |
| RevenueCat, Inc. | Managing Premium subscriptions | A random account ID and your purchase status (not your name or email address) |
| [Hosting provider, country] | Running our servers and database | All service data |
| [Storage provider, country] | Storing email attachments | Attachment files |
Apple and Google process your payment as independent controllers under their own privacy policies when you buy a subscription in their stores. We may also disclose data when the law requires it, or to protect the rights and safety of our users or of SmartX.
8. Transfers outside the EU
Some of our providers, including Google, Anthropic and RevenueCat, are based in the United States. Where data leaves the European Economic Area, we rely on the EU–U.S. Data Privacy Framework for providers certified under it, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.
9. How long we keep it
| Data | Kept for |
|---|---|
| Email text and HTML body, attachment files and attachment text | 30 days after the email was received (90 days on Premium), then deleted automatically |
| Email details (sender, recipient, subject, date, attachment names and sizes), detected items and their details, sender records, AI usage counts | Until you delete your account |
| Google access tokens | Until you delete your account; we also revoke them at Google |
| Your account and subscription status | Until you delete your account |
| Service logs | [log retention, e.g. 30 days] |
Each moneyinbox account reads one Gmail inbox: the Google account you signed in with. moneyinbox does not work without it, so there is no separate way to disconnect Gmail. To stop our access, delete your account. If you remove our access at Google instead, moneyinbox stops reading your mail, but the data it already collected stays until you delete your account.
When you delete your account, we revoke our access to your Google account and permanently delete your account, all email data, attachment files, detected items and related records. Backups are overwritten on a rolling basis within [backup period, e.g. 30 days]. Deleting your account does not cancel a store subscription; cancel it in your App Store or Google Play settings.
10. How we protect it
- All connections to our servers are encrypted (HTTPS).
- Google access tokens are stored encrypted, and our administrators cannot view them.
- Attachments are stored privately. They can be downloaded only through links that expire after 5 minutes.
- Access to our systems is limited to the people who need it to run the service.
- Our logs are designed not to record email bodies or the content sent to our AI provider.
- moneyinbox's access to Gmail is read-only: it cannot send, delete, move or change your email.
No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
11. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing based on our legitimate interests;
- data portability, which means receiving your data in a machine-readable format.
You can act on several of these yourself:
- Delete your account in the app under Settings → Delete account. This also revokes our access to Gmail.
- Remove our access at Google at any time at myaccount.google.com/permissions. moneyinbox then stops reading your mail; delete your account to also erase what it already collected.
For anything else, including a copy of your data, write to privacy@moneyinbox.app from the email address of your account. We will reply within one month.
You also have the right to complain to a data protection authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You can also complain to the authority in the EU country where you live.
12. Children
moneyinbox is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
13. This website
moneyinbox.app uses no cookies, no analytics and no third-party scripts or fonts. Our hosting provider records standard technical server logs, such as IP addresses and the pages requested, to deliver and secure the site.
14. Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect. We will ask for your consent where the law requires it, including before using Gmail data in a new way.