MUNIPrivacy PolicyLast updated: November 6, 2026MUNI ("MUNI", "we", "us") is a portfolio and net-worth tracker available on iOS, Android and at munitheapp.com. This Privacy Policy explains exactly what information we hold, how it is protected, how we use it, and every third party that receives any of it.MUNI is built to know as little about you as possible. We do not ask for your real name, date of birth, phone number, home address, government ID, or bank or brokerage passwords. The only identifying detail an account requires is an email address, which we use to sign you in and to contact you about your account. We do not sell your data, we do not show ads, and we do not track you across other companies' apps or websites.This policy is effective as of November 6, 2026.1. What we collectAccount details. Your email address, a username you choose, and your password. We never store your password itself — only a one-way bcrypt hash that can verify it but cannot be reversed. We do not collect your name or date of birth.Optional profile details. If you choose to add them: a profile photo, a short bio, and a location. Bio and location are encrypted before they are saved.Financial information you add. Holdings and quantities, purchase prices, cash balances, private assets you track (for example property, watches, number plates or other items, with their values, notes and photos), savings goals, income and expenses, and daily snapshots of your net worth. We consider this information sensitive and protect it accordingly.Brokerage connections (optional). If you link a brokerage, we receive read-only data from it through our partner SnapTrade: account balances, holdings, positions and the brokerage account number. You enter your brokerage login on SnapTrade's or your broker's own page — MUNI never sees or stores those credentials. We remove the account holder's name from the data before saving it, and the account number is encrypted.Crypto wallets (optional). If you track a wallet, you paste its public address. We never ask for a seed phrase or private key and cannot move funds. The address is encrypted before it is saved; we also keep a one-way fingerprint of it so the same wallet cannot be added twice.Automatic spending capture (optional). If you set up the Apple Pay Shortcut, it sends us the merchant, amount, currency, time and an optional note for each purchase. If you set up bank SMS capture, your Shortcut sends us the text of the bank alert; our server reads the amount, currency and merchant from it in memory and saves only the resulting expense. The SMS text itself is never stored or logged.Voice expenses (optional). If you log an expense by speaking, your device's built-in speech recognition (provided by Apple or Google, and which may process audio on their servers) turns it into text. We receive only that text, use it to draft the expense, and do not store it.Device and session information. When you sign in we record your device's operating system and version (for example "iOS 18.2") against that session so you can manage your signed-in devices. If you allow notifications, we store your device's push token. MUNI does not store your IP address in its own database.Usage analytics. We record product events — such as opening the app, signing up, signing in, viewing the subscription screen, the pages and screens you visit, and where you click on the website — plus masked recordings of some sessions, to understand how MUNI is used and to fix problems. These are tied only to a random account ID, never to your email or username, and never include your balances, holdings, portfolio amounts or net worth. Events about your MUNI subscription, such as starting a trial or renewing, may include the subscription price paid. See section 5 for details.Messages you send us. If you contact support, we receive your name (if you give one), email address and message.
2. How your information is protectedEncrypted at rest. All of your data is stored in an encrypted database on Amazon Web Services (AWS), using encryption keys managed by AWS Key Management Service (KMS). Database backups and uploaded photos are encrypted too.An extra layer for the most sensitive fields. On top of database encryption, the details that could point to you in the real world — wallet addresses, brokerage account numbers, brokerage connection secrets, property addresses and asset notes, and your bio and location — are individually encrypted with AES-256-GCM before they reach the database, using keys held in AWS KMS. Someone holding a copy of the database without those keys would see only ciphertext for these fields.Encrypted in transit. Every connection between the app, our servers and our database uses TLS encryption.Access requires you to sign in. Your financial data can only be retrieved through a signed-in session. Signing in requires your password or a one-time code sent to your email. On supported phones you can also turn on Face ID to sign back in; your face data never leaves your device and is never sent to MUNI. One-time codes are single-use, expire after 10 minutes and are stored only in hashed form. Repeated failed sign-in attempts temporarily lock the account, sessions expire and renew automatically, and you can sign out of every device at once. Changing or resetting your password ends all other sessions.Credentials stay protected on your device. On iPhone and Android, sign-in tokens are kept in the device's secure storage (the iOS Keychain or Android Keystore), tied to that device and excluded from backups. On the web, they are kept in secure, HttpOnly cookies that page scripts cannot read.Limited admin view. MUNI has one internal admin page, available only to a small number of named MUNI team members who must sign in. It lists each account's email address, username, sign-up date, last-active date, whether the email is verified, subscription status, and whether you have opted out of product emails. It does not show, and cannot show, anyone's assets, holdings, balances, net worth, spending or connected accounts. Our servers only ever return your financial data to you. Direct access to our infrastructure is limited to a small number of authorized personnel for maintenance such as database upgrades, and we do not look at an individual's financial data unless you ask us to help with your account or we are required to by law.Photos are private. Profile and asset photos are stored in a private, encrypted storage bucket that is not publicly accessible. The app shows them using short-lived links that expire after 15 minutes.No method of storing or transmitting data is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
3. How we use your informationTo provide MUNI: calculating and displaying your portfolio, net worth, performance, spending and savings; refreshing brokerage and wallet balances; estimating the value of property and watches you add; and showing market prices and news.To keep your account secure: signing you in, sending one-time codes and password-reset codes, rate-limiting and locking out repeated failed attempts, and detecting misuse.To send notifications you have enabled, such as large moves in your net worth or in an asset you hold, and friend requests. Net-worth notifications describe percentage changes, not amounts.To manage your subscription: starting free trials, processing payments through Stripe, and emailing you subscription confirmations and receipts.To occasionally email you about MUNI itself, for example new features, important product changes, or a reminder that you can still start your subscription. These emails come only from MUNI, are only about MUNI, and never contain your financial data. You can opt out at any time by replying to any of them or by writing to support@munitheapp.com, and we will stop. Opting out does not affect sign-in codes, security messages or receipts.To understand and improve the product, using the limited analytics described in section 5.To respond to your support requests and to comply with legal obligations.We do not use your information for advertising, we do not sell or rent it, and we do not share it with data brokers. We do not send emails on behalf of other companies, and we never use your financial data to decide what to email you. We do not use your financial data to train artificial-intelligence models, and we do not send it to any AI provider.
4. What other MUNI users can seeMUNI has optional social features. Other signed-in MUNI users can find you by searching for your username and see your public profile: your username, profile photo, bio, location, MUNI Score, investing streak and achievements. You can make your profile private in Settings. Your email address is never shown to other users, and nobody can find you by searching for it.No other user can ever see your holdings, balances, amounts, net worth, spending or connected accounts.
5. Third parties that receive your informationWe share information only with the service providers below, only what each needs to do its job, and each is bound by its own privacy and data-processing commitments. None of them may use your information for their own advertising.Amazon Web Services (AWS) — hosts our servers, database, encryption keys, file storage and server logs, in the Asia Pacific (Mumbai) region in India. Receives all data you store in MUNI, encrypted as described in section 2.Vercel — hosts the MUNI website and provides cookieless, aggregated page-visit statistics (Vercel Analytics). Processes your IP address and browser information when you visit the website.PostHog (United States) — product analytics and session recordings. Receives the product events described in section 1 and whether you have an active subscription, linked to a random MUNI account ID once you sign in (visits before you sign in are anonymous). PostHog never receives your email, username, balances, holdings, portfolio amounts or net worth, and click tracking never records the text you click on. Session recordings are masked before they leave your device: on the website, all text on every page you see after signing in is hidden, and on the sign-in, sign-up and subscription pages, numbers, email addresses and anything you type are hidden; your photos are never captured. In the app, only the sign-in, sign-up and subscription screens are recorded, with your email and anything you type hidden, and recording stops as soon as you are signed in. PostHog uses your IP address to estimate your approximate location (such as country and city).Stripe — subscription billing and payments. Receives your email address and MUNI account ID. You enter your card details directly on Stripe's secure payment page; MUNI never sees or stores your card number.SnapTrade — brokerage connections, only if you link a brokerage. Receives an anonymous MUNI account ID (never your name or email) and returns read-only account and holdings data. When you disconnect, delete your account, or your subscription ends, we ask SnapTrade to delete your connection.Resend — delivers our emails (sign-in codes, password-reset codes, subscription confirmations and receipts). Receives your email address and the content of those emails, which for receipts includes the amount paid.Expo, Apple and Google — deliver push notifications, only if you enable them. Receive your device's push token and the notification text, which may include an asset's ticker and percentage change or a friend's username.Alchemy and mempool.space — read public blockchain balances, only if you track a crypto wallet. Receive the wallet's public address.RentCast and Bayut (via RapidAPI) — property value estimates, only if you add a property and request an estimate. Receive the property's address or area and details such as bedrooms and size, but not your name, email or any account identifier.Apify (Chrono24 market data) — watch value estimates, only if you add a watch. Receive the watch's brand, model and reference number, but not your name, email or any account identifier.Content and image providers — to display asset logos, avatars, map graphics and news, your device loads images and feeds directly from providers such as Financial Modeling Prep, CoinGecko, Parqet, UI Avatars, Google, jsDelivr and rss2json. As with any web request, these providers see your device's IP address and the item requested (for example a ticker symbol or a username).Market data (Financial Modeling Prep and others) — our servers request public prices and news by ticker symbol only. No information about you is sent.We may also disclose information if required by law, court order or a valid request from a government authority; to protect the rights, safety or property of MUNI, our users or others; or to a successor business if MUNI is merged or acquired, in which case this policy will continue to apply to your information.
6. Where your information is stored and international transfersMUNI's servers, database and file storage are hosted by AWS in the Asia Pacific (Mumbai) region in India. If you use MUNI from outside India — including from the United Arab Emirates, the European Union, the United Kingdom or the United States — your information is transferred to and stored in India.Some of the providers in section 5 process the limited data they receive in other countries, including the United States and Canada. Where required, we rely on the data-processing terms and standard contractual clauses these providers offer to protect transferred data.
7. How long we keep your informationWe keep your account and financial data for as long as your account exists.If your paid subscription or free trial ends, we disconnect any linked brokerage, ask SnapTrade to delete your connection, and delete the holdings that were imported from it. Information you entered yourself is kept so it is there if you return.When you delete your account, your data and uploaded photos are permanently deleted immediately. Encrypted database backups are kept for up to 7 days and then overwritten.Server logs, which can contain your account ID and the email address a message was sent to, are deleted automatically after 30 days.Analytics events already sent to PostHog (which are tied only to a random account ID), billing records Stripe must keep for tax and accounting purposes, and support emails you sent us are not removed by account deletion. You can ask us to delete your analytics events and support correspondence.
8. Your choices and rightsDelete your account at any time in the app or on the website: Profile → Settings → Delete Account. Deletion is immediate and cannot be undone. Any active subscription is cancelled so you are not billed again.Change your username, and change or remove your photo, bio and location, in Edit Profile; make your profile private in Settings; disconnect brokerages and remove wallets at any time; and turn notifications or Face ID off in Settings or your device settings.Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy of it in a portable format, restrict or object to how we use it, and withdraw any consent you have given. To exercise any of these rights, email support@munitheapp.com from the email address on your account. We will respond within 30 days and will not charge you or treat you differently for exercising your rights.If you are not satisfied with our response, you can complain to your local data protection authority — for example, the UAE Data Office, a data protection authority in the EU, or the UK Information Commissioner's Office.
9. Legal bases for processing (EU, UK and UAE users)MUNI is the controller of your personal information. We process it on these legal bases: to perform our contract with you (providing the app and your subscription); our legitimate interests in keeping MUNI secure, understanding how it is used, and telling you about MUNI, which we balance against your rights; your consent, for optional features such as notifications, Face ID, brokerage and wallet connections, and automatic spending capture, which you can withdraw at any time; and compliance with legal obligations.Your financial information is sensitive. We process it only because you choose to add it or connect it, and only to provide MUNI to you.
10. United States residentsIn the last 12 months we have collected these categories of personal information: identifiers (email address, username, account ID, push token); financial information you add or connect; internet or other electronic network activity (the product analytics and masked session recordings described above); and approximate location (such as country and city) estimated from your IP address by our analytics provider.We do not sell your personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for any purpose other than providing MUNI to you. Residents of California and other states with consumer privacy laws can request access, correction or deletion as described in section 8. We do not respond to browser "Do Not Track" signals, but we do not track you across third-party websites.
11. Cookies and local storageOn the website we use a small number of strictly necessary cookies to keep you signed in: an access token and a refresh token (both HttpOnly, so page scripts cannot read them) and a cookie that only records when your session needs renewing. Our analytics provider PostHog uses its own cookies and browser storage to recognize repeat visits. We use browser storage to remember preferences such as currency, language and whether balances are hidden.In the mobile app, sign-in tokens are kept in the device's secure storage. A short-lived copy of your recent net worth is cached on the device so the app opens quickly; it is cleared when you sign out.We do not use advertising cookies, tracking pixels or cross-site trackers. You can block or delete cookies in your browser settings, but you will need to sign in again and some features may not work.
12. ChildrenMUNI is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, contact us and we will delete it.
13. Changes to this policyIf we change this policy, we will post the updated version here and change the "Last updated" date. If a change materially affects how we handle your information, we will notify you in the app or by email before it takes effect.
14. Contact usFor privacy questions or requests, email support@munitheapp.com.
← Back to MUNI