Privacy notice

Data controller / operator: Sabeel Kadar (MoneyMaze). Privacy contact: Sabeel_moh@hotmail.com. We handle personal information in line with the UK GDPR and the Data Protection Act 2018.

MoneyMaze stores your email, profile preferences (such as currency and country), the contracts you enter, their price history and any support messages, so we can provide the service. We use it to perform our agreement with you (the service) and, for optional partner alerts, your consent.

MoneyMaze currently uses no AI. Your contract details are not sent to any AI service.

Every contract always belongs to the person who created it. Contracts are private by default; family members only see contracts you explicitly choose to share. Removing a member, or a member leaving, ends their access immediately. If you delete your account, your contracts are deleted, including ones you shared. If you own a family and delete your account, the family is closed and other members keep their own contracts privately.

Deal prompts may show a “Compare deals” button. It only opens an external comparison site when you click it, and MoneyMaze may earn a commission if you switch. We send partners no contract details, amounts, dates, names, emails or account identifiers. When you click, we record only the contract type, country and a random reference so commissions can be matched; this is never linked to your account.

MoneyMaze uses no advertising pixels, analytics trackers or tracking cookies — only essential session storage to keep you signed in. Partner sites set their own cookies once you visit them, under their own privacy policies. Partner deal alerts are only sent if you opt in under Settings.

We use service providers to run MoneyMaze: Lovable (hosting and database). We do not sell your personal information.

Access to contract records is enforced by database security rules, not just by the app's screens. Those rules only let the owner, and family members a contract is shared with, read it; there is no administrator exception. The admin area can only call summary functions that return totals, and any group smaller than five people is hidden. Admin actions are logged.

Active accounts: your personal and contract information is kept while your account remains active, subject to data protection requirements.

Account deletion: when you delete your account, your personal information and associated data are deleted from active systems immediately. Residual copies in automated database backups expire through the normal backup cycle, within 30 days. Certain information may be kept where legally required or needed to establish, exercise or defend legal claims.

Anonymous statistics: we may keep genuinely anonymised, aggregated statistics — total and active users, engagement trends, contract categories, country-level adoption, feature use and overall partner click counts. These contain no personal identifiers and cannot reasonably identify you. Business reporting never uses individual users' contract records.

You have the right to access, correct, delete, restrict or object to processing of your information, to data portability, and to withdraw consent at any time. You can export your data, change reminders and delete your account in Settings or on the account deletion page. For any other request, email us; we aim to respond within one month.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

Data is encrypted in transit and access is limited by database security rules. Only import information you have permission to share.