Your data stays yours.

In short

Moity splits expenses between the members of a Moity. The app shows no advertising, uses no tracking tools and sells no personal data.

Data we process

When you use Moity we process only what the service needs:

the display name you choose inside a Moity;
the Moitys, expenses, amounts, currencies, notes and reimbursements you enter;
the receipts you decide to add;
if you choose to sign in, the e-mail address tied to your Apple or Google account, or the one you typed;
the random technical identifiers required for security and synchronization.

Moity works with no account: your Moitys are then reachable only through their invitation code, on this device. Signing in with Apple, Google or an e-mail is entirely optional and serves to find your Moitys again on another device and, if you choose, authorize an assistant connector. Apple sign-in also works with a private address, which you do not need to enter to connect an assistant. We never ask for your Apple or Google account password or your phone number. The first name you choose to display is kept with the account, so it can be offered back to you when you sign in on another device. The optional profile photo stays in your device's local preferences and is never sent to our servers. Access tokens are held in your device's secure storage. Local copies serve the offline mode.

Use and sharing

This data serves only to display, synchronize, secure and export the expenses of your Moity. Members holding the invitation link and their own access can see the shared content of the Moity. Our hosting and e-mail providers process only what hosting, service security and sending sign-in codes require. They are contractually bound to protect that data and may not use it for advertising.

Optional assistant connectors

If you enable a Moity connector in a third-party assistant, such as Claude, you authorize that service to read the Moitys linked to your account and create the Moitys and expenses you request, according to the permissions shown when connecting. Responses may include participant names, amounts, dates, notes, balances and temporary receipt links. This information is then sent to your chosen service and is also subject to its privacy policy. No assistant can access your Moitys without this voluntary connection. You approve this connection in the Moity app with your signed-in account, after local verification using Face ID, biometrics or your device passcode. Moity does not receive or store your biometric data. You can revoke its authorization in Profile → Connected assistants; this blocks future access without deleting information the third party has already received or expenses already saved. Import proposals expire after 24 hours; their content is cleaned up on a subsequent preparation. A technical receipt of saved imports prevents duplicates.

Retention and security

Data is kept as long as the Moity is in use, or until deletion is requested. Traffic is encrypted with HTTPS. Access to a Moity rests on long secrets, stored server-side only as a hash, and receipt links expire automatically.

Your rights

You may request access, correction, export or deletion of your data. Write to us with the code of the Moity concerned. To remove local data only, use Remove in the ⋯ menu of the Moity card; if you are its last person, the app then offers to delete it for good. If you are signed in, you can delete your account at any time from Profile, then Account, then Delete account; shared Moitys remain available to the other members.

Contact

Moity is published by DataWorkers. For any question about this policy, write to us.