Keeping your money and data safe

We built MoneyLoop to work without ever touching your bank account. Here's how we protect your data.

Questions about security? Write to us anytime.

No bank passwords

MoneyLoop doesn't connect to your bank account or ask for your login. We work from the bank texts you already receive.

Nobody can move money through MoneyLoop
We don't store your bank card details
Only the last 4 digits are shown, to tell accounts apart

The texts we read

We only process financial texts and ignore everything else.

Debit and deposit texts from banks
Mobile wallet texts
InstaPay notifications
Texts are filtered on your phone first. Only financial texts reach our servers, where the amount, merchant and date are read automatically
One-time passcode (OTP) texts never reach our servers: a filter on your phone blocks them before they leave it

Encryption

Your data travels between the app and our servers over an encrypted connection.

Encryption in transit
Encryption at rest on Google Cloud, with AES-256
App lock with Face ID or fingerprint

Where your data lives

Your data is stored on Google Cloud through Firebase, in data centres in Europe: Belgium and the Netherlands.

Your controls

You decide what gets logged and what gets deleted.

Edit or delete any transaction
Turn off text reading at any time
Clear all your data from Settings
Delete your account permanently

Third parties

We don't sell your data. We only use trusted providers to run the service.

Firebase and Supabase: storage, sign-in and notifications
Leading AI providers such as Google, Anthropic and OpenAI: reading texts and receipts, and Shark's answers
Mixpanel, Firebase Analytics and Treebars: app usage stats; Sentry: crash reports
Airbridge and Meta: measuring downloads that come from ads
Apple, Google Play and Paymob: payments, and your card details never reach us

Security questions

Can MoneyLoop take money from my account?: No. There is no connection to your bank account at all.
Do you store my full card number?: No. We only show the last 4 digits as they appear in the bank text.
Do you read WhatsApp or chats?: No. We only process financial texts.
What if I lose my phone?: Your data is kept in your account, and the app lock stops anyone else opening it.
Do you sell my data to advertisers?: We don't sell your data to anyone.
Can MoneyLoop staff see my transactions?: No. Our team only looks at your data when you ask for support, and only as far as needed to fix the problem.
Does Shark send my data elsewhere?: Shark sends your question and the transactions it needs to a leading AI provider, such as Google, Anthropic or OpenAI, only to work out the answer. We don't sell your data or use it to train public models.
How do I stop text reading?: From the app's settings, or by revoking the permission in your phone settings.
Can I export my data?: Yes. Export your transactions as a file that opens in Excel.
How long do you keep data after deletion?: When you delete your account in Settings, your data is removed from the database right away, and the recovery copy is wiped automatically within 7 days.
Is in-app payment safe?: Payments go through the App Store, Google Play or a licensed payment gateway, and we don't keep your card details.
Does MoneyLoop work offline?: You can add transactions offline, and they sync when you're back online.
How do I report a vulnerability?: Email the security team at the address below.

Contact the security team

To report a security issue or make a request about your data, write to: info@moneyloop.co