Money’s Tight: Privacy Policy
Version 1, 6 November 2026. In use from the start of testing; to be reviewed by a lawyer before public launch.
Money’s Tight helps you see where your money goes. To do that it handles some of the most personal information there is: what you buy, what you earn, and what you owe. So our rules are simple:
- We hold as little as we can.
- What we hold is encrypted, and kept in Australia.
- We never sell your data, or use it for advertising. Not to anyone, not ever.
- You can delete everything, at any time, from the app.
Who we are
Money’s Tight (moneystight.com.au) is run by Curious Ventures Pty Ltd (ABN 40 117 933 963), Australia. Contact us at peterstyles@fastmail.fm.
What we hold, and why
| What | Why | How it’s kept |
|---|---|---|
| Receipts you scan or upload: the store, date, items, prices, totals and categories, and what Claude read from them | To show your spending, check value for money, and remember prices | Encrypted, in your household’s own database |
| Photos of your receipts | So you can see and check them later | Encrypted with your household’s own key |
| Bank statements you import: dates, amounts, descriptions and categories of transactions | To match receipts to payments and summarise your spending | Encrypted, in your household’s database; the file you uploaded is kept encrypted too |
| Your household profile (only if you fill it in): how many adults and children, postcode, whether you have a car, how much time you have for cooking, kitchen equipment, and anything else you choose to tell us | So ideas fit your life | Encrypted |
| Ideas, quotes and recommended work, your wishlist and what you decided about each | To follow up and remind you | Encrypted |
| Reviews you write of businesses: stars, an optional comment, and (only if you choose) what you paid | To help other people | See “Reviews” below |
| How much of Claude your household used each month (counts of requests and tokens) | For your monthly allowance and, later, billing | In our accounts database |
| Your sign-in | So only you can get in | See below |
| Your phone’s notification token (only if you allow notifications): a code Apple gives your phone | So a good deal on your wishlist can reach you. The notification itself says only that there’s something to see, never what or how much | In our accounts database; deleted when you sign out or delete your account |
What we don’t hold: - No names, email addresses or phone numbers. Sign in with Apple is set up so that we don’t receive your name or email. - No passwords. We use passkeys and Sign in with Apple, and keep only the passkey’s public key and Apple’s anonymous identifier for you. - No full card numbers. At most the last four digits printed on a receipt. - No customer details from invoices. When we read an invoice, we’re told not to record names, addresses, phone numbers, vehicle registrations or account numbers. - No tracking. No advertising identifiers, no third-party analytics, no tracking across other apps or websites.
Sessions. When you sign in we give your device a random token and store only a scrambled (hashed) form of it. A session lapses if it isn’t used for 30 days.
How your data is protected
- Your household’s own key: your household’s data is encrypted with a key of its own, and that key is itself encrypted by a master key held in a key management service. No one can read your data from the disk, or from a backup, without both.
- Kept in Australia: data is stored on Amazon Web Services servers in Sydney, Australia. Backups are encrypted, kept in Australia, and deleted after 30 days.
- Encrypted in transit: everything between your phone or browser and the service is encrypted (HTTPS).
- Access: only the people who run the service can reach the servers, and they would only do so to keep the service running or to look at reviews that have been reported.
Who else handles your data
- Claude, through Amazon Bedrock in Australia: your receipts and their photos, your bank transactions and the questions we ask about them are processed by Claude (made by Anthropic) through Amazon Bedrock, in Sydney and Melbourne. This data stays in Australia. It isn’t used to train models, and is deleted within 30 days on the same terms.
- Claude’s web search, through Anthropic in the United
States: some features search the web for current prices:
checking an expensive purchase, a price check in a shop, a quote check,
second quotes, bill comparisons, cheaper options in your monthly review,
and your wishlist. For these, the details being looked up are sent to
Anthropic’s API in the United States. They include:
- the products or work in question, and what was quoted or paid for them
- the business’s name
- your suburb or postcode
- Apple: if you sign in with Apple, Apple confirms who you are to us without sharing your name or email. Notifications are delivered through Apple.
- Amazon Web Services (Sydney) stores the encrypted data. It can’t read it: the keys are held in AWS’s key management service under our control, and are only used by the Money’s Tight service.
We don’t share your data with anyone else, and we never sell it.
If you use Money’s Tight without an account
The iPhone app can also work on its own, with your own Claude API key. Then: - your receipts are kept on your iPhone and in your own iCloud account, not with us - the app sends them straight to Anthropic using your key
We never see them.
Reviews of businesses
When you review a business (for example, a mechanic you used), other Money’s Tight users can see: - your stars - your comment, if you wrote one - what the work was - the month
Prices. What you paid is shown only if you choose to share it, as the exact amount or as a range. It’s only possible for receipts matched to your bank statement, so prices are real. Totals for a business are shown as rounded ranges, and only once three or more people have shared a price.
Your name isn’t on a review. Reviews don’t show your name or anything that identifies you. Inside our systems, a review is linked to your household by a code made from your household’s identifier. That keeps it to one review per business per household. It also means the people who run the service could, with access to the systems, work out which household wrote a review. We don’t do this except to deal with abuse.
Checking comments. Before a comment is shown, Claude checks it for personal details, abuse, and claims that could be defamatory. Any user can report a review. Once several households have reported it, its comment is hidden until we’ve looked at it.
When you delete your account, your reviews are deleted too.
Your choices and rights
- See and correct: everything we hold about you is in the app and on the web page, and you can change or delete any of it there.
- Delete your account: in the app (Settings › Delete
My Account) or on the web (Account). Here’s the order:
- We destroy your household’s key first, so any copy of your data, including in backups, can never be read again.
- We delete your data, photos, reviews and sign-ins straight away.
- Encrypted backups made before then expire within 30 days.
- Questions or complaints: contact us at peterstyles@fastmail.fm. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children
Money’s Tight is for adults. We don’t knowingly hold information about children beyond what an adult chooses to tell us about their household (for example, how many children live there).
Data breaches
If a breach of your information is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before it takes effect.