Privacy Policy
My Money connects to your real bank accounts through Plaid so you can see your net worth, what you can spend, and where your money goes. That connection is read-only: the app can view your balances and transactions, and it can never move, send, or withdraw money. To use it you sign in with Apple, with Google, or with your Gold Life ID— there is no password at any point. Your bank login is entered in Plaid’s own secure screen, so we — Gold Life LLC, the developer — never see it. Your account data is stored in our own secure backend, not iCloud. We never sell your data or use it for advertising, and you can delete all of it from inside the app.
Your Gold Life ID account
My Money needs an account, so that your financial data is tied to you rather than to one phone, and so that reaching it takes signing in as you. That account is your Gold Life ID: an eight-digit number that never changes, shown on your ID card inside the app. The same ID signs you in to every Gold Life app. There are three ways to sign in to it, and they all reach the same one account.
- Sign in with Apple or Sign in with Google.Apple or Google confirms it’s you with Face ID, Touch ID, or your device passcode. For Sign in with Apple, only your email address is requested (no name scope); this email becomes the email on your Gold Life ID. We never see your Apple ID or Google password. If you use Apple’s Hide My Email, we only ever see the forwarding address Apple creates, never your real one.
- Sign in with your Gold Life ID. Enter your eight-digit number — or any email on your account — and we send a six-digit one-time code to a contact you control. The code expires in minutes and is never reused. There is no password: not one you make, and not one we store.
- Your contacts. Your account always keeps at least one confirmed email address; you may add more emails or a phone number. You choose which of them may receive sign-in codes, and your main email always can — that is what makes it impossible to lock yourself out.
- Face ID. You can turn on Face ID (or Touch ID) to sign in without a code. Your face or fingerprint never leaves your device and is never sent to us — iOS only tells the app whether it recognized you.
- Who runs the sign-in. The sign-in itself is handled for us by Stytch, a company that builds login systems. Stytch receives the sign-in information Apple or Google provides, delivers our one-time codes, and gives us back an ID number that stands for you. Stytch does not receive your bank data.
- What we keep. We store that ID number to know which accounts and transactions are yours, along with your contact addresses so we know where to send a code.
- Signing out. Open the menu and tap Sign out at the bottom of the list. Your data stays in your account, and signing back in brings it back.
Connecting your bank (Plaid)
To show your accounts, My Money links to your bank through Plaid, a regulated financial-data provider. The connection is read-only — it exists only to view balances and transactions. The app has no ability to transfer, pay, or move money.
- Your bank login. When you connect an account, you enter your bank username and password in Plaid’s own secure screen. Those credentials go directly to Plaid — the app and Gold Life never see or store them.
- What Plaid shares with us. Once you connect an account, Plaid provides read-only information — account names, balances, and transaction details — so the app can show your net worth and spending. Plaid holds your bank credentials and handles them under its own privacy policy.
What the app stores, and where
The read-only data Plaid provides is stored in our own secure backend — a Cloudflare Worker and D1 database operated by Gold Life LLC. This is not iCloud; My Money does not use Apple’s iCloud or CloudKit. We never store your bank login credentials — those stay with Plaid. Here is everything we do hold:
- Account and routing numbers: no longer collected.Earlier versions of My Money stored full account and routing numbers, where banks provided them, to display in an account’s details. That feature has been removed: we no longer collect them, and every number stored before this change has been deleted from our systems. The app shows only the last four digits of an account.
- Your accounts and balances. Account names, types, current and available balances, and credit limits.
- Your transactions. The merchant, amount, and date of each transaction, and details your bank includes, such as whether it was online or in a store.
- The choices you make. The categories, nicknames, and personal, business, or investment labels you apply, plus any rules you set so future transactions sort themselves the same way.
How your data is protected
- Encrypted in transit. Everything that travels between the app, our backend, and Plaid is sent over an encrypted connection.
- Encrypted at rest. Our database is encrypted where it is stored by Cloudflare, the company that runs our backend.
- Bank keys never touch your phone.The access token that lets our backend ask Plaid for your data stays on our server. It is never sent to the app, so it can’t be taken from your device.
- Your data is walled off from everyone else’s.Every row we store is tied to your Gold Life ID, and our backend refuses any request that isn’t yours. The one exception is a person you deliberately invite to read your accounts — see Letting someone else see your accounts below — and even then they can only read.
Personal, business, and investment
My Money lets you sort your money into personal, business, and investment — by account and by individual transaction, so a business charge on a personal card still counts as business. The labels you apply are stored with your read-only data in our backend and are used only to organize what you see in the app.
Letting someone else see your accounts
My Money can let another person — a spouse, a parent, an accountant — read your accounts. It is off until you turn it on, and you turn it on one person at a time in the menu, under Sharing.
- How you invite someone.You type the eight-digit Gold Life ID printed on their own card. We never tell you whether that number belongs to a real account — that would turn the screen into a way of hunting for other people’s accounts — so the invitation simply waits until they accept it in their own app. A typo looks exactly like an invitation nobody has accepted, and you can withdraw it at any time.
- What they can see. Your balances, your transactions, your categories, and the recurring charges the app has spotted — read-only. They cannot move money, change anything, connect or disconnect a bank, or invite anyone else. They do not see your sign-in, your contact addresses, or which My Money plan you are on.
- What each of you learns about the other. They see your Gold Life ID and the name on your card, so the app can say whose accounts they are looking at. You see the Gold Life ID you invited and when that person last looked.
- Either of you can end it, any time. How many people you may share with depends on your plan: if your plan changes, shares beyond what it covers stop reading until you upgrade again — they are put to sleep, never deleted. The same is true if your subscription ends altogether: everyone you invited stops reading for as long as you are not subscribed, and can read again the moment you subscribe. We do not keep showing your balances to other people once you have stopped paying, and you do not have to remember to switch anything off. When a share ends we keep the record that it existed and ended, so your own list of who has had access stays honest.
- Deleting takes the shares with it.Erasing My Money’s data ends every share you handed out. Deleting your Gold Life ID also ends any access other people gave you.
Your profile
Your Gold Life ID card holds the details you choose to put on it — your name, the photo you pick, and optionally your phone number and mailing address. These are stored on your device and in your account on our backend, so your card looks the same on every device you sign in to. They are never sent to Plaid, never sold, and never used for advertising. One system feature to know about: as you type your mailing address, the suggestions come from Apple Maps, so what you type in that one field reaches Apple under Apple’s own privacy policy — the same way address autocomplete works across iOS. Every one of these fields is optional: leave them blank, or clear them at any time, and deleting your Gold Life ID deletes them with it.
Your profile photo
If you set a profile photo, you can choose an existing image from your photo library using Apple’s system photo picker, so the app receives only the image you pick and never gains access to the rest of your library. Like the rest of your card, the photo is stored on your device and in your account on our backend, so it follows you to your other devices — and it is deleted with your Gold Life ID.
Explore with sample data
You don’t have to share anything to try My Money. Tap Explore with sample data on the sign-in screen and the whole app fills with a realistic made-up example. No account, and no bank: the figures are invented, nothing is connected, and none of your information is sent anywhere, because there is none of yours in the app yet.
One thing does use the network even here, and we will not pretend otherwise. The sign-in system, Stytch, starts up with the app on every launch — sample data included — and that start-up contacts Stytch and sends it basic technical information about the app and the device. It carries nothing about you, no financial data, and no sample data; it is the login system getting ready in case you sign in. Look around first, and connect a real bank only once you want to.
No ads, no tracking
The app contains no third-party advertising or ad tracking, and we never sell your data or share it with anyone for marketing. Your financial data only ever moves between your bank, Plaid, and our own backend so the app can show it to you — and to anyone you have deliberately invited to read your accounts.
Paying for My Money
Exploring with sample data is free and needs no account. Connecting a real bank needs a paid subscription, and Apple handles the payment. You subscribe in the app, and Apple charges your Apple Account. We never see your card number — it goes to Apple and stays with Apple. All we learn is whether your subscription is active and which plan it is. To view or cancel it, open Settings on your iPhone, tap your name at the top, then tap Subscriptions.
That one fact does a lot of work, so here is what it decides. While your subscription is active you can connect banks, sync, export, and invite people to read your accounts. If it ends, the app goes read-only: your data stays and stays readable, syncing stops entirely, nothing new is written, exporting is off, and anyone you invited stops reading until you subscribe again — at which point everything comes back exactly as it was. Deleting your data always works, subscribed or not. Our Terms of Use set this out in section 4A.
Third parties
Five companies are involved in running My Money. Each one gets only what it needs, and none of them get your data to sell or advertise with:
- Plaid connects to your bank and provides the read-only account and transaction data. Plaid holds your bank login. It handles your information under its own privacy policy.
- Stytch runs the Gold Life ID sign-in. It receives your sign-in information and the ID number that stands for you. It never receives your bank data, balances, or transactions. Stytch handles that information under its own privacy policy.
- Cloudflare runs our backend and stores our database, which holds your accounts, transactions, and the profile details on your Gold Life ID card. Cloudflare is our infrastructure provider and acts only on our instructions, under its own privacy policy.
- Apple confirms who you are through Sign in with Apple, distributes the app on the App Store, and bills your subscription — all under Apple’s own privacy policy. Apple does not receive your bank data.
- Google confirms who you are if you choose Sign in with Google. Google receives only your sign-in — never your bank data, balances, or transactions — and handles it under its own privacy policy.
No one else receives your data.
Deleting your data
You control your data, and you can remove it yourself at any time. Deleting comes in two steps, in this order: first the data an app holds, then the Gold Life ID itself. Both happen immediately.
- Delete one bank. In the menu, open Connected Banks and tap Disconnect. We cut the connection at Plaid and delete that bank’s accounts and transaction history from our backend.
- Where both steps live. Open the menu, tap the gold Gold Life ID button at the top to open your card, then tap Delete Gold Life ID. That opens a screen headed Your Gold Life apps, listing every Gold Life app you have used and what each one still holds for you — for My Money, how many transactions and connected banks.
- Step one — delete My Money’s data. Tap Deleteon the My Money row. We disconnect every bank at Plaid and delete your accounts, transactions, categories, rules, and the access you had shared with other people. Your Gold Life ID, your sign-in methods, and the details on your ID card all stay: this step erases My Money’s data and nothing else.
- Step two — delete the Gold Life ID. Delete my Gold Life ID stays switched off until every app on that list is empty, and the screen tells you which app is still holding you up. Once it is on, it deletes the Gold Life ID itself, the ways you sign in to it, the details on your card — name, photo, phone, and address — and any access other people had given you. Signing in again afterwards gives you a brand-new, empty account.
- How we make sure you meant it. Both steps ask you to type your own eight-digit Gold Life ID, and the alert prints it for you so you are not hunting for it. Deleting the Gold Life ID asks for Face ID as well (or Touch ID, or your device passcode) in the moment before it goes through.
- Other Gold Life apps.Your Gold Life ID is the same account across every Gold Life app, so deleting it ends your sign-in to all of them. My Money can show you what another app still holds, but it can never delete another app’s data — open that app, delete your data there, then come back. If we cannot reach an app to check it, we will not delete your Gold Life ID either: records nobody can sign in to reach are records nobody could ever delete.
- It is immediate. Neither step has a review, a waiting period, a recovery window, or any way to undo it.
- Sign-in access at Apple or Google. Deleting your Gold Life ID ends your account with us. To also stop Apple or Google offering My Money as a sign-in: if you used Apple, open Settings, tap your name, tap Sign-In & Security, then choose My Money under Sign in with Apple; if you used Google, remove My Money in your Google Account under Security.
- Your money is untouched. Deleting removes your data from My Money. It changes nothing at your bank.
- If you’d rather ask us. You can also email adrian@softwarebygl.comand we’ll do it for you. The in-app buttons are faster.
- Asking for a copy in writing. Exporting your transactions is part of the app, so it stops working if your subscription ends — but our duty to answer you does not. Email adrian@softwarebygl.com from an address on your Gold Life ID, ask for a copy of what we hold for you, and we will send it, subscribed or not, at no charge.
How long we keep your data
We keep your data while your account is open, because it is what the app shows you. When you disconnect a bank, erase My Money’s data, or delete your Gold Life ID, that data is removed from our live database immediately — not after a review, and not after a grace period. The one exception is our backups: a copy can remain in an encrypted backup for up to 30 days, after which it ages out and is gone for good. We never restore a backup to bring back data you asked us to delete.
Children
This app is not directed to children.
Changes
We may update this policy from time to time. The “Last updated” date above will reflect any change.
Contact
Questions about this policy? Email adrian@softwarebygl.com, or write to Gold Life LLC, 2491 Dundee Dr, Tallahassee, FL 32308, United States. See also our Terms of Use.