MoneyMate Vault Privacy Policy

1. Executive Summary & Privacy Philosophy

At MoneyMate Vault ("we", "us", or "our"), your financial privacy is not merely a feature—it is the foundational architectural pillar of our software. We believe your salary, bank balances, tax identification, and transaction records belong solely to you.

Unlike traditional cloud-based personal finance web services that upload and process your confidential financial ledger on remote multi-tenant servers, MoneyMate Vault is engineered as a 100% On-Device, Offline-First Desktop Application for Microsoft Windows.

2. What Information MoneyMate Vault Handles

To provide comprehensive budgeting, multi-account balancing, compensation management, and financial reporting, MoneyMate Vault allows you to record specific categories of information locally within the application:

3. Why the Data is Used (Purposes of Processing)

Every piece of data processed by MoneyMate Vault is used strictly to execute core financial management features requested directly by the user:

• Personal Finance Management: Calculating real-time account balances, tracking multi-account cash flows, and maintaining an immutable double-entry transfer ledger.
• Salary & Statutory Compensation Tracking: Organizing historical compensation records, calculating statutory employer/employee deductions (EPF/ETF), and computing net salary.
• Financial Analytics & Visualizations: Rendering interactive visual charts (using Chart.js) for expense breakdowns, income vs. expense ratios, and month-over-month trend analysis.
• Budgeting & Alert Monitoring: Comparing actual expenditures against user-defined category caps and bill thresholds to display visual budget warning alerts.
• Statement & Report Generation: Compiling boardroom-grade PDF summaries (via jsPDF) and Excel spreadsheets (via SheetJS) for personal record-keeping, tax preparation, or auditing.
• Backup & Disaster Recovery: Exporting encrypted database packages (.enc) and restoring previous ledgers upon user command.
• Pro Feature Entitlement: Checking license validity via Microsoft Store APIs to unlock unlimited accounts and advanced export tools.

4. Where Your Data is Stored

MoneyMate Vault does not store your financial records in an external cloud database. All persistent application data is stored entirely on your Windows PC file system:

Local Encryption Support

MoneyMate Vault features an optional Security Lock system. If you enable a 4-digit PIN or Master Password in Settings:

• The entire database state is serialized and encrypted on disk using client-side cryptographic stream encoding (Base64 XOR block cipher with your unique key).
• When locked, the raw financial figures cannot be read from the database.json file in plain text.
• Unlocking happens strictly within your PC's local RAM. Your PIN/Password is never transmitted over the internet.

5. Whether Data is Transmitted (Network Communications)

We adhere to an unequivocal policy regarding data egress:

The only network communications that may occur on your PC are:

1. Microsoft Store API Calls: The desktop app invokes native Windows Runtime Store APIs (Windows.Services.Store) to verify whether your Windows Microsoft Account owns a MoneyMate Vault Pro license or active subscription.
2. User-Initiated Google Drive & Cloud Backups: If you explicitly choose to backup your data to Google Drive or a local cloud-synced folder, MoneyMate Vault creates encrypted backups of your financial data and stores those encrypted backup files (.enc) in your Google Drive or designated sync directory. Financial data is encrypted locally on your device before it is uploaded.

6. Third-Party Services & Integrations

To provide complete transparency as required by Microsoft Store and Google API policies, the table below outlines all third-party services, APIs, and dependencies:

6.1 Google API Services User Data Policy & Limited Use Disclosure

MoneyMate Vault provides an optional integration with Google Drive to allow users to securely store, synchronize, and restore encrypted financial backup archives (.enc).

Detailed Google User Data Practices:

• OAuth Scope Requested: https://www.googleapis.com/auth/drive.file (Per-file access restricted solely to files created, opened, or managed directly by MoneyMate Vault).
• Explicit Purpose of Access: We request access to your Google Drive strictly to upload, download, and synchronize your client-side encrypted financial backup archives (.enc) upon your explicit request.
• Zero Access to Other Drive Files: MoneyMate Vault does not, and cannot, read, access, view, modify, or delete any other personal documents, spreadsheets, photos, or files in your Google Drive.
• Client-Side AES Encryption: All financial entries are encrypted locally on your computer with AES-256 before any data is transmitted to Google Drive. Neither Google nor MoneyMate Vault developers have access to your encryption key or plain financial data.
• Local Token Storage: OAuth 2.0 authentication tokens are stored exclusively in your local Windows credential vault on your PC. Tokens are never transmitted to any MoneyMate Vault server or external third-party infrastructure.
• No Secondary Data Usage or Transfers:
  • We do not transfer or disclose Google user data to data brokers or third parties.
  • We do not use Google user data for serving advertisements, retargeting, or promotional profiling.
  • We do not use Google user data to train machine learning or artificial intelligence models.
  • No humans at MoneyMate Vault read or access your Google Drive content.
• Revocation & Data Deletion: You can disconnect your Google Drive integration at any time within MoneyMate Vault settings, or instantly revoke access via your Google Account Security Permissions. You can delete your backup files directly from Google Drive at any time.

7. Microsoft Store Purchasing & Pro Subscription Relationship

MoneyMate Vault is distributed through the official Microsoft Store. When you purchase a MoneyMate Vault Pro subscription or add-on license:

• Payment Processing: All payment transactions, credit card processing, currency conversion, tax calculations, and invoicing are conducted strictly and securely by Microsoft Corporation through your Microsoft Account.
• Payment Data Protection: MoneyMate Vault developers never receive, process, or store your credit card numbers, PayPal credentials, or billing addresses.
• Subscription Management: You can manage, cancel, or renew your MoneyMate Vault Pro subscription at any time directly through your Microsoft Account Services & Subscriptions Dashboard.
• Store Policy Compliance: MoneyMate Vault complies fully with the Microsoft Store App Developer Agreement (Section 10.8 - Financial Information & Pro In-App Purchases).

8. Security Architecture & Encryption

We believe in honest, accurate disclosures regarding our security capabilities. We do not claim security features we have not implemented:

9. User Control & Data Ownership Rights

You possess absolute ownership and control over all information entered into MoneyMate Vault. We provide built-in tools directly within the interface to exercise full control:

• View & Access: Access all historical transactions, salary slips, and bank ledgers at any time without network limitations.
• Edit & Modify: Update account names, balances, category allocations, or salary details at any moment directly from their respective tabs.
• Data Export & Portability: Export your full financial records to structured Excel (.xlsx), printable PDF Reports, standard JSON, or encrypted .enc archives whenever you wish.
• Restore Backups: Seamlessly import previous backups to restore or migrate your data to another Windows PC.
• Permanent Data Erasure (Reset All Data): Navigate to Settings → Reset Database to permanently wipe all stored ledgers, salary history, accounts, and profile info from your computer with one confirmation.
• Uninstallation: Uninstalling MoneyMate Vault via Windows Settings and deleting the %APPDATA%\MoneyMate and Documents\MoneyMate directories permanently purges all local traces.

10. Data Retention & Lifecycle

Because MoneyMate Vault stores data locally on your computer:

• Your data is retained on your hard drive for as long as you maintain the application on your computer.
• We do not enforce any automated data expiration or deletion policies.
• When you delete a transaction or reset the database, the record is immediately removed from the active local JSON database.
• Since we have no copies on remote servers, once you delete your local data, it is permanently erased.

11. Children's Privacy

MoneyMate Vault is designed as a personal financial bookkeeping and salary auditing utility for working professionals and general consumers.

MoneyMate Vault does not knowingly collect, request, or market to children under the age of 13 (or under 16/18 where applicable by local law). Furthermore, because MoneyMate Vault operates entirely offline without telemetry or account registration, no personal data from any user—regardless of age—is ever transmitted to us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in application features, regulatory updates, or changes in Microsoft Store developer policies.

Any updates will be published immediately on this official policy webpage with a revised "Effective Date" at the top. For material changes, an update notice will also be included in the application release notes within the Microsoft Store update package.

13. Contact Channels & Privacy Inquiries

If you have any questions, suggestions, or concerns regarding this Privacy Policy or MoneyMate Vault's data security practices, please contact our dedicated team: