Privacy Policy

This Privacy Policy explains how Code Colonel ("Code Colonel", "we", "us", or "our") collects, uses, stores, and shares information when you use the Monegro mobile application ("Monegro" or the "App"). By creating an account or using Monegro, you agree to the collection and use of information as described in this policy.

1. Information we collect

We collect the following categories of information when you use Monegro:

• Account information: your name, username, email address, phone number, country, and password (stored in hashed form — we never store your plain-text password).
• Financial entries you create: expenses, income, budgets, categories, recurring transactions, and any notes or receipts you attach to them.
• Group and social data: friends you connect with, groups you join, shared expenses, chat messages within the app, and money-transfer records between users.
• SMS transaction data (optional): if you enable SMS auto-import, Monegro reads bank transaction SMS on your device to detect and suggest expenses. This is only processed when the feature is turned on in Settings, and you review each detected transaction before it is saved.
• Payment and subscription metadata: if you subscribe to a paid plan, payment processors share limited metadata with us — such as payment status, order ID, subscription plan, and amount. We do not receive or store your full card number, UPI PIN, or net-banking credentials; these are handled entirely by our payment processors.
• Device and usage information: device type, operating system version, app version, and crash/error logs used to diagnose and fix issues.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the core features of Monegro;
• Process subscription payments and manage your subscription status;
• Send you account-related notifications (such as budget alerts, friend requests, and settlement reminders);
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Respond to support requests sent to codecolonel@gmail.com;
• Improve app stability and performance based on crash reports.

3. Payment processing & third-party sharing

Monegro uses third-party payment gateways — Cashfree Payments and PayU — to process subscription payments. When you make a payment, your payment details (such as card, UPI, or net-banking information) are collected and processed directly by Cashfree and/or PayU under their own privacy and security policies. We only receive confirmation of payment status and the minimum transaction metadata required to activate your subscription.

We do not sell your personal data to third parties. We do not share your financial entries, chat messages, or contact list with any third party for advertising purposes. Data may be disclosed if required by law, to enforce our Terms & Conditions, or to protect the rights, safety, or property of Code Colonel, our users, or the public.

4. How we store and secure your data

Your data is stored on secure cloud database infrastructure with access restricted to authorized systems and personnel only. We use industry-standard practices to protect your information, including:

• Encryption of data in transit using HTTPS/TLS;
• Password hashing using the Argon2id algorithm — we never store plain-text passwords;
• Token-based authentication with automatic session expiry;
• Rate limiting and account lockout after repeated failed login attempts.

While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

5. Data retention & deletion

We retain your account and financial data for as long as your account remains active. You can request deletion of your account and associated data at any time using the "Delete Account" option inside the app, or by emailing codecolonel@gmail.com. Once a deletion request is confirmed, your account is deactivated immediately and permanently deleted from our systems within 30 days. You may also request an export of your data by contacting us at the same email address.

6. Your rights

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information via your in-app profile;
• Request deletion or export of your data, as described above;
• Withdraw consent for optional features, such as SMS auto-import, at any time from Settings.

To exercise any of these rights, contact us at codecolonel@gmail.com.

7. Children's privacy

Monegro is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page. Continued use of Monegro after changes are posted constitutes acceptance of the updated policy.

9. Contact us

If you have questions about this Privacy Policy or how your data is handled, contact us at codecolonel@gmail.com. Code Colonel is based in Delhi, India.