Privacy Policy
App: Витрати родини (Family Spendings)
Effective: 20 August 2026, updated 15 October 2026
Contact: mono.vytraty@gmail.com
Мова: українською
In short
We do not receive your statement or your bank key: the app talks to the bank directly from your phone, and the statement stays on the device. There are no ads or trackers in the app; the only thing we receive is the short technical event log described below.
Everything else is turned on by you, and each case is described below: air raid alert status and notifications (on iPhone our server then stores technical delivery addresses and the number of your region or district), syncing categories and notes through your iCloud, and an encrypted copy of your keys in iCloud. On Android a copy of your keys, family members’ records and your own categories in your Google backup is on from the start and can be turned off in the app.
What data the app processes
Your Monobank access key (token). You create it yourself at the bank, or let the app create it for you. On iPhone it is stored in the Keychain – the iOS system secret store, the same place your phone keeps passwords. It never reaches us.
On iPhone the key does not leave the device by default: it is excluded from backups and from iCloud. In Settings → Security & data → “Keys in iCloud” you may allow synchronisation via iCloud Keychain – then your keys become available on your other devices signed in with the same Apple ID. The switch covers both your own key and the keys of family members you added to “Family”. In iCloud Keychain the data is end-to-end encrypted: neither Apple nor we can see it. The switch stays off until you turn it on yourself.
On Android the key is stored encrypted, and the encryption key is held by Android Keystore – the phone’s system secret store.
Keys in Google (Android only). So that you do not have to connect everything again after replacing your phone or reinstalling the app, the app puts a small block into your Google backup: your key, the keys and records of family members from “Family” (the names and settings you gave them), your own categories and the date your promo code is valid until. Your statement is not in it. End-to-end encryption of this block applies if the phone has a screen lock set (PIN, password or pattern): then neither Google nor we can read it. The switch is on from the start. You can turn it off in More → Security & data → “Keys in Google”, and the copy will be erased.
Your account statement. Transactions, amounts, merchant names, balances, cashback. The app receives them directly from the official Monobank Personal API and stores them in the app’s files on the device, protected by system encryption. This data is not transmitted to us, nor to any third party.
Your settings. Spending limits, category corrections, language choice, app-lock settings. Stored on the device.
Categories and notes on several devices. By default, category rules, corrections of individual operations, your own categories and notes on operations stay on the device. In Settings (“Categories and notes in iCloud”) you may allow them to sync between your devices signed in with the same Apple ID. They are then stored in your private iCloud database: we have no access to it. Merchant names and note texts are kept in encrypted fields; the encryption becomes end-to-end if you have Apple’s Advanced Data Protection turned on, otherwise Apple holds the encryption keys. Your statement, amounts, balances and bank key are not part of this sync. The switch stays off until you turn it on yourself.
Keys of family members added to “Family”. If you add a family member, their key and their statement are stored on your device the same way as your own. The person creates that key themselves and hands it to you voluntarily; they can end the access at any time by disabling that key in their dashboard at api.monobank.ua.
Subscription. Payment goes through the App Store on iPhone and Google Play on Android, not through us. We do not see your card number or other payment details: the store handles them. The app asks the system one thing: whether an active subscription exists. The answer is stored on the device. All that reaches us is the subscription state in one word (for example, trial, month or year) and whether a purchase went through, as part of the event log described below. You can cancel the subscription on iPhone in your Apple ID settings → “Subscriptions”, on Android in Google Play → “Payments & subscriptions”.
On Android you can activate our promo code. For a personal code the app shows a 5-character request code – a short fingerprint of your accounts, with no name and no numbers in it. If you send it to us, we see only those 5 characters.
What the app does not do
- sends us neither your statement, nor amounts, nor your bank key;
- uses no advertising identifiers, trackers or third-party analytics libraries; the only thing that reaches us is the short technical event log described below;
- shows no ads;
- neither shares nor sells data to third parties;
- has no access to money movements: the Monobank key is read-only – it cannot transfer or withdraw money.
Event log
The app keeps a short technical log (the latest 200 entries): when a refresh happened, how many transactions were loaded, which network errors occurred. It contains no key, no amounts, no merchant names, no personal names.
This log is stored on the device. You may send it to us manually: Settings (on Android – the More tab) → Support and feedback → “Report a problem or idea” (on Android – “Write to the developer”).
A short part of this log is sent to us automatically (since version 1.5): the steps of connecting the bank (the bank's page opened, going to monobank and coming back and how many seconds that took, key accepted or rejected, first month on screen, and on Android also why the app closed in the middle of this step: low memory, stopped by the system or closed by you), app launches, subscription state and purchase outcome, adding a family member, errors by class (network, bank). It travels with a random device code the app creates on first launch – the same “Support code” shown in Support and feedback. It is not linked to your Apple ID, Google account, advertising identifiers or other apps, and it changes after a reinstall. These records contain no statement, amounts, categories, merchant names, bank key, personal names, region or IP address. Raw records are kept for 90 days on our server (Cloudflare); after that only daily totals without any device code remain. If your store country is in the European Union, the European Economic Area, the United Kingdom or Switzerland, the records are not sent at all. To delete the records of your device, write to [email protected] and quote your support code. If on the bank connection step you tap “Having trouble? We'll help” and then “Message us on Telegram”, your support code goes to our support bot together with your first message, so we can see where exactly you got stuck. You send it yourself when you start our bot in Telegram. This log is temporary: it exists to see where newcomers get stuck while connecting, and it will be switched off.
Notifications
The app may show local notifications – a spending limit exceeded, worrying events in “Family”, cashback advice. They are generated on the device and pass through no servers.
Air raid alert notifications (off until you turn them on yourself). Then the phone receives a notification when an alert starts in your region or district and when it ends, even with the app closed. On Android the phone subscribes to a shared channel for its region or district in Google’s notification service; we keep no list of subscribers. On iPhone Apple delivers notifications only to the address of a specific device, so the phone sends us the number of the chosen region or district and the addresses issued by Apple: for notifications and for the alert card on the lock screen. They contain no name, no phone number and no bank key, and they may change, for example after the app is reinstalled. The record is kept while the app confirms it at launch and disappears after a month without launches or as soon as you turn notifications off. The notification itself contains only the alert status and the name of the region or district, nothing personal. The app shows the exact status from the public alert file.
Storage and deletion
Data stays on the device until you delete it yourself.
- “Forget key and data” (Settings → Security & data, on Android – the More tab) erases the key, the statement and notes from the phone. If “Keys in iCloud” is on, the key disappears from all your Apple devices. On Android this action also erases category rules, spending limits, “Family” and the copy of keys in Google. On iPhone it currently keeps spending limits, categories and “Family”: you can remove family members with the “Remove from family” button on each person’s card.
- If you turned on “Categories and notes in iCloud”, first tap “Delete my data from iCloud” in the same place: this removes them from your iCloud and turns off sync on all your devices.
- Deleting the app erases the statement and the settings, but not the key: on iPhone the key (together with family members’ keys) stays in the Keychain so that you do not have to connect the bank again after reinstalling, and on Android – in the Google copy, if Google backup is turned on on the phone and “Keys in Google” is not turned off. To erase the key as well, use “Forget key and data” first.
We keep no copies of your statement or settings, so they cannot be restored after deletion.
After the app is deleted, the access key remains valid at the bank until you revoke it in the cabinet at api.monobank.ua. The bank keeps one personal key per person: while it is active, no new key is issued.
Children
The Monobank Personal API is unavailable to customers under 16, so the app is not intended for younger children. Children’s account data is accessible only from a parent’s bank account.
Third-party services
The app connects to the official Monobank API (api.monobank.ua) – for your statement and exchange rates – and to the App Store or Google Play to check or purchase a subscription and to find out whether a new version is out (that request contains nothing about you). There are no analytics libraries or ad networks in it.
If you turn on “Keys in iCloud” or “Categories and notes in iCloud”, the data is stored in Apple’s iCloud. On Android, while “Keys in Google” is on, the app connects to Google’s Block Store service.
For air raid alert notifications the app uses a delivery service: Firebase Cloud Messaging by Google on Android and the Apple Push Notification service on iPhone. On Android the app registers with Firebase Cloud Messaging at launch, even when alerts are off; notifications arrive only once you turn them on. The app does not use Google analytics.
Air raid alert status (off by default). If you turn this indicator on in Settings (on Android – the More tab), the app, while it is open, reads every 20 seconds a small public file with the alert status by region from our website (vytraty.app/alerts/v2.json). We refresh that file as soon as UkraineAlarm, the official API of the “Air Raid Alert” app, reports a change, and without such a report we check at least once every minute and a half; the app itself never contacts UkraineAlarm. The file is the same for every user, and the request contains neither your region, nor your name, nor your bank key, nor anything from your statement. We keep no visit logs of our own. Cloudflare keeps technical server logs, which may also include the chosen region or district when you subscribe to notifications, for up to seven days to track down failures; we do not combine them with anything and do not use them for analytics. Cloudflare handles the request under its own policy, as with any website. You pick the region or district from a list yourself; the app never uses location and never asks for that permission. Family members’ regions are stored on your device only. While alert notifications are off, the app checks nothing in the background. Alert data: UkraineAlarm.
Website, testing and news
The vytraty.app website sets no cookies and has no ads, trackers or forms. Visits are counted by Cloudflare Web Analytics: without cookies and without following individual people, we see only overall page view numbers and where visitors came from. Links from the site to the App Store and Google Play are tagged with the name of the source (for example, threads), so that we can see which post worked; these tags contain nothing about you. The site loads its fonts from Google Fonts, so your browser also contacts Google. The cashback advisor on the site processes an uploaded file only in your browser and never sends it anywhere. If you choose to join the Android testers' Google Group or subscribe to our Telegram channel, your address or account is held by Google or Telegram respectively under their rules; we only see the member list and post there rarely and to the point: updates, short how-to videos, cashback day. To unsubscribe, leave the group or the channel.
Independence from the bank
Family Spendings is not an app, service or product of Monobank and is not affiliated with the bank. It is a third-party app that reads your statement through the official Personal API with a key you create yourself.
Changes
If this policy changes, the new revision will appear at this address and the date above will be updated. Changes that affect data processing will additionally be explained in the app itself.
Questions
mono.vytraty@gmail.com