Privacy Policy

Last updated: 2026-07-07

Summary

Moolot is a personal-finance tracking app. This policy explains what information we collect, how we use it, when we share it, and the choices you have.

Information we collect

• Account information: username, email address (if provided), and authentication-related data.
• Financial data you enter: accounts, cash entries, credit cards, securities holdings (e.g., symbols, quantities, cost basis), and related details you submit in the app.
• Imported financial data (optional): if you choose to import from a third-party broker report (e.g., Interactive Brokers Flex reports), we process the report and store the imported cash and holdings in your account.
• Usage and technical data: basic server logs (e.g., IP address, timestamps, request paths) used for security and troubleshooting.

How we use information

• Provide the service: store and display your financial records within your account.
• Market data display (optional): look up market quotes for symbols in your holdings to display estimated market values.
• Security: protect accounts, prevent abuse, and investigate suspicious activity.
• Support and reliability: debug errors and improve performance.

How we share information

• No sale: we do not sell your personal information.
• Service providers: we share information with service providers that help us operate the service (for example, hosting and database providers). They may process data on our behalf to provide infrastructure and related services.
• Market data providers: when you view holdings with symbols, the service may request quotes from third-party market data providers. These requests may include the symbols requested and standard network metadata (such as IP address) needed to deliver the response.
• Legal and safety: we may disclose information if required by law or to protect the rights, safety, and security of the service and its users.

Broker import tokens and secrets

If you choose to import from a broker report, you may provide a token or similar secret to download the report. The service is designed to use the token only to complete the import and does not need it to provide ongoing tracking. Do not reuse secrets across services, and keep your tokens confidential.

Data retention

We retain your information for as long as your account is active or as needed to provide the service. You can delete content by removing records in the app. You can also request account deletion, which is intended to remove your account and associated data from our systems, subject to limited retention for security, legal compliance, and dispute resolution.

Your choices

• Access and update: you can update certain account information via your account settings.
• Deletion: you can request deletion of your account and associated data.
• Cookies: the app uses essential cookies for login/session management.

Security

We use reasonable administrative and technical safeguards designed to protect your information. No system can be guaranteed to be 100% secure.

Contact

Questions or requests (including account deletion): contact the service operator through the project's support channel or repository contact.