This Privacy Policy describes what personal data we collect in MoneyLog, how we use it, who we share it with and what rights you have over it. It is written based on Peru's Personal Data Protection Law (Law No. 29733) and its regulations. Where relevant we also include rights recognized by the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Data controller
The controller of your personal data is NOVASOFT TECHNOLOGIES S.A.C., identified with Peruvian Taxpayer ID (RUC) 20573154828 and domiciled at Calle Pisac 140, Coop. 27 de Abril, Ate, Lima, Peru. MoneyLog is a product and trademark managed by this company. You can contact us at support@novasoftcorp.com.
2. What data we collect
- Account data: name, email address, phone (optional), password (stored hashed), profile photo if you upload one, preferred language.
- Activity and entry data: activity name, currency, transactions you record (amount, date, description, category, type), members you invite and their roles.
- Attachments: images, PDFs or other files you voluntarily upload with your entries.
- Technical and session data: App version, operating system, device language, IP address, session tokens.
- Access and error logs: connection dates and times, endpoints requested, errors generated, for diagnostics and security.
- Communications: messages you send us by email or from the App for support or complaints.
3. How we use your data
- To provide you the Service: create your account, store your entries, show your totals, generate PDF reports and enable collaboration with the members you invite.
- To authenticate your identity and protect your account, including sending verification codes by email (OTP).
- To operate and improve the App: diagnose errors, monitor performance, prevent abuse and fraud.
- To communicate with you about Service updates, changes to the terms or privacy policy, and responses to your requests.
- To comply with legal obligations or valid requests from competent authorities.
4. Legal basis
We process your data on the following legal bases:
- Performance of the contract between you and NOVASOFT TECHNOLOGIES S.A.C. to provide the Service.
- Your consent when required (for example, for attachments you voluntarily upload).
- Legitimate interest to prevent fraud, ensure the security of the Service and improve the product, balanced with your rights.
- Compliance with applicable legal obligations.
5. Who we share your data with
- Members of your activities: the data you record in an activity is visible to the members you decide to invite, according to their assigned role.
- Service providers: we use cloud infrastructure providers (hosting, storage, transactional email for OTP) that act as data processors under contractual confidentiality and security obligations.
- Authorities: we may disclose data if required by a competent authority under the law, or to protect rights, safety or property.
- We do not sell or rent your personal data to third parties for advertising purposes.
6. Storage and international transfers
Your data is stored primarily on servers managed by cloud providers that may operate data centers outside your country of residence. When this involves an international transfer, we adopt appropriate safeguards (contractual clauses, applicable certifications) to protect your data.
7. Retention
We keep your data while your account is active and for the additional period necessary to comply with legal obligations, resolve disputes or enforce our agreements. When you close your account we will initiate deletion within a reasonable timeframe, unless the law requires us to keep the data for longer (for example, for accounting or tax purposes).
8. Security
We apply reasonable technical and organizational measures to protect your data, including: HTTPS/TLS encryption in transit, password hashing, role-based access control, session tokens with expiration and monitoring. No system is completely infallible; we recommend using strong passwords and not sharing them.
9. Your rights
Under Peru's Law No. 29733 you have the right to access, update, include, rectify, delete, cancel, object and withdraw consent. If you are in the European Union or the United Kingdom you additionally have the rights recognized by the GDPR, including access, rectification, erasure, restriction of processing, portability and objection.
You can exercise these rights by writing to support@novasoftcorp.com from the email associated with your account. We will respond within the applicable legal deadlines. In Peru you may also file a complaint with the National Authority for the Protection of Personal Data (ANPD).
10. Cookies and local storage
On the web and mobile versions we use device local storage (localStorage, SharedPreferences) to keep your session, remember your language and store App preferences. We do not use advertising tracking cookies and do not share your browsing behavior with ad networks.
11. Minors
The Service is not directed to children under 14. We do not knowingly collect data from minors. If we discover that we have collected data from a minor without parental or guardian authorization, we will delete it.
12. Changes to this policy
We may update this Policy when necessary. We will publish the current version inside the App and indicate the date of the last update. If the changes are material we will notify you by reasonable means.
13. Contact
For privacy questions, rights requests or complaints, write to us at support@novasoftcorp.com or NOVASOFT TECHNOLOGIES S.A.C. (Peruvian Taxpayer ID / RUC 20573154828), Calle Pisac 140, Coop. 27 de Abril, Ate, Lima, Peru.