Momo

Privacy Policy

Last updated 12 November 2026

The short version

Momo keeps your budget on your own devices. There is no account, no server of ours that stores your data, no advertising, no analytics and no tracking. We, the makers of Momo, never see your entries, receipts, goals or questions.

Contact

Questions about privacy: support@momobudget.com.

What stays on your device

Everything you put into Momo: entries, amounts, shops, notes, categories, monthly plans, bills, goals, the names of the people in a shared budget, and what Momo learns from your corrections. It is stored in the app’s own storage, which iOS, iPadOS and macOS encrypt with your device passcode, and it is removed when you delete the app or use Settings › Erase everything on this device.

Receipts and the camera

When you scan a receipt or a bill, or choose a photo, the text is read on your device by Apple’s built-in text recognition. Momo keeps the words and numbers it needs (the shop, the date, the amounts and the lines) and does not keep the picture. The camera and your photos are used only when you ask to scan.

Asking Momo

Momo answers questions about your budget from your own records, on your device. For anything else he uses a small open-source AI (Qwen3, run by llama.cpp) that is built into the app and runs entirely on your device. Your questions and your budget are never sent anywhere.

Momo’s voice and sounds

Momo’s little Japanese phrases and the app’s sounds are recordings built into the app. Momo never uses the microphone.

Syncing and shared budgets

If you invite another device or person, your devices sync directly with each other over your local network or Bluetooth (Apple’s Multipeer Connectivity). Every message is sealed with the budget’s own key (ChaCha20-Poly1305), which is created on your device, kept in its Keychain and passed on only in the invitation you share. Nothing passes through a server of ours. Anyone with an invitation can join that budget, so share it only with your own devices and the people you budget with.

Face ID and passcode

If you turn on the lock, your device checks your face, fingerprint or passcode. Momo only learns whether the check succeeded; biometric data never reaches the app.

Purchases

Momo Pro is bought through Apple’s App Store. Apple handles the payment and tells the app, on your device, whether a subscription is active. We never receive your payment details. Apple’s privacy policy applies to purchases.

Exports

If you export your entries as a CSV file, the file is made on your device and goes wherever you choose to send or save it.

This website

momobudget.com uses no cookies, no analytics and no trackers. Our hosting provider keeps standard server logs (such as IP addresses) for a short time for security.

Children

Momo is meant for people managing household money. It collects no personal data from anyone, children included.

Your choices

You can change or delete any entry, leave a shared budget, export your entries, and erase everything on a device in Settings. As we hold none of your data, there is nothing for us to give you or delete on our side; write to us with any question.

Changes

If this policy changes, the new version is posted on this page with a new date. We will never start collecting your budget data without asking you first.

← Back to Momo