Privacy Policy
The short version. Your financial data never leaves your device. We hold your email address and licence key so we can give you access, plus a small amount of technical data to stop licence keys being shared. Nothing else.
1. Who we are
MuntLab is operated by Banextech BV, registered in the Netherlands. KvK 98098802, VAT NL868357844B01. You can reach us at [email protected]. For the purposes of the GDPR, Banextech BV is the data controller.
2. Your financial data
All your financial data, meaning transactions, budgets, goals, income, net worth entries and settings, is stored only on your own device in your browser's localStorage. We never receive it, store it, or process it on any server.
Your bank statement is read in your browser. It is not uploaded. You can disconnect from the internet after the page has loaded and the app still works.
Because this data never reaches us, we cannot recover it for you. Clearing your browser data deletes it permanently. Export a backup from Settings if that matters to you.
3. What we do collect
| What | Why | Legal basis |
|---|---|---|
| Email address | To send your licence key and reach you about your account | Performance of a contract |
| Licence key, plan and dates | To give you access to what you signed up for | Performance of a contract |
| Browser fingerprint (a hash of language, screen size, timezone and CPU core count) | To detect licence keys being shared widely. It contains no personal identifiers and cannot identify you on its own | Legitimate interest |
| Date your app last checked its licence | To see whether the product is actually being used, so we know what to improve | Legitimate interest |
We keep only the most recent licence check date. We do not keep a history of when you open the app, and we do not record what you do inside it.
4. Licence validation
When the app starts, it sends your licence key and the browser fingerprint described above to our server so we can confirm your access is valid. No financial data is included in that request.
5. Analytics
We use Cloudflare Web Analytics on our website. It sets no cookies and collects no personal data, only aggregate figures such as page views and referring sites. See cloudflare.com/privacypolicy.
6. Who else processes your data
- Cloudflare, for hosting and for storing licence records. Data is held in the EU where Cloudflare's routing allows.
- Resend, to deliver emails such as your licence key.
- Lemon Squeezy, to process payments. They handle card details, we never see them. See lemonsqueezy.com/privacy.
We do not sell your data, share it for advertising, or pass it to anyone outside this list.
7. How long we keep it
We keep your email address and licence record for as long as your licence is active, and for up to 12 months afterwards in case you return or ask for a copy of an invoice. After that it is deleted. You can ask us to delete it sooner.
8. Your rights
Under the GDPR you can ask us to show you the personal data we hold about you, correct it, delete it, restrict how we use it, or send it to you in a portable form. You can also object to processing based on legitimate interest.
Email [email protected] and we will respond within 30 days. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Your financial data is on your device, so you delete that yourself at any time in the app under Settings, Danger Zone, Clear all data.
9. Changes
If we change this policy we will update the date at the top. Material changes will be announced by email to active licence holders.