Privacy Policy

Effective Date: April 1, 2026  |  Last Updated: April 1, 2026

Monaith ("we," "our," or "us") is committed to protecting your privacy and the security of your personal and financial information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. We use this information to provide and secure your account.

Financial Data via Plaid

With your explicit consent, we use Plaid Inc. ("Plaid") to securely connect to your bank accounts. Through this connection, we access:

• Transaction history (merchant names, amounts, dates, categories)
• Account balances and types
• Recurring transaction patterns

We use read-only access — Monaith cannot initiate transactions, move funds, or modify your bank accounts in any way. Your bank credentials are handled entirely by Plaid and are never stored on our servers.

Usage Data

We collect information about how you interact with the Service, including features used, nudges received and acted upon, goals set, and general app engagement patterns. This helps us improve the Service and calibrate our AI models.

Device Information

We may collect device type, operating system version, unique device identifiers, and IP address for security, fraud prevention, and service optimization purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Analyze your spending patterns using our AI models to generate predictive insights
• Deliver personalized nudges aligned with your stated financial goals
• Detect and prevent fraud, unauthorized access, and other security threats
• Communicate with you about your account, updates, and Service changes
• Comply with legal obligations

We do not sell your personal or financial data. We do not use your data for third-party advertising. Your financial information is used solely to power the features of the Service that you have opted into.

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256 encryption)
• Bank-Grade Security: Financial data connections are handled through Plaid, which maintains SOC 2 Type II compliance and undergoes regular security audits
• Access Controls: We enforce strict role-based access controls. Your financial data is accessible only to the automated systems that power the Service
• Infrastructure: Our services are hosted on secure, SOC 2-compliant cloud infrastructure with continuous monitoring

4. Third-Party Services

Plaid

We use Plaid to connect to your financial institutions. Plaid's use of your information is governed by the Plaid End User Privacy Policy. We encourage you to review Plaid's privacy practices.

Analytics & Infrastructure

We may use third-party analytics services to understand usage patterns and improve the Service. These services receive only anonymized, aggregated data and are contractually prohibited from using it for any other purpose.

5. Data Retention & Deletion

We retain your personal and financial data only as long as your account is active and as necessary to provide the Service. You may request deletion of your data at any time by contacting us at monaith@outlook.com.

Upon account deletion, we will remove your personal information and financial data from our active systems within 30 days. Some data may be retained in encrypted backups for up to 90 days, after which it is permanently purged.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Object to or restrict the processing of your information
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time for consent-based processing

CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information, including the right to know what information we collect, the right to delete your information, and the right to opt-out of the sale of your information. As stated above, we do not sell personal information.

GLBA Compliance

As a financial technology service, Monaith complies with the Gramm-Leach-Bliley Act (GLBA) requirements for safeguarding nonpublic personal financial information. We maintain a comprehensive information security program designed to protect the confidentiality and integrity of your financial data.

7. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: monaith@outlook.com

Monaith Inc.
New York, NY