Privacy Policy — Mona

Last updated: 31 July 2026

Mona ( The app is developed by Arunachalam P /Skynite ("the Developer"). This policy explains what data Mona accesses, how it is used, and where it is stored. Contact: arunachalam.skynite@gmail.com.

Mona has no backend server. Your data is stored locally on your device and, where you choose to sync, in your own Google Drive account (in an app-created folder Mona does not share with anyone else). The Developer does not operate any server that stores your documents, expenses, journal entries, or recipes.

Data we access and why

Data	Why Mona accesses it	Where it's stored	Shared with
Google account (name, email, profile)	Sign-in, to create your Mona folder in Drive	Device (secure storage)	Google (sign-in only)
Google Drive files (app-created folder only, `drive.file` scope)	Sync/backup of documents, expenses, journal, recipes, family data	Your Google Drive	Google (your own account)
SMS messages (Android, `READ_SMS`)	Detect bank/UPI transaction messages to auto-track expenses, optional. Mona parses transaction SMS on-device only; it does not read, store, or transmit non-transactional SMS content.	Device only	Not shared
Camera	Scan documents/receipts, capture journal photos, recipe photos, camera-translate signs/menus	Device, then optionally synced to your Drive	Google Cloud Vision/Translation APIs (translate feature only)
Photos / files you pick	Attach to vault documents, expenses, journal, recipes	Device, then optionally synced to your Drive	Not shared
Microphone / audio	Voice journal entries	Device, then optionally synced to your Drive	Not shared
Email credentials (IMAP app password, Subscriptions feature, opt-in)	Scan your inbox for recurring billing emails to detect subscriptions	Device OS keychain, never transmitted to us	Your mail provider (direct device connection)
Financial/expense data you enter or import	Expense tracking, budgeting, subscription detection	Device, then optionally synced to your Drive	Not shared
Purchase/subscription status	Unlock premium features	Google Play Billing (and your device)	Google Play

What we do not do

We do not run our own server or database — we cannot see your documents, expenses, journal entries, SMS content, or email content.
We do not sell your data.
We do not use third-party analytics or advertising SDKs.
We never request full Google Drive access — only drive.file, which limits Mona to files it creates itself.

On-device processing

Recipe/receipt OCR, document scanning, and subscription email classification run on-device — OCR and text recognition use local ML Kit models, and billing emails are matched with on-device pattern rules. No image or email content is sent to the Developer's servers for this processing (there are none). The Camera Translate feature sends the captured image and detected text to Google's Cloud Vision and Cloud Translation APIs solely to produce the translation, governed by Google's own privacy terms.

Data retention and deletion

Local data can be deleted at any time by deleting entries in-app or uninstalling the App.
Drive-synced data can be deleted from your Google Drive directly, or by disconnecting Drive in Settings.
IMAP app passwords are removed from the device keychain when you disconnect the mailbox in Settings.
To delete everything, use Settings → Danger zone in the app, then unlink Drive and uninstall. Full step-by-step instructions are on the Delete Your Data page.
To request deletion of any data associated with your account, contact arunachalam.skynite@gmail.com.

Children

Mona is not directed at children and is not intended for users under 13 (or the minimum age in your jurisdiction).

Changes to this policy

We may update this policy as the App changes. Material changes will be reflected by updating the "Last updated" date above.

Contact

arunachalam.skynite@gmail.com
Arunachalam P / Skynite