Privacy Policy

The short version

Your budget lives on your iPhone and syncs through your own Apple iCloud account. There is no newmonth account, no newmonth server, and no analytics or tracking code in the app at all — so your financial data never reaches us. This website sets no cookies, runs no analytics, and asks you for nothing.

Who is responsible

The controller responsible for this website and the newmonth app under the GDPR is Bogdan Vlad. You can reach us at support@newmonth.app for any privacy question or request.

Your data in the app

Everything you enter in the newmonth app — budgets, categories, transactions, accounts — is stored on your device by the operating system. The app contains no third-party code of any kind: no analytics, no crash reporting, no advertising SDKs, no dependencies. It opens no network connections other than to Apple’s services described below.

You never connect a bank. newmonth has no open-banking integration and cannot reach your financial institutions. Data enters the app only when you type it in or deliberately import a file you chose yourself (CSV, OFX/QFX, CAMT, a YNAB export, or a newmonth backup).

• No newmonth account, no password, no sign-up.
• No bank connections — you enter or import data yourself, on purpose.
• No analytics, telemetry, crash reporting, or advertising code in the app.
• You can export everything at any time, as a backup archive or CSV.

iCloud sync

If you are signed in to iCloud, newmonth keeps your budget in step across your devices using Apple’s CloudKit, in your own private iCloud database. This happens automatically while you are signed in; we do not operate a server in the middle and we cannot read what is stored there. Apple processes this data as part of your iCloud account, under Apple’s own privacy policy and terms.

To stop syncing, sign out of iCloud or disable iCloud for newmonth in your device settings. Your data remains on the device either way.

Your budget is stored with the standard protections Apple applies to CloudKit and to your device. We do not claim end-to-end encryption of individual budget fields.

Sharing a budget

newmonth lets you share a budget with other people through Apple’s iCloud sharing. Sharing is entirely your choice and happens only for the people you explicitly invite. Anyone you invite to a shared budget can currently both read and change it, so only invite people you intend to give full access to. You can stop sharing at any time from the app.

What this website collects

This is a static website. It sets no cookies, stores nothing in your browser, runs no analytics or tracking scripts, and has no forms, accounts, or logins. We have deliberately not enabled visitor analytics or access logging — we do not measure our own traffic.

Serving a web page is not invisible, though, and we would rather say so plainly: our hosting provider, Amazon Web Services, necessarily processes connection data such as your IP address, the requested address, and your browser’s user-agent string in order to deliver the page to you and to protect the service from attack and abuse. Under the GDPR an IP address can be personal data, so we disclose this rather than claim we process nothing.

Cookies and tracking

The website sets no cookies of any kind — not even so-called essential ones — and uses no advertising, social-media, or cross-site trackers. That is why you were not asked to dismiss a consent banner. If this ever changes, this policy will be updated and a compliant opt-in mechanism will be added before any non-essential cookie is set.

Do Not Track and Global Privacy Control

We honor Do Not Track (DNT) and Global Privacy Control (GPC) signals. Because the site runs no tracking in the first place, there is nothing for these signals to switch off — but they are respected regardless.

Service providers

We keep the list of third parties as short as we can. The ones involved are:

• Amazon Web Services — hosts and delivers this website. The site’s data is stored in the European Union; delivery runs through Amazon CloudFront edge locations in Europe and North America, which process connection data at the location nearest you.
• Apple — operates the App Store, handles all purchases and subscriptions, and provides the iCloud sync described above. Apple acts under its own privacy policy and terms.
• Our email provider — receives whatever you choose to write to us if you contact support.

Legal bases for processing

Where we process personal data, we rely on our legitimate interest under Art. 6(1)(f) GDPR in delivering a working, secure website. Where you contact us by email, we process your message to answer it, on the basis of our legitimate interest in supporting our users and, where your message concerns a purchase, to perform our contract with you under Art. 6(1)(b) GDPR.

How long data is kept

We retain no visitor data from the website, because we collect none. Connection data processed by our hosting provider is handled for operational and security purposes under that provider’s own retention practices. Support correspondence is kept for as long as needed to resolve your request and to meet any statutory retention obligation, then deleted.

International transfers

The website’s data is stored in the European Union, but the content delivery network that serves it operates edge locations in Europe and North America, so the connection data described above may be processed at the edge location nearest you. Apple’s iCloud and App Store services may process data outside the EU under Apple’s own safeguards and standard contractual clauses. If you contact us by email, your message may be processed by our email provider under equivalent safeguards.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form (Art. 15–21 GDPR). Because we hold no account and no profile for you, there is usually nothing for us to retrieve — but write to support@newmonth.app and we will answer.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work.

For the data your app stores in your own iCloud, the access and deletion controls are Apple’s: manage or delete it through your device and your iCloud account settings.

Children

newmonth is a personal budgeting tool intended for adults and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

If we update this policy we will revise the date above, and we will highlight material changes rather than quietly editing the text.

Contact

Questions about privacy, or want to exercise one of the rights above? Email support@newmonth.app and a human will reply.