Legal

PRIVACY POLICY

Effective Date: May 9, 2026

Last Updated: May 9, 2026

MoneyRoom, LLC ("MoneyRoom," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the rights you have. It applies to your use of the MoneyRoom mobile application, website, and related services (collectively, the "Service").

By using the Service, you agree to this Privacy Policy.

Important: Because MoneyRoom helps you manage personal financial information, certain disclosures are also provided in our separate Financial Privacy Notice (issued under the federal Gramm-Leach-Bliley Act, 15 U.S.C. § 6801 et seq.), which is delivered when you first open an account and is available at https://moneyroom.app/financial-privacy-notice. The Financial Privacy Notice and this Privacy Policy are intended to work together. Where the Financial Privacy Notice and this Privacy Policy address the same subject matter, the Financial Privacy Notice controls with respect to nonpublic personal information governed by GLBA.

California Notice at Collection

This section serves as the Notice at Collection required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"). At or before the point of collection, we inform you that:

• Categories of personal information we collect: identifiers; commercial information; financial information you authorize us to collect via Plaid; internet or other electronic network activity information; and inferences drawn from the foregoing. See Section 2 below for details.
• Purposes of collection and use: to provide, operate, secure, and improve the Service; to process payments; to communicate with you; to comply with legal obligations; and to detect and prevent fraud and abuse. See Section 3 below for details.
• Retention: we retain personal information for the periods described in Section 6 below.
• Sale or sharing for cross-context behavioral advertising: We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.
• Sensitive personal information: we do not collect sensitive personal information for purposes that would trigger the right to limit its use.

1. Who We Are

MoneyRoom, LLC, is a personal-finance application based in Yavapai County, Arizona, USA. The Service is available only in the United States and is restricted to users 18 years or older.

2. Information We Collect

We collect the following categories of personal information:

(a) Information you provide directly

• Name (if provided)
• Email address
• Phone number (if provided)
• Account credentials, including password and PIN (stored hashed and/or encrypted)
• Communications you send us, such as support requests and feedback
• Payment information processed by our payment processor; we do not store full payment-card numbers

(b) Financial information you authorize us to collect via Plaid

• Linked financial-institution names
• Account names, types, balances, and identifiers
• Transaction history, including date, amount, merchant, and category
• Investment holdings, securities, and transaction history (read-only)

We do not receive or store your bank login credentials. Plaid handles all credential exchange. See https://plaid.com/legal/#end-user-privacy-policy.

Limited Agency. By linking a financial account, you grant MoneyRoom a limited power of attorney to access this information on your behalf, solely as described in our Terms and Conditions, Section 6. This authority is read-only — we do not place trades, transfer funds, or initiate any action on your accounts.

(c) Information collected automatically

• Device identifiers, operating system, browser type
• IP address (used for security and to infer general region; we do not collect precise geolocation)
• Log data, including timestamps, pages viewed, and errors
• Cookies and similar technologies, where used (see Section 5)

(d) Information from third parties

• Plaid, as described above
• Email and SMS service providers, including delivery and bounce data
• Payment processors, including transaction confirmations
• Hosting and infrastructure providers, including operational logs
• Analytics and error-tracking providers, where used

(e) What we do not collect

We do not intentionally collect "sensitive personal information" as defined by the CCPA/CPRA, such as Social Security numbers, driver's-license numbers, precise geolocation, racial or ethnic origin, religious beliefs, health information, sexual orientation, biometric data, union membership, or the contents of your private communications.

3. How We Use Your Information

We use your information to:

• Create, maintain, and secure your account.
• Provide, operate, and improve the Service, including budgeting tools, credit-card benefit tracking, and read-only investment summaries.
• Process payments and manage subscriptions.
• Send transactional communications (account, security, billing, and service updates).
• Send marketing communications only if you opt in, with the ability to unsubscribe at any time.
• Respond to support requests and feedback.
• Detect, investigate, prevent, and address fraud, abuse, security incidents, and violations of our Terms.
• Comply with legal obligations, court orders, subpoenas, and regulatory requests.
• Enforce our Terms and protect the rights, safety, and property of MoneyRoom, our users, and others.
• Conduct internal research, analytics, and product development.

4. How We Share Information

We share personal information only as follows:

• Service providers acting on our behalf, bound by contractual confidentiality and use restrictions, including Plaid Inc., hosting and infrastructure providers, email and SMS delivery providers, payment processors, customer-support tools, and error-tracking and analytics providers.
• Legal and safety: when required by law, subpoena, court order, or to protect the rights, safety, or property of MoneyRoom, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, subject to this Privacy Policy.
• With your consent or at your direction.

We do not sell your personal information.

We do not share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information for the preceding 12 months and do not plan to.

5. Cookies and Tracking

If we use cookies or similar technologies, they are limited to those necessary to operate the Service, remember preferences, secure accounts, and measure performance. We do not use cookies for cross-context behavioral advertising. You can control cookies via your browser settings; disabling some cookies may affect functionality.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required for:

• legal, tax, accounting, or regulatory obligations;
• fraud prevention, security, or audit purposes; or
• the establishment, exercise, or defense of legal claims.

In those cases, we retain personal information only as long as necessary for those purposes, after which it is deleted or de-identified.

7. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of sensitive credentials at rest, transport-layer encryption (HTTPS) in transit, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for safeguarding your password and PIN, and for promptly notifying us of any unauthorized access to your account.

8. Your Privacy Rights

(a) All U.S. Users

You may:

• Access, update, or correct your account information through your account settings.
• Delete your account through the in-app account-deletion feature.
• Opt out of marketing communications via the unsubscribe link or by contacting us.

(b) California Residents — CCPA/CPRA Rights

If you are a California resident, you have the right to:

1. Know what personal information we collect, use, disclose, and (if applicable) sell or share.
2. Access the specific pieces of personal information we hold about you.
3. Delete personal information we hold about you, subject to legal exceptions.
4. Correct inaccurate personal information.
5. Opt out of the sale or sharing of personal information. (We do not sell or share, but you have the right.)
6. Limit the use of sensitive personal information. (We do not use sensitive personal information for purposes that would trigger this right.)
7. Non-discrimination: we will not discriminate against you for exercising these rights.

To exercise your rights, contact us at support@moneyroom.app. We will verify your request by confirming information that matches what we have on file, such as your account email. You may use an authorized agent; we may require proof of authorization (such as a power of attorney or signed written permission) and may also verify your identity directly. We will respond within 45 days, with a possible 45-day extension if reasonably necessary, and we will inform you of any extension.

(c) Other State Privacy Laws

Residents of other U.S. states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, New Jersey, New Hampshire, Minnesota, Maryland, Rhode Island, and others — may have similar rights, including the right to access, correct, delete, and obtain a portable copy of personal information, and to opt out of certain processing. To exercise such rights, contact us at the email above. You may appeal any decision regarding your request by replying to our response within 30 days.

9. Children's Privacy

The Service is intended for users 18 years and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected personal information from a person under 18, we will delete it. If you believe a minor has provided us information, please contact us at support@moneyroom.app.

10. Do Not Track and Global Privacy Control

Our Service does not currently respond to "Do Not Track" browser signals. We will treat valid Global Privacy Control ("GPC") signals from California residents as a valid request to opt out of sale/sharing, where applicable.

11. International Users

The Service is intended only for use by U.S. residents. We do not target or solicit users outside the United States. Information is processed and stored in the United States and may be subject to U.S. law, including lawful access requests by U.S. government authorities.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Review their privacy practices before providing them with information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if we have your email) or via in-app notice at least 30 days before the changes take effect. Non-material changes will be effective on posting. The "Last Updated" date above reflects the most recent revision.

14. Contact Us

For questions, requests, or to exercise your privacy rights:

MoneyRoom, LLC
Yavapai County, Arizona, USA
Email: support@moneyroom.app