Money+ Privacy Policy

Last updated 7 October 2026 · Plus Ventures LLC

Money+ keeps your financial records in your own Google Sheets, in your own Google Drive. We do not keep a copy of your transactions. What we do hold is the encrypted credentials and settings needed to keep your Sheet up to date — and this policy says exactly what those are.

This policy covers the Money+ mobile and web app. It does not cover other Plus Ventures apps, which have their own policies.

Your financial data lives in your Sheets

Transactions, balances, categories, budgets and notes are written to a Google Sheets spreadsheet in your own Google Drive. You own that file. You can open it outside the app, and it stays in your Drive even if you delete your Money+ data or the app itself.

We request the narrow drive.file Google Drive scope. That grants access only to the specific files you create with or open through Money+ — not to the rest of your Drive.
We do not store your transaction history in our own database.
You can revoke our access at any time from your Google account permissions. Your Sheet remains yours.

What we do hold on our servers

Money+ is not entirely serverless, and it would be misleading to imply otherwise. To connect your bank and keep your Sheet current, our servers store:

Encrypted credentials	The Google and Plaid access tokens that let the app write to your Sheet and fetch new bank activity. Stored encrypted, used for nothing else.
Connection metadata	Which institutions and accounts are linked, spreadsheet identifiers, and sync state such as when a sync last ran and whether it succeeded.
Notification settings	Your preferences and the device token needed to deliver a push notification.
Your Plus account	Email address, sign-in provider, display name if you set one, and a user identifier. See below.
Subscription state	Your plan tier, whether it is active, and when the current period ends. Written from the app store's billing signal. We never receive your card details — the store bills you and tells us only whether you are entitled.
App integrity checks	Apple App Attest / Play Integrity tokens, used to confirm requests come from a genuine, unmodified copy of the app. Not linked to your financial data.

Our servers process bank data through Plaid in transit and write it to your Sheet. We do not retain the transaction records after they are written.

Bank connections (Plaid)

Bank linking is provided by Plaid. When you link an account:

You enter your bank credentials into Plaid's own secure interface. We never see or store your online banking username or password.
Plaid returns account and transaction data to our servers, which write it into your Sheet.
Plaid's handling of your information is governed by the Plaid End User Privacy Policy.
You can disconnect any institution from Settings at any time. Disconnecting revokes our access going forward; data already written to your Sheet stays in your Sheet, under your control.

The offline copy on your device

Your device keeps an encrypted copy of your data so you can view it offline.
Your Sheet remains the source of truth. Edits require a connection and may fail if Google Sheets is unavailable — the app tells you when that happens rather than silently diverging.
The cache is erased when you sign out. Your operating system may also evict it to reclaim space.
On the web version this copy is held in memory only and does not persist.

Privacy controls on your device

Two features protect the app from people near you, and both work entirely on your device:

App lock. You can require Face ID, Touch ID or a fingerprint to open Money+. The biometric check is performed by your device's operating system — we never receive your fingerprint or face data, only a yes-or-no answer from the OS.
Hide amounts. Conceals figures with a tap when someone is looking over your shoulder. A display setting only; nothing is sent anywhere.

Both settings are stored on the device and are not synced to us.

Push notifications

Money+ sends only budget warnings, a weekly digest and a monthly preview. You choose which, in Settings ▸ Notifications, and you can turn them all off.

Push messages contain generic update text only. Amounts, balances, merchant names and account details are never placed in a notification, so nothing financial appears on a lock screen or passes through Apple's or Google's push infrastructure in readable form.

To deliver a push we store a device token — an address for your device, not a credential. Tokens are deleted when you sign out or delete your data, and a device that switches accounts stops receiving the previous account's notifications.

Sharing a space

Money+ organises data into spaces, and a space can be shared with people you invite. If you share one:

The people you invite can see the data in that space, and — if you grant full rather than view-only access — can add and edit entries.
Sharing is your decision and you can withdraw it. Withdrawing access is applied durably on our servers rather than only in the app.
Because the underlying store is a Google Sheet in your Drive, review that file's own Google Drive sharing settings too. Anyone with Drive access to the file can read it regardless of anything set in Money+.

Your shared Plus account

Money+ signs you in with a shared Plus account, using Sign in with Google or Sign in with Apple. It holds the minimum needed to identify you across Plus apps: your email address, your sign-in provider, your display name if you set one, and a user identifier.

If you use Sign in with Apple, Apple asks whether to share or hide your email address. Choosing to hide it gives us a private relay address instead, which works exactly the same way — we never need your real one.

Deleting your Money+ data is not the same as deleting your Plus account. The two are separate on purpose, so that removing Money+ does not break another Plus app you use.

Deleting your data

Settings ▸ Delete my Money+ data removes, from our servers: every bank connection (each institution is revoked and removed at Plaid), your stored Google credentials, your spaces, your profile and settings, your notification device tokens, and any pending link sessions. The encrypted copy on your device is erased and you are signed out.

Three things it deliberately does not do:

Your Sheets remain in your Google Drive. They are your files, and deleting them is your call, not ours.
Your Plus account is not deleted, so other Plus apps keep working. To remove the account itself, use withplus.co/delete-account.html.
An active subscription is not cancelled. Billing is held by the app store, not by us — cancel it there, or a renewal will still be charged.

Step-by-step instructions, including how to cancel billing and how to revoke our Google access independently, are at withplus.co/money-plus/delete-account. If you cannot reach the app, email privacy@withplus.co from your account address and we will do it for you.

After deletion, two narrow things persist: non-identifying integrity metadata (hashes recording that a change was written, with no financial content) expires automatically after 30 days, and records we are legally required to keep, such as proof of a subscription payment, are retained for the required period. Routine backups cycle out on their normal schedule.

Analytics and advertising

Money+ contains no analytics SDK, no crash reporting SDK and no advertising SDK. We do not track your use of the app. There are no advertising partners, no data brokers and no affiliate links.

We do not sell or share personal information, and have never done so.

Security

Encryption in transit: all traffic uses TLS/SSL
Encryption at rest: Google and Plaid tokens are stored encrypted, as is the offline copy on your device
Secure infrastructure: server data is held in Google Cloud / Firebase
Access controls: access to user data is restricted to authorised personnel

While we use commercially acceptable means to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

Children

Money+ is not intended for children under 13, and additionally requires that you be old enough to hold the financial accounts you connect. We do not knowingly collect personal information from children.

International data transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, which may have different data protection laws. By using Money+ you consent to such transfers. We ensure appropriate safeguards are in place.

Your rights

Depending on where you live, you have rights over the personal data a company holds about you. Plus Ventures LLC is the data controller for the data described here.

If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to your national supervisory authority. Our legal basis is your consent, contractual necessity in providing the app you asked for, and our legitimate interest in operating it.

If you are a California resident (CCPA/CPRA): rights to know, delete, and correct, and non-discrimination for exercising them. We do not sell or share personal information, so there is nothing to opt out of.

Much of this you can exercise yourself without asking us: your financial records are in a file you own, you can revoke our access at any time from your Google account permissions, and you can erase everything we hold from Settings ▸ Delete my Money+ data.

Changes

If this policy changes we will update the date at the top of this page and post the new policy in the app. For any material change we will surface an in-app notice before it takes effect.

Contact

Questions about this policy, or to exercise a privacy right: privacy@withplus.co (also reachable at privacy@got.plus)
General support: support@withplus.co