Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains what information the Money Glow Up mobile app (“the App”, “we”, “us”) collects, why, and what rights you have. We are committed to data minimisation: we collect as little as possible to run a fun, gamified financial-education app.

1.Who we are (Data Controller)

Thuemmler AI GmbH
Contact: maximilian.thuemmler@gmail.com

For any privacy question, data-access request, or complaint, email us at the address above.

2.No account, no personal login

The App does not use email addresses, passwords, phone numbers, or social-media sign-in. When you first open the App, a random anonymous identifier (a “device ID”, a UUID) is generated and stored on your device. This device ID is what links your progress to you. It is not derived from any hardware identifier and cannot be used to identify you personally on its own.

3.Information stored only on your device

The following never leaves your phone — it is stored locally and is not uploaded to us:

• Your savings data: the goals you name, the target amounts, and the amounts you log as “saved”. These are numbers you type in yourself — the App has no bank connection and never accesses any financial account.
• No-spend streaks and other savings-tracker state.
• App settings: theme, sound/haptics preferences, reminder toggle, and optional self-reported details you may enter during onboarding (such as an age range, a first name for display, and a “motivation”).
• Local game state (a mirror of your XP, gems, energy, and streaks).

4.Information stored on our backend (Supabase)

To power leaderboards, streaks that survive a reinstall, and following friends, a small set of data is stored on our backend provider, Supabase, on servers located in the European Union. Linked only to your anonymous device ID, this includes:

• Profile: a username and optional display name you choose, and your selected character/avatar.
• Learning progress: XP earned per lesson, completed lessons, and perfect-lesson counts.
• Streaks: your current and longest daily streak.
• Social graph: who you follow and who follows you, to build the friends list and weekly league / leaderboard.

Because leaderboards and friend search are social features, your chosen username, display name, avatar, XP and streak may be visible to other users of the App. We do not store your name, email, age, or any savings amount on the backend.

5.Analytics (PostHog)

We use PostHog, hosted in the European Union (eu.i.posthog.com), to understand how the App is used so we can improve it. Analytics events are tied to your anonymous device ID and record product actions such as opening the app, starting or completing a lesson, viewing the paywall, starting or completing a purchase, creating or reaching a savings goal, opening a mystery box, and sharing.

We do not use advertising trackers, the iOS Advertising Identifier (IDFA), or App Tracking Transparency tracking. We do not sell your data, and analytics events do not contain your name, email, or any savings amount. If analytics is not configured, no events are sent at all.

6.Purchases (RevenueCat & Apple)

Subscriptions and one-time purchases are processed by Apple through the App Store. We use RevenueCat to manage and verify your purchase and subscription status. RevenueCat receives your anonymous device ID together with the purchase/receipt information needed to confirm your entitlement. Your payment details (card numbers, etc.) are handled entirely by Apple and are never seen by the App or by us.

7.Notifications

With your permission, the App schedules a local daily streak reminder on your device. These reminders are generated on-device only — we do not operate a push-server and do not collect a push token. You can turn reminders off in the App's settings or in your device settings at any time.

8.Legal bases (GDPR)

• Performance of the service (Art. 6(1)(b) GDPR): storing your progress, streaks, profile, and social graph so the App works as intended, and processing purchases.
• Legitimate interests (Art. 6(1)(f) GDPR): privacy-friendly, anonymous product analytics to keep the App reliable and improve it.
• Consent (Art. 6(1)(a) GDPR): device notifications, which you can grant or revoke at any time.

9.Data retention

Backend data linked to your device ID is kept while your installation remains active. Local data remains until you delete it, clear the app data, or uninstall the App. When you delete your account (see below), the corresponding server data is erased.

10.Deleting your account and data

Note: purchase records held by Apple and RevenueCat for billing and legal purposes are not removed by this action, and are governed by their respective policies. If the server cannot be reached at the moment of deletion, your local data is still wiped; you can retry the deletion later or contact us to complete it.

11.Your rights

Under the GDPR you have the right to:

• Access the data we hold about your device ID;
• Have it corrected or erased (erasure is available directly in-app, as above);
• Restrict or object to certain processing;
• Data portability;
• Lodge a complaint with your local data-protection authority.

To exercise any of these, email maximilian.thuemmler@gmail.com. Because our identifiers are anonymous, please contact us from a device where the App is installed so we can match your request to the correct device ID.

12.Children

Money Glow Up is a general-audience educational app and is not directed at children under 13. We do not knowingly collect personal information from children. Because there is no sign-up and we do not collect names or contact details, the App is designed to be usable without providing personal data.

13.International processing

Our backend (Supabase) and analytics (PostHog) are operated in the European Union. Apple and RevenueCat may process purchase data in accordance with their own privacy policies and applicable safeguards.

14.Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page.