Privacy policy

Last updated: 23 March 2026

Who are we?

Monipath is an online personal financial management service offered by:

Company name: Monipath

Legal form: Sole proprietorship

Chamber of Commerce number: 99654601

Branch address: Ede, Stompekamperweg 50

Email address for privacy issues: legal@monipath.com/en

In this privacy notice, "we", "us" and "our" refer to Monipath.

What personal data do we collect?

2.1 Account details

First name and surname

Email address

Password (stored encrypted, never in readable form)

Profile picture (optional)

2.2 Financial data

You enter this data yourself. Monipath does not connect to your bank or other financial institutions.

Transactions (income, expenses, transfers)

Accounts (savings, checking, investment and credit accounts)

Budgets and budget categories

Debt and repayment plans

Financial goals

Annual planning

2.3 Usage data

Language preference and theme setting

Currency, time zone and date notation settings

Notification preferences

2.4 Technical data

IP address

Browser type and version

Device information

Date and time of last login

2.5 Error detection data (Sentry)

We use Sentry to detect technical errors and monitor the performance of our service. This involves processing the following data:

Error messages and stacktraces

Session recordings when errors occur (to reproduce the error)

Performance measures (in 10% of sessions)

Potentially personally identifiable information such as email address and IP address

Sentry data is stored in the EU data centre (Germany).

2.6 Workspace data

When you share a workspace with other users, the following data will be processed:

Email address of invited users

Access level (View, Edit, Administrator)

All financial data within the shared workspace

On what bases do we process your data?

We process your personal data on the following legal bases from the General Data Protection Regulation (GDPR):

Basis	Application
Performance of the agreement (Art. 6(1)(b) AVG)	Account management, service delivery, subscription management
Legitimate interest (Art. 6(1)(f) AVG)	Error detection and performance monitoring through Sentry, security of service
Consent (Art. 6(1)(a) AVG)	Where applicable, e.g. non-essential cookies

What do we use your data for?

We use your personal data for the following purposes:

Service delivery - providing Monipath's core functionality (budget management, transaction tracking, goal tracking)

Account management - registration, authentication, password recovery, email verification

Subscription management - managing your subscription and associated billing

Troubleshooting - identifying and resolving technical errors through Sentry

Performance monitoring - monitoring and improving the speed and reliability of the service

Security - protecting your account and data from unauthorised access

With whom do we share your data

We do not sell your personal data to third parties. We do not use third-party ad trackers or analytics services (such as Google Analytics).

We use the following processors:

Processor	Target	Location
Sentry (Functional Software, Inc.)	Error detection and performance monitoring	EU (Germany)
Microsoft Azure	Hosting the application	EU
Mollie	Processing payments for subscriptions	EU
Microsoft Azure Key Vault	Management of encryption keys	EU

We have concluded processing agreements with all these processors in accordance with Art. 28 AVG.

Transfer outside the European Economic Area (EEA)

No provisioning takes place outside the EEA.

How long do we keep your data?

Data type	Retention
Account details	As long as your account is active
Financial data	As long as your account is active
Deleted accounts	30 days after removal, after which final removal
Sentry error data	In line with Sentry's retention settings (30 days)

When you delete your account, your account is first marked as "deleted" (soft deletion). After the aforementioned retention period, your data will be permanently deleted.

How do we secure your data?

We take the security of your data seriously and have taken the following measures:

Encryption at rest - Your data is stored encrypted using advanced encryption technology. Each workspace has its own encryption key managed through Azure Key Vault.

Password protection - Passwords are stored hashed and are never available in readable form.

Encryption in transit - All communication between your browser and our servers is via HTTPS/TLS.

Soft deletion - On account deletion, data is first marked as deleted so that any errors can be fixed before final deletion.

Your rights

Under the AVG, you have the following rights regarding your personal data:

Law	Description	AVG article
Right to access	You can find out what data we process about you	Art. 15
Right of rectification	You can have incorrect data corrected	Art. 16
Right of removal	You can request to have your data removed	Art. 17
Right to limit	You can request to restrict processing	Art. 18
Right to data portability	You can receive your data in a structured, common and machine-readable format	Art. 20
Right to object	You can object to the processing of your data	Art. 21
Right to withdraw consent	You can withdraw previously given consent at any time	Art. 7(3)

In addition, you have the right to file a complaint with the Personal Data Authority (

How can you exercise your rights?

You can exercise your rights in the following ways:

Email: Send a request to legal@monipath.com/en

Exporting data: Through the app under Settings > Privacy > Export data (CSV or JSON)

Delete account: Via the app under Settings > Account > Delete account

We respond to your request within one month, in line with legal requirements. In exceptional cases, this deadline may be extended by two months, about which we will inform you in good time.

Cookies

Monipath uses cookies and similar technologies. For a full overview, please refer to our Cookie Statement.

Workspace sharing and shared data

Monipath offers the ability to share workspaces with other users. When you share a workspace:

The invited user gets access to the financial data within that workspace, depending on the assigned access level (View, Edit or Administrator).

You are responsible for sharing data only with people you trust.

Shared data is stored encrypted and can only be accessed by users with appropriate permissions.

When you leave a shared workspace or delete your account, your access to the shared data is revoked.

Changes to this privacy statement

We may change this privacy statement from time to time, for example due to new functionality or changed laws and regulations. In the event of significant changes, we will notify you via:

A notification in the application

An e-mail to the e-mail address known to us

The latest version of this privacy statement is always available at www.monipath.com/en/privacy-policy.

Contact

Do you have any questions about this privacy statement or the processing of your personal data? If so, please contact us:

E-mail: legal@monipath.com/en

Post: Ede, Stompekamperweg 50