Monvelio App Icon Monvelio
Back to App
Data Sovereignty & Privacy

Privacy Policy

Last Updated: October 23, 2026 • Applicable to Mac, iPhone, and iPad
The Short Version: Your financial books and sensitive business records stay on your personal Apple devices. We do not run surveillance or central storage servers that receive your accounting data, and we cannot see or sell your financial figures.

This Privacy Policy explains how Ahmad Al-Haj-Ali, an individual developer based in Ontario, Canada ("we", "us", "our"), handles information in connection with the Monvelio application for macOS, iOS, and iPadOS (the "App"), accessible at https://monvelio.app.

1. Information You Enter

Everything you enter or import into the App—including corporate entities, chart of accounts, split transactions, general ledger entries, invoices, quotes, bills, receipts, employee payroll records, tax notes, and attached documents—is stored directly in a local SQLite database on your device. We never receive, process, or host this data.

  • iCloud Synchronization (Optional, Off by Default): If you choose to enable iCloud sync, your books are encrypted and synchronized across your own Apple devices using Apple’s native CloudKit infrastructure. That data is stored securely by Apple under your personal Apple Account and is subject to Apple’s Privacy Policy. We do not possess encryption keys and cannot access your private iCloud database.
  • Encrypted Backups and CPA Exports: Encrypted database archives (AES-256-GCM), CSV spreadsheets, Excel workbooks, and CPA year-end packages are generated locally. You choose where and when to share or archive them.
  • Apple Wallet & FinanceKit (Optional, iOS): If you connect Apple Wallet accounts, the App reads transactions you authorize on-device through Apple’s FinanceKit framework. These transactions are never transmitted to us or any third-party server.
  • Camera and Photo Library (Optional): Used solely to capture physical receipts and invoice scans. Text and numbers are recognized on-device using Apple’s Vision framework. Images remain stored within your local sandbox.
  • Support Communications: If you contact us for technical support, we only receive the email you transmit to [email protected]. In-app diagnostics summaries (device model, OS version, app build, and non-sensitive record ranges) are transparently displayed for your review before dispatch.

2. Information Collected Automatically

None by default.

  • Usage Analytics (Optional, Off by Default): If you explicitly opt in to "Share anonymous usage data" in Settings, the App may send non-identifying counts of aggregate feature usage (such as whether an invoice was generated or a tax schedule calculated), along with the OS version and device architecture. It never contains business names, financial amounts, transaction counterparties, or personally identifiable information. You can revoke this permission anytime in Settings.
  • Crash & Diagnostic Logs: Diagnostic telemetry generated by Apple’s MetricKit is retained locally on your hardware. If you have chosen to share diagnostics with app developers in your macOS or iOS system settings, Apple may provide anonymized crash stack traces under Apple’s terms.

3. Purchases and In-App Subscriptions

All purchases, free trials, and subscriptions for Monvelio Pro are handled exclusively by Apple through the App Store and StoreKit. We receive no credit card numbers, billing addresses, or banking details. Apple notifies the App of cryptographic transaction receipts so Pro capabilities are unlocked on your devices.

4. Network Connections

The App operates fully offline. It establishes outbound network connections only to:

  • Validate StoreKit purchases and subscription renewals directly with Apple App Store servers;
  • Synchronize your records with your private iCloud CloudKit container, if you enabled sync;
  • Fetch official public foreign exchange rates from the Bank of Canada Valet API (bankofcanada.ca) and public market benchmarks. These queries transmit only currency symbols (e.g., FXUSDCAD), never your personal transactions or balances;
  • Open user-initiated help links or legal policies in your default browser; and
  • Dispatch outgoing invoices via your configured SMTP mail server, if you configure that feature.

5. Zero Third-Party Advertising & Data Brokers

We do not sell, rent, monetize, or disclose your personal or commercial data. Monvelio contains zero third-party advertising frameworks, tracking pixels, or surveillance SDKs.

6. Children's Online Privacy

Monvelio is a commercial corporate bookkeeping utility and is not intended for or directed to children under 13 years of age.

7. Your Rights Under Canadian & International Privacy Laws

Because your records reside locally on your hardware, you retain complete physical and logical control:

  • Export: Use the Database & Export tools to produce complete unencumbered exports of your general ledger and receipts in standard formats at any time.
  • Erasure: Deleting a corporate entity or removing the App instantly removes all associated data from your device storage. If iCloud sync was enabled, you can manage or purge the container via macOS/iOS iCloud Storage settings.
  • Regulatory Compliance: We adhere to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Law 25, and the European Union General Data Protection Regulation (GDPR) principles of data minimization and purpose limitation.

8. Contact & Privacy Officer

If you have questions, inquiries, or requests regarding this Privacy Policy, please reach out to:

Ahmad Al-Haj-Ali (Developer & Privacy Lead)
[email protected]