Hamoney (hereinafter "the App") is operated by No Other Choice and processes personal information for the following purposes:
The App collects the following personal information:
| Category | Items Collected | Collection Method |
|---|---|---|
| Identity Information | Email, nickname | Social login (Kakao/Google/Apple) + registration input |
| Profile | Profile picture | Upload from gallery/camera → stored in AWS S3 |
| Authentication Information | OAuth tokens (access/refresh) | Auto-generated during social login |
| Account Book Data | Expense amount, date, description, memo, category, payment method, receipt image, AI input text | User direct input + receipt photo capture + AI input |
| Budget Data | Category-specific budget amounts | User direct input |
| Account Book Information | Account book name, profile image, currency, start date, member list, invitation code | User direct input/settings |
| Device Information | Device model, OS name, OS version, app version | Auto-collected via device_info_plus/package_info_plus |
| Device Identifiers | App-generated device identifier (random UUID), push notification token, advertising ID (Android) | Auto-collected when the App runs, when notifications are allowed, and when ads are shown |
| Social Login Information | Social provider key, email, registration timestamp | Auto-collected during social login |
Personal information is retained and used for the following periods:
| Item | Retention Period | Basis |
|---|---|---|
| Member information (email, nickname, profile) | Service usage period + 30 days after account deletion | Dispute resolution, legal obligations |
| Account book data (expenses, budget) | Service usage period + 30 days after account deletion | Data recovery possibility upon user request |
| OAuth tokens | Service usage period | Authentication maintenance |
| Error logs | Maximum 30 days | Performance monitoring |
| Unrecognized AI input records (input text, photo storage path) | Maximum 30 days | Improving AI input recognition |
| S3 stored images | Service usage period + 30 days after account deletion | Data recovery possibility |
After the retention period expires, personal information is destroyed without delay. However, if retention is required by law, the information is retained for the applicable period.
The App does not provide personal information to third parties except in the following cases:
| Service | Purpose | Data Shared |
|---|---|---|
| Kakao SDK | Social login | Email, authentication token |
| Google OAuth | Social login | Email, authentication token |
| Apple Sign In | Social login | Email, identity token |
| Google Gemini API | Receipt OCR/parsing, AI input analysis | Receipt image, AI input text and photos (may include store name, amount, etc.) |
| AWS S3 (ap-northeast-2) | Image storage | Profile picture, receipt image, account book icon |
| Sentry / Firebase Crashlytics | Error tracking/monitoring | User ID, email, nickname, device model, OS, app version, error information |
| Firebase Core | App basic infrastructure | Minimal initialization data |
| Google Analytics for Firebase | App usage analytics | App instance identifier, screen/feature usage events, device model, OS, app version |
| Google AdMob | Ad serving, ad performance measurement, and invalid click prevention | Advertising ID, IP address, ad view and click information, device model, OS |
External AI connections in the desktop app (MCP): When you enable MCP and add its configuration to an AI app, that app can read information about the selected account book and its spending entries, including descriptions, dates, amounts, currencies, categories, payment methods, and memos. Depending on that app's settings and services, this information may be sent to an external AI service. Check the service's privacy policy before connecting. Turning off MCP blocks subsequent queries.
You can reset or delete your advertising ID in your device settings.
Personal information is not provided to third parties for purposes other than those listed above without explicit user consent.
The App entrusts personal information processing to the following vendors for service provision:
| Processor | Entrusted Task | Entrusted Information |
|---|---|---|
| Amazon Web Services (AWS) | Image storage and management | Profile picture, receipt image, account book icon |
| Google Cloud (Gemini API) | Receipt OCR and AI input analysis | Receipt image, AI input text and photos |
| Sentry / Firebase Crashlytics | Error log collection and analysis | User ID, email, nickname, device information, error information |
| Google (Firebase Analytics) | App usage analytics | App instance identifier, usage events, device information |
| Google (Firebase Cloud Messaging) | Push notification delivery | Push notification token, notification content |
Processors manage personal information securely in accordance with the Personal Information Protection Act and do not use personal information for purposes other than those entrusted.
Users may exercise the following rights:
To exercise the above rights, please contact the following:
Department: No Other Choice Privacy Team
Email: belloo.planet@gmail.com
When making a request, you must submit identification documents or other proof of identity.
Users must provide accurate personal information and immediately notify us of any changes. Users are responsible for any damages resulting from providing false information.
The App implements the following measures to ensure the safety of personal information:
Profile information (email, nickname) is stored locally in SharedPreferences on the app, which relies on device encryption. Security may be compromised if the device is rooted or jailbroken.
If you have any inquiries regarding personal information protection, please contact our privacy team:
Department: No Other Choice Privacy Team
Email: belloo.planet@gmail.com
The privacy team will promptly address complaints related to personal information processing.
If you suffer damages due to personal information infringement, you may file a complaint with the following organizations:
This Privacy Policy is effective as of October 11, 2026.
If this Privacy Policy is modified, changes will be announced through the app's notice section.
The App transfers personal information overseas as follows:
| Service | Transfer Country | Information Transferred | Legal Basis |
|---|---|---|---|
| Google Gemini API | United States | Receipt image, AI input text and photos | User consent |
| AWS S3 | South Korea (ap-northeast-2) | Profile picture, receipt image, account book icon | User consent |
| Google OAuth / Apple Sign In | United States | Email, authentication token | User consent |
When transferring personal information overseas, the information is protected in accordance with the personal information protection laws of the respective countries.
Personal information is destroyed as follows upon expiration of the retention period or upon user request:
During the 30-day retention period after account deletion, users cannot cancel the deletion. Additionally, data included in shared account books is not immediately deleted unless requested by other members.