Version 4 · Effective date: 17 July 2026
Monvio is a personal-finance app that brings your accounts, investments and net worth together in one place. Monvio is developed by Apptico Ltd, a company registered in England and Wales (company number 17317836). For the purposes of data protection law, Apptico Ltd is the "controller" of the personal data processed through the Monvio apps and the monvio.app website. This means that we are responsible for safeguarding that personal data and are accountable to you for the manner in which it is used.
This policy applies to the Monvio mobile apps, the monvio.app website and the waitlist. It explains what information we collect, why we collect it, with whom we share it, how long we retain it, and the rights you have in relation to it. We have written this policy in clear language so that it is readily understandable. If anything is unclear, or if you wish to ask us a question about your data, please email support@apptico.com.
Your use of Monvio is also governed by our Terms of Service, which should be read alongside this policy. If you prefer to contact us in writing, our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
We collect three categories of information: information you provide to us, information generated automatically when you use the apps, and information we receive from other sources on your instructions. Each category is described below. Where you provide information directly, we also explain whether providing it is mandatory or optional.
Certain information is required to open and operate your account, while much of the information described below is entirely optional. The full list, together with the consequences of choosing not to provide an item, is as follows:
When you use the apps, we also process the following information:
Your connected accounts. When you connect a financial account, we receive details of that account from your financial institution, including account information, balances, cards, transactions, holdings and positions. These are privately held sources in the banking and investment sector. The data reaches us in one of three ways: through TrueLayer (for UK banks), through SnapTrade (for North American brokerages), or directly from your institution using the token or sign-in details described above. You choose each connection. We never connect an account unless you have instructed us to do so, and you can disconnect an account at any time through the app.
Your sign-in provider. If you register or sign in with Apple or Google, we receive your email address, and your name if your provider shares it, from your account with that provider, which is a privately held source. We also receive the technical confirmation of the sign-in itself: an identifier for your account with that provider and cryptographic proof that the sign-in is genuine. We do not receive your contacts, files or any other information from your provider account.
Public property data. To value a UK property that you have added, we look up historical sale prices and local house-price trends for the postcode you provide. This information comes from HM Land Registry public datasets (Price Paid Data and the UK House Price Index), which are publicly accessible sources maintained by a UK public body. The resulting figure is an estimate derived from public sales data, rather than a survey or a professional valuation, and the app presents it accordingly.
If you are not a Monvio user and only visit monvio.app, we do not set cookies, operate analytics or track you (section 13). As with any website, delivering the requested pages requires the technical processing of your connection's address for the time needed to serve them. We do not use that address for any other purpose (section 3 identifies the legal ground), and we do not create any record of who visits the website. The website collects information that you would recognise as relating to you only if you submit the waitlist form. In that event, the information collected is precisely that described in the waitlist bullet above: your email address, your name if you provide one, and the submission's IP address and approximate location.
Using the data described above, Monvio derives further information: your net worth and its history, spending totals and categories, portfolio allocation and performance, and the insights and digests generated by the app for you. This derived information is also personal data. It relates to you, is included when you export your data, and is deleted on the same terms as the data from which it was derived (section 7).
UK data protection law requires us to have a legal ground, known as a "lawful basis", for every use of personal data. We rely on three lawful bases. Contract: the data is required to provide the service for which you have registered. Consent: you have actively agreed to the processing and may withdraw that agreement at any time. Legitimate interests: we have a genuine and proportionate reason for the processing that does not override your rights, and you may object. Each use of your information and its corresponding lawful basis is set out below:
This is the complete list of purposes for which we use your data. We do not use it for any other purpose. If we wish to do so in the future, we will first update this policy and, where required by law, ask you.
Monvio uses AI to help interpret your financial information. The specific purposes for which AI is used are as follows:
This processing is carried out on our instructions by our AI provider, Google, under an agreement that does not permit your data to be used to train its models. Chat differs from the remainder of the app: it operates only with your consent, is off until you switch it on, and provides general information rather than regulated financial advice. You may turn it off at any time on the Advisor memory page, after which your chat threads and messages are deleted (section 9).
Monvio profiles your financial data in order to provide these features. However, we do not use automated processing to make significant decisions about you: nothing Monvio does determines whether you receive credit, a product, a price or a service. No automated decision-making subject to the safeguards in Article 22C of the UK GDPR takes place.
We do not sell your personal data. We do not share it with data brokers, advertisers or any other party for their own purposes. We share it only with the partners identified below and only for the purposes described in this policy. Each partner is required either to process your data solely on our instructions or to do so under terms that it presents to you directly:
If you sign in with Apple or Google, your sign-in provider will know that you use Monvio, as it would for any app accessed using that provider. We do not send the provider any information beyond that required for the sign-in process itself.
If we add or change a partner that processes your personal data, we will update this policy before that change takes effect. The list above is maintained as a current and definitive list, rather than an indicative one.
Apart from disclosures to these partners, we would disclose personal data only where the law genuinely required us to do so, for example in response to a binding court order, and would disclose only the minimum information required.
Data processed by Google is stored in the United States. UK law permits this transfer: relevant regulations under Article 45A of the UK GDPR exist for it (the UK–US data bridge — the UK Extension to the EU-US Data Privacy Framework).
Brokerage-connection data processed by SnapTrade is transferred to Canada. Relevant regulations under Article 45A of the UK GDPR also exist for this transfer (the UK's adequacy regulations for Canada, covering recipients subject to Canada's federal private-sector data-protection law).
In each case, the UK government has formally assessed the protections provided in the destination and approved transfers of this kind.
Our general approach is to retain your data while you use Monvio and to delete it when you leave, subject only to short and specific residual periods where required for an operational purpose, such as completing a backup cycle or maintaining an audit trail. The applicable retention periods are as follows:
As the expression "delete my account" may have different meanings in different apps, this paragraph explains precisely what it means in Monvio. When you confirm deletion, your account is deleted in a single operation: the data visible in the app, including connections, accounts, transactions, holdings, history, chat and settings, is erased, and your sign-in and sessions are removed with it. Copies held in slower systems, such as export files and notification queues, are removed in the minutes that follow. Authentication records are removed from the final backups within 180 days. There is no "deactivated" account and no shadow profile. The limited operational copies described above simply expire in accordance with their stated retention periods.
Disconnecting an individual connection operates in the same manner on a smaller scale: the data associated with that connection is deleted immediately and permanently, while the remainder of your account is unaffected.
Monvio is designed to hold a complete picture of your finances. We therefore treat the security of that information as a central element of the product, rather than as an ancillary compliance measure. In particular:
If a personal-data breach created a likely risk to you, we would report it to the Information Commissioner without undue delay and, where feasible, within 72 hours. Where a breach created a likely high risk to you and Article 34 required notification, we would inform you without undue delay, either directly or through an equally effective public communication where permitted by law. No online service can guarantee absolute security, and we do not claim otherwise. We can confirm that protecting this data is a core element of Monvio's product work and is addressed through the practices described above.
You can also assist in protecting your account by using a passkey, which cannot be phished, and by keeping your email account secure. Email accounts are used for account recovery across services generally, not only by Monvio. If you suspect that another person has accessed your Monvio account, please email us without delay.
The app itself will usually provide the quickest means of controlling your data, without requiring you to send an email:
You also have enforceable legal rights in relation to your personal data. Each right, its meaning and the most direct means of exercising it are described below:
Your right to object. Where we rely on legitimate interests (section 3), you may object at any time on grounds relating to your particular situation by emailing support@apptico.com. We will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is required to establish, exercise or defend legal claims. If we relied on such grounds, we would explain precisely why they applied. You do not need to contact us to object to crash reports: switching off "Share crash reports" in Settings → Privacy & Data stops that processing immediately.
Withdrawing consent. Where processing is based on your consent (Monvio Chat), you may withdraw it at any time by turning Monvio Chat off on its Advisor memory page. Your chat threads and messages are then deleted; anything saved to advisor memory remains stored until you delete it there. Withdrawing consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
How we handle rights requests. For anything that cannot be completed directly in the app, please email support@apptico.com. We will respond within one month and without charge. The law permits us to extend that period by up to two further months where requests are genuinely complex or numerous; if an extension is required, we will notify you within the first month. We may charge a reasonable fee for, or decline to act on, a manifestly unfounded or excessive request. A particular right may also be subject to its own statutory conditions and exemptions. If one applies to your request, we will identify it and explain why it applies. Where a request is submitted by email, we may first need to verify your identity before acting on it.
If you are dissatisfied with the manner in which we have handled your data, you have the right to complain to us under section 164A of the Data Protection Act 2018 by emailing support@apptico.com. We will acknowledge your complaint within 30 days, investigate it properly, and inform you of the outcome without undue delay.
You also have the right to lodge a complaint with the UK regulator, the Information Commissioner, at ico.org.uk, whether or not you first complain to us (section 165, Data Protection Act 2018).
Monvio is intended for adults. You must be at least 18 years old to use the service, as also stated in our Terms of Service, and we do not knowingly collect personal data from anyone under 18. If you believe that a child has created an account, please email support@apptico.com. We will investigate and delete the account.
We do not send marketing communications and do not use your data for advertising. We also do not purchase data about you from any person or add you to third-party mailing lists. If you join the waitlist, the emails you receive from us will concern one matter only: your access to Monvio. If any of these practices changes, we will first update this policy and obtain anything required by law. Marketing would take place only with a genuine opt-in and never by default.
The monvio.app website does not set cookies or operate analytics or tracking scripts, which is why it does not display a cookie banner. If this changes, we will first update this policy and obtain consent where required by law.
When we amend this policy, we will publish the revised version here with a new version number and effective date. If an amendment materially affects how we use your personal data, we will notify you in the app or by email before it takes effect.
Certain terms used in this policy have specific legal meanings, which are explained here in plain language. Personal data means any information relating to you as an identifiable person, from your email address and transaction history to figures that we derive about you. Processing means anything done with that data, including collecting, storing, analysing, sharing and deleting it. The controller is the person who determines why and how personal data is processed; for Monvio, that person is Apptico Ltd. The UK GDPR and the Data Protection Act 2018 are the UK laws under which this policy is written, as amended by the Data (Use and Access) Act 2025.
This policy was last updated on 17 July 2026 (version 4). Previous versions are available from us on request.
If you have any questions, requests, objections or complaints, or if this policy does not answer your query, please contact support@apptico.com.
Apptico Ltd · company number 17317836 · registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.