This Privacy Policy for KOMP BG LTD ("we", "us", "our", "the Service") tells you how we collect, use, and share your information when you use the web application at my-money.report and the My Money Report mobile application. We appreciate your trust and seek to explain our privacy practices as clearly as possible. We encourage you to read this document carefully before using the Service. If you do not agree with any part of it, please do not use the Service, or discontinue use immediately. By using the Service, you accept the practices described in this Privacy Policy.
Contact for all privacy matters: [email protected] or the contact form on our website.
When we collect information, we do so to let you use the Service seamlessly. We collect the following categories of information.
Account data - name, email address, password (stored only as a secure hash), language and formatting preferences, plan type and plan history.
Financial data you enter - expenses, incomes, budget plans and scheduled items, savings and savings buckets, money transfers, and the categories, tags, and locations you create. This data exists so the Service can work for you; we do not use the content of your individual financial records for any other purpose.
Sharing data - your sharing connections, the permissions you configure, and the data you choose to make visible to connected users. Money transfers you record with a connected user are stored as part of both participants' records.
Payment data - payments are processed by our payment provider (Viva Wallet); we never receive or store your card number. We store your subscription status, plan history, and billing events (dates, amounts, invoice references) as required for accounting.
Security and account-history data - sign-in sessions, consent events (terms and Free-plan consent, with the accepted document version), plan changes, and security-relevant events. We keep this log to protect your account and to be able to demonstrate consent.
Technical data - server logs and error reports needed to run and secure the Service. Sign-up and similar public forms are protected by Google reCAPTCHA, which processes technical signals to distinguish humans from bots.
Notification data - your notification preferences, email delivery data, and (on mobile, if you enable push notifications) a device push token.
Cookies and similar technologies - see our Cookie Policy. Essential cookies (for example your sign-in session) are always active; analytics and advertising cookies are used only according to the choice you make in the cookie consent banner.
We obtain information about you in the following ways.
a. Information that you give us - when you create an account and use the Service, you provide information such as your name and email address, and the financial records you choose to enter.
b. Information we collect automatically - when you access the Service from a device, we automatically collect technical information such as server logs, error reports, and cookie data (see the Cookies section below).
c. Information we receive from third parties - our payment provider (Viva Wallet) returns your subscription and billing status so we can keep your plan up to date, and a user you are connected with may record a money transfer that becomes part of your records. We do not buy personal information about you from data brokers, aggregators, or marketplaces.
Cookies are small packets of information placed on your device so that we can recognise you and remember information such as your sign-in session and your choices on the Service. Essential cookies are always active; analytics and advertising cookies are used only according to the choice you make in the cookie consent banner. For full details, please see our Cookie Policy.
You can control non-essential tracking directly on the Service: through the cookie consent banner (reachable any time via the "Cookie settings" link) you may disable any cookie that is not strictly necessary, and on mobile you can change your advertising choice under "Privacy options".
We do not sell your personal data, and we do not use the content of your individual financial records for advertising.
When we no longer have a legitimate business need to process your personal information, we delete or anonymise it, or - if that is not immediately possible (for example because it is held in backup archives) - securely store and isolate it from further processing until deletion is possible.
We use the following categories of service providers, bound by data-processing agreements:
We may also disclose your information in the following situations:
Some providers may process data outside the EU/EEA; where they do, transfers are covered by an adequacy decision or EU Standard Contractual Clauses.
We do not sell or share the personal information we collect from our users for cross-context behavioural advertising, and we do not use the content of your individual financial records for advertising.
The Free plan is supported by advertising provided by Google (web advertising on the website; Google AdMob in the mobile application, where available).
Automated processing - we use limited automated processing of the information you enter (for example categorising and aggregating your records) to provide the Service's reports and statistics to you. We do not make decisions producing legal or similarly significant effects about you solely by automated means.
Legal basis for the collection - the legal bases on which we process your personal data (contract, legal obligation, legitimate interest, and consent) are set out for each purpose in Section 5.
Consequences of non-consent - some information is required to provide the Service. You may refuse consent, but doing so may limit your access to the Service or reduce available features.
If you are in the EU/EEA (and in many other jurisdictions), and in accordance with Articles 12 to 23 of the General Data Protection Regulation, you have the right to:
To exercise any of these rights, contact us at [email protected] or via the contact form.
As a controller established in Bulgaria, our principal data-protection supervisory authority is the Bulgarian Commission for Personal Data Protection ("CPDP" / "КЗЛД"):
The Service is intended for users who are at least 18 years old or have parental consent. We do not knowingly collect data from children. If you are a parent or legal guardian and believe your child has provided us with information without your consent, please contact us; upon verification we will remove the information from our database.
We take reasonable measures to keep the information we collect secure - passwords are stored only as a secure hash, and data is transmitted over encrypted connections. However, no method of internet transmission or digital storage is completely secure. While we use commercially reasonable and appropriate security measures to protect your information, we cannot guarantee absolute security.
The Service may contain links to external websites, apps, or services that we do not operate and that are not governed by this Privacy Policy. We recommend that you review the privacy policies of those websites or services before providing any personal information to them.
We may update this Privacy Policy from time to time to reflect changes in the law or in our privacy practices. New versions are published with an updated date and previous versions are retained. We will notify you of material changes by email or in-app notification, and we recommend that you review this Policy periodically.
For any questions or concerns regarding your privacy, or to exercise any of your rights, you may contact us: