Privacy Policy

App: Monibox — Budget Tracker Publisher / Data Controller: Umut Deniz Doğan Address: ESENLIK MAH. 9161 SK. SUCUOGLU IC KAPI NO: 13-17 KARABAGLAR/IZMIR Contact: udenizdogan@gmail.com Effective date: 17.09.2026 Last updated: 17.09.2026

This Privacy Policy explains how Umut Deniz Doğan ("we", "us", "our") collects, uses, stores, and protects your personal data when you use the Monibox mobile application ("Monibox", the "App"). It is written to comply with the EU/UK General Data Protection Regulation ("GDPR") and the Turkish Personal Data Protection Law No. 6698 ("KVKK").

By using Monibox, you agree to the practices described in this policy.

1. Who we are (Data Controller)

For the purposes of GDPR and KVKK, the data controller (veri sorumlusu) is:

• Umut Deniz Doğan
• ESENLIK MAH. 9161 SK. SUCUOGLU IC KAPI NO: 13 -17 KARABAGLAR/IZMIR
• Contact: udenizdogan@gmail.com

If you have any questions about this policy or how we handle your data, contact us at the email above.

2. Data we collect

We only collect data that is necessary to operate Monibox. Monibox does not connect to your bank, credit card, or any financial institution. We do not use open banking, and we never automatically import your transactions. All budget and transaction data is entered manually by you.

a) Account & identity data

When you create an account or sign in (e.g., via email or Sign in with Apple), we process:

• your email address or the identifier provided by your sign-in method;
• an internal user ID used to associate your data with your account.

(If Monibox uses anonymous/device-based cloud sync instead of email accounts, adjust this section accordingly.)

b) Financial data you enter

Because Monibox is a budgeting tool, you may enter:

• income, expenses, and transaction records;
• budgets, categories, notes, and amounts;
• currency and account labels you create.

This information is entered manually by you. It is stored to provide the App's core functionality and to synchronize your data across your devices. It is not shared with advertisers and is not used for profiling.

c) Subscription & purchase data

Monibox offers paid subscriptions purchased through the Apple App Store. Payments are processed by Apple, and subscription entitlements are managed through RevenueCat, Inc. We do not receive or store your full payment card details. Through RevenueCat and Apple we may receive:

• your subscription status (active/expired/trial);
• purchase and renewal events and transaction identifiers;
• an app-specific (often anonymized) user identifier.

d) Device & technical data

To keep the App secure and working correctly, we may process:

• device model, operating system version, and App version;
• language and region settings;
• app-generated identifiers and log/diagnostic data;
• crash reports and basic usage analytics (if [ANALYTICS / CRASH PROVIDER] is used — otherwise remove).

We do not knowingly collect precise location data.

3. How we use your data (purposes)

We use your data to:

• provide, operate, and maintain Monibox and its core budgeting features;
• store and synchronize your data across your devices via our cloud infrastructure;
• manage your subscription, entitlements, and access to paid features;
• provide customer support and respond to your requests;
• maintain security, prevent fraud/abuse, and debug problems;
• comply with our legal obligations.

4. Legal bases (GDPR) and grounds (KVKK)

Under the GDPR, we rely on:

• Performance of a contract (Art. 6(1)(b)) — to provide the App and manage your subscription;
• Legitimate interests (Art. 6(1)(f)) — to secure the service, prevent abuse, and improve the App;
• Consent (Art. 6(1)(a)) — where required, e.g., optional analytics;
• Legal obligation (Art. 6(1)(c)) — to comply with applicable law.

Under the KVKK, we process personal data on the grounds set out in Articles 5 and 6, including that processing is necessary for the performance of a contract, for our legitimate interests, for compliance with a legal obligation, or based on your explicit consent (açık rıza) where required.

5. Sharing your data — service providers (processors)

We do not sell your personal data. We share data only with service providers who process it on our behalf (veri işleyenler), under appropriate agreements:

We may also disclose data where required by law, court order, or to protect our legal rights.

6. International data transfers

Some of our service providers (such as Apple and RevenueCat) are located outside Turkey and the EU/EEA, including in the United States. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) and equivalent measures required under the KVKK for cross-border transfers.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide Monibox. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations.

You can request deletion of your account and data at any time via udenizdogan@gmail.com.

8. Data security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and secure cloud infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Under the GDPR, you have the right to:

• access your personal data;
• rectify inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time (without affecting prior processing);
• lodge a complaint with a supervisory authority.

Under the KVKK (Article 11), you have the right to:

• learn whether your data is processed and request information about it;
• learn the purpose of processing and whether it is used accordingly;
• know the third parties to whom data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data under the conditions in Article 7;
• request notification of correction/deletion to third parties;
• object to results arising from automated analysis;
• claim compensation for damages due to unlawful processing.

To exercise any of these rights, contact us at udenizdogan@gmail.com. We will respond within the timeframes required by applicable law. In Turkey, you may also apply to the Personal Data Protection Authority (KVKK Kurumu). In the EU/EEA, you may contact your local data protection authority.

10. Children's privacy

Monibox is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify you in the App. Your continued use of Monibox after changes take effect constitutes acceptance of the updated policy.

12. Contact

Umut Deniz Doğan Email: udenizdogan@gmail.com Website: https://www.getmonibox.com