Privacy Policy

1. Accountability

Lad Intelligence Inc. is responsible for the personal information under its control. We have designated a privacy contact who is accountable for our compliance with this policy and applicable privacy laws.

2. Purposes of Collection

We collect personal information for the following purposes:

• Account creation and authentication - to create your account, verify your identity, and provide secure access.
• Expense tracking and reporting - to record, categorize, and summarize your financial transactions.
• Household sharing - to enable shared expense tracking with members of your household, if you choose to use this feature.
• Receipt scanning - to extract transaction details from receipt images using AI processing.
• Data export - to generate downloadable reports of your data in XLSX or TSV format.
• Security and fraud prevention - to detect unauthorized access, protect against abuse, and maintain audit trails.
• Service improvement - to understand usage patterns and improve the Service (without third-party analytics tools).

If we identify a new purpose for collecting your information, we will update this policy and, where required, seek your consent before proceeding.

3. Consent

We obtain your consent when you:

• Create a Moiety account and agree to this Privacy Policy and our Terms of Service.
• Voluntarily enter expense data, household information, or upload receipt images.
• Choose to invite another person to your household.

You may withdraw your consent at any time by deleting your account. Withdrawal of consent may impact our ability to provide the Service to you. To delete your account and all associated data, use the account deletion feature in the app or contact us at help@ladintelligence.com.

4. Limiting Collection

We collect only the personal information necessary to provide the Service. Specifically:

Information You Provide

• Username - a username of your choosing. We do not require your real name.
• Password - stored only as a bcrypt hash. We never store or have access to your plaintext password.
• Expense records - date, description, category, amount, currency, type (withdrawal, deposit, or income), and optional notes.
• Household data - household name, member relationships, invitation records, and settlement records (only if you use the household feature).
• Receipt images - uploaded temporarily for AI-based text extraction. See Section 6 for retention details.

Information Collected Automatically

• IP addresses - logged as part of security audit trails for login events and administrative actions.
• Session tokens - JWT-based session tokens stored in httponly cookies for authentication.
• CSRF tokens - stored in cookies to protect against cross-site request forgery attacks.

We do not collect: real names, email addresses (unless you contact us), phone numbers, social media accounts, location data, device fingerprints, or any information from third-party sources.

5. Use, Disclosure, and Retention

Use

Your personal information is used only for the purposes identified in Section 2. We do not use your data for advertising, marketing to third parties, or any purpose unrelated to providing the Service.

Disclosure

We do not sell, rent, trade, or otherwise share your personal information with third parties for their marketing or commercial purposes. We may disclose your information only in the following circumstances:

• Service providers - Amazon Web Services (AWS) hosts our infrastructure and processes receipt images through Amazon Bedrock. AWS acts as our data processor under contractual obligations.
• Household members - if you use the household feature, shared expenses are visible to other members of your household. You control what you share.
• Legal requirements - we may disclose information if required by law, court order, or governmental regulation.

Retention

We retain your personal information for as long as your account is active. When you delete your account, all associated data is permanently removed. While deleted data is immediately removed from the application, automated database backups may retain deleted data for up to 35 days before permanent removal. Specific retention details:

• Account data and expenses - retained until you delete your account.
• Receipt images - processed in real time for text extraction and not stored permanently after processing is complete.
• Audit logs - retained for security purposes for the duration of your account.

6. Accuracy

We rely on you to provide accurate information. You can edit or delete your expense records, household data, and other personal information at any time through the Moiety interface. If you believe any information we hold about you is inaccurate, you may correct it directly or contact us for assistance.

7. Safeguards

We implement technical and organizational safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction:

• Encryption at rest - all data stored in DynamoDB is encrypted using server-side encryption (SSE).
• Encryption in transit - all communications between your device and our servers use HTTPS/TLS encryption.
• Password security - passwords are hashed using bcrypt before storage. Plaintext passwords are never stored.
• Session management - JWT session tokens are stored in httponly cookies, preventing access by client-side scripts.
• CSRF protection - cross-site request forgery tokens protect against unauthorized actions.
• Login security - rate limiting and account lockout mechanisms protect against brute-force attacks.
• Data isolation - each user's data is logically isolated from other users' data.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

8. Openness

This Privacy Policy is publicly available at all times. We are committed to transparency about our information practices. If we make material changes to this policy, we will notify you by posting a prominent notice within the Service before the changes take effect.

9. Your Right to Access Your Data

You have the right to access the personal information we hold about you. Moiety provides built-in tools to exercise this right:

• In-app data export - download all your expense data at any time in XLSX or TSV format.
• Direct access - view, edit, and delete your expense records and household data through the app interface.
• Email request - you may also request a copy of your personal information by contacting help@ladintelligence.com. We will respond within 30 days.

10. Challenging Compliance

If you have concerns about our privacy practices or believe we are not complying with this policy, you may:

1. Contact us directly at help@ladintelligence.com. We will investigate and respond within 30 days.
2. File a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you are not satisfied with our response.

Important Disclosures

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: