Privacy Policy

This Privacy Policy describes how Zaling Corporation (“Zaling,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with Moneytabs - a privacy-forward product. Moneytabs includes the websites at moneytabs.app and moneytabsapp.com, related applications, household-space and group-space budgeting features, optional financial connections, insights, premium plans, and any connected card program we offer with a partner bank (collectively, the “Services”).

When these pages say “space,” they mean a shared Moneytabs workspace: a household space, a group space, or one you keep for yourself. By creating an account, joining a space, or otherwise using the Services, you acknowledge this Policy. If you do not agree, do not use the Services.

1. Information we collect

We collect information in the following categories, and only as needed to provide the Services you use. Not every category applies until you turn on the related feature.

Account and profile

• Name or display name, email address, password (stored only as a one-way hash), profile photo if you add one, and sign-in identifiers from a third-party provider if you use social login.
• Account status and authentication metadata.

Space and membership

• Space name and settings you choose (for example display name, default currency, week start, locale, and month reset day).
• Membership records: role (owner, admin, member, or viewer), status (active, invited, or disabled), join date, and whether a Space is your default.
• Invitations you send or accept, including invite codes, expiry, and the email or identifier used to deliver the invite.

Budgeting and expense content you provide

• Budgets you create (kind, name, status, currency, totals, date windows, notes, and category or set-aside allocations).
• Expenses and adjustments logged to a Space ledger (amount, date, merchant or note, budget association, status such as posted or voided, and similar short fields).
• Other Space content you type into the Services.

This financial content is treated as personal information because it can identify spending patterns for you and the people who share your Space.

Connected financial accounts (optional)

If you choose to link an external bank, credit, debit, or similar account through a Connection Provider:

• Institution name, account type, masked account numbers, and tokenized connection identifiers.
• Balances, available credit where provided, and transaction history the provider returns (date, amount, merchant, category hints, pending vs. posted).
• Status of the connection (active, needs re-auth, revoked) and technical logs needed to keep the link working.

We do not collect or store the full login credentials you type into the Connection Provider. Those stay with that provider under its own terms.

Insights and derived data (optional)

• Categories, merchant clean-up, recurring-bill flags, budget-vs-actual comparisons, daily-goal calculations, and similar insights generated from Your Content and any connected feeds.
• Product-usage signals used only to improve those calculations (for example, that a suggested category was accepted or corrected).

Premium plan and billing

• Plan name, price, renewal date, and limited payment-method metadata from our payment processor (for example brand and last four digits). We do not store full card-on-file PAN or CVV for subscription billing.

Connected reloadable debit card (optional, partner-issued)

If we later offer a Moneytabs-connected reloadable debit card with a Partner Bank, that bank and its vendors will collect information needed to open and run the card account. We may collect or receive:

• Application and identity information you submit for the card (legal name, date of birth, address, last four of SSN or other government identifier, phone, and similar KYC fields).
• The Partner Bank’s decision (approved, declined, pending) and the reason codes it is allowed to share with us.
• Card program data: masked card number or token, last four digits, expiration month/year, card status, spend controls you set in the app, load and transfer history, and card transactions.
• Customer-support tickets about the card that you send to us.

The Partner Bank is the issuer of the card account. Full primary account number, CVV, PIN, and the official card ledger live with the Partner Bank and its card processor, not in Moneytabs as a substitute bank core. Any deposit insurance, if available, is provided solely by the Partner Bank under its own disclosures - not by Zaling.

Communications

• Support messages, feedback, and emails you send us.

Automatically collected

• Browser or device type, language, referring site, pages viewed, timestamps, approximate location derived from IP address, and diagnostic logs.
• Cookies, local storage (for example a theme preference), and similar technologies. See Cookies.

From third parties (only to provide the Services)

• Identity providers if you sign in with Google, Facebook, or a similar service (typically name, email, and profile photo, subject to that provider’s settings).
• Payment processors if you purchase a paid plan.
• Connection Providers, but only after you start a link.
• The Partner Bank, card processor, KYC/CIP vendor, and network, if you apply for or use a connected card.
• Fraud, identity, and sanctions-screening vendors used by us or the Partner Bank.
• Public or commercially available sources only as needed to operate or secure the Services.

2. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services - including Space membership, budgets, expense logging, daily-goal calculations, activity history, connections, insights, premium billing, and any card program interface.
• Authenticate you, keep sessions secure, and prevent unauthorized access to a Space or a connected card.
• Send service communications (invites, security notices, connection-reauth prompts, card status, and other transactional email). Marketing email, if we send any you did not request, will include a way to opt out.
• Process payments for a paid plan.
• Populate and reconcile your Space books from connected accounts or card activity you choose to include.
• Generate optional insights and spending breakdowns.
• Pass application and servicing data to the Partner Bank and its vendors so they can open, fund, load, freeze, replace, or close a card account.
• Detect and prevent fraud, abuse, sanctions violations, and security incidents.
• Comply with law and enforce our Terms of Service.
• Analyze usage in aggregated or de-identified form to improve the product for users - not to build marketing lists or profiles for sale.
• With your consent or as otherwise permitted by law.

Moneytabs is a budgeting and tracking tool, and - if launched - a front end to a Partner Bank card. We do not sell your personal information. We do not use your Space expense ledger or connected transactions to underwrite an unrelated third-party credit product, sell a credit score, place targeted ads, or train a model we sell to others.

3. How we share information

We share personal information only as needed to provide the Services to you. Recipients are limited to:

• Other members of a Space you join or create, to the extent you (or Space settings) make that information visible. Connected-account feeds and card activity are shared into a Space only when a member chooses to include them there. Choose Space members the way you would share a joint checkbook.
• Service providers and subprocessors that host infrastructure, send email, process payments, provide analytics, categorize transactions, or help us build and operate the Services, under contractual confidentiality and data-protection obligations.
• Connection Providers you authorize.
• The Partner Bank, card processor, card network, KYC/CIP and fraud vendors, and similar program parties if you apply for or use a connected card. Those parties use the data to issue and service the card under their own privacy policies and the Cardholder Agreement.
• Identity and payment processors you initiate.
• Affiliates within Zaling.
• Legal authorities when required by law, legal process, or to protect rights, safety, or property.
• A buyer or successor in connection with a merger, acquisition, or sale of assets (with notice where required). A card program may also transfer only as the Partner Bank’s agreements allow.
• Others with your direction or consent.

We do not sell personal information to third parties. We do not rent, trade, or disclose space ledgers, connected-transaction feeds, or card activity for advertising or for anyone’s marketing list. See California and other states - we do not sell or share personal information as those statutes use those words.

4. Spaces, invites, and shared ledgers

A space is a shared Moneytabs workspace - a household space, a group space, or one you keep for yourself. When you create or join one:

• Your display name, role, and the content you add become visible to other members according to their role.
• Owners and admins can invite people, change roles, and remove members.
• A viewer may see Space information without full edit rights.
• Leaving a Space does not automatically erase history other members still need (for example expenses you logged). An owner may request deletion of the Space itself.
• The sole remaining owner cannot abandon a Space without transferring ownership or closing it.
• A bank connection or card you personally hold is yours. Linking it, or posting its activity into the Space ledger, is a choice. Other members do not automatically receive login rights to your external account or card.

You are responsible for inviting only people who should see the Space’s money details, and for telling them that the ledger is shared.

5. Data retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

• Account and membership records last for the life of the account or Space, plus a short period needed to complete deletion and keep security logs.
• Budgets and expense-index items remain with the Space until deleted, voided in the product, or the Space is closed.
• Voiding an expense keeps an audit-style record that the item was reversed rather than silently rewriting history.
• Connected-account tokens are kept until you disconnect or the Connection Provider expires them. Cached transactions already written to a Space ledger remain until you or another authorized member edit or void them.
• Card-application and servicing records are kept as required by the Partner Bank and by banking recordkeeping rules, which may outlast your use of the Moneytabs interface.
• Backup and log copies may persist for a limited time after deletion.

You may request deletion of your account subject to legal holds, the rights of other Space members, Partner Bank retention, and technical limitations. Closing Moneytabs does not by itself close a Partner Bank card account - you must follow the bank’s closure process.

6. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including restricted servers, hashed passwords for email accounts, tenant isolation of Space data, tokenized connections rather than stored bank passwords, and access controls based on membership role. Card secrets (full PAN, CVV, PIN) are designed to stay with the Partner Bank and its processor. No method of transmission or storage is 100% secure. You are responsible for safeguarding your credentials, for the people you invite, and for devices that display a card number or wallet pass.

7. Your rights and choices

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Opt out of certain processing or “sales”/sharing.
• Receive a portable copy of data.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.

You can also update profile fields in the product, leave a Space, revoke unused invites (if your role allows), disconnect a financial account, turn insights off if we offer that control, close your Moneytabs account, and - for a card - freeze, replace, or request closure through the controls we or the Partner Bank provide.

To exercise rights with Zaling, email privacy@zaling.com. We will verify requests as required by law. Authorized agents may submit requests subject to verification. Requests that only the Partner Bank can fulfill will be pointed to that bank.

8. Cookies and similar technologies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. We use cookies and similar technologies only to run signed-in sessions, remember preferences (such as theme), see whether the product is working, and keep the Services secure. We do not use advertising cookies and we do not allow third parties to collect data from the Services in order to sell it or to advertise to you elsewhere. Visitors who refuse cookies in their browser may find that signed-in features do not work.

9. International transfers

If you access the Services from outside the United States, your information may be transferred to and processed in the United States (or other countries where our providers or a Partner Bank operate), which may have different data-protection standards. A connected card, if offered, may be limited to U.S. residents.

10. Children’s privacy

The Services are not directed to children under 13 (or the higher age required by local law). You must be at least 18 to create an account, connect an external financial account, or apply for a connected card. We do not knowingly collect personal information from children under 13.

If you believe a child has provided Zaling with personally identifiable information without the consent of a parent or guardian, contact privacy@zaling.com. If we become aware that a child under 13 has provided personal information, we will delete it.

11. California and other state privacy rights

Notice at Collection / CCPA/CPRA. Categories collected, purposes, and whether sold or shared are described above. Categories include identifiers; commercial and financial information you enter or connect (budgets, expenses, transactions, balances); information needed for a card application (which may include government identifiers and other sensitive personal information); internet / device activity; and inferences we may draw to power insights or improve the product.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not sell or share Space expense contents or connected-transaction feeds. A change to that posture would be published first, with any opt-out the law requires. Questions: privacy@zaling.com.

California residents may designate an authorized agent and have non-discrimination rights. Other state laws (Virginia, Colorado, Connecticut, and similar) provide comparable rights; contact us to exercise them.

We do not use or disclose sensitive personal information for purposes other than those permitted by CPRA for providing the Services (for example, to keep your account secure, to complete Partner Bank identity checks you request, or to display the ledger you asked us to keep).

12. Financial connections, insights, and the card program

These features are optional and may ship after the core budgeting product.

12.1 Connections

• A connection is initiated only by you.
• The Connection Provider’s privacy policy also applies to data it processes.
• We use connected balances and transactions to populate or reconcile your books and to operate insights - not to sell the feed.
• You can disconnect. Historical items already written to a Space ledger remain until you or another authorized member edit or void them.

12.2 Insights

• Insights are convenience calculations on data you and your Space provide or connect. They are not personalized investment, tax, credit, or legal advice.
• You may correct a category or exclude an item where the product allows it.

12.3 Connected reloadable debit card

• The card is issued by a Partner Bank, not by Zaling. Zaling is not a bank.
• The Partner Bank’s Cardholder Agreement, EFTA disclosures, fee schedule, and privacy notice govern the card account. Ours govern the Moneytabs interface.
• Identity information you submit for the card is used to open and service that account and to meet banking law.
• Card activity may appear in Moneytabs so you can budget against it. Official records of the card account are the Partner Bank’s.
• Disputes about an unauthorized card transaction are handled under the Cardholder Agreement, typically with the Partner Bank. Contact support@zaling.com and we will help route the claim.

13. Third-party links

The Services may link to third-party sites or services, including a Connection Provider, payment processor, or Partner Bank. This Policy does not apply to those properties. Their terms and privacy policies govern.

14. Changes to this Policy

We may update this Policy. Material changes will be posted with a new effective date. Continued use after the effective date constitutes acceptance. If we add a live card program or a named Connection Provider, we will update the relevant sections and identify those parties.

15. Contact us

For privacy requests or questions:

• Privacy requests: privacy@zaling.com
• Product support: support@zaling.com
• Legal notices: legal@zaling.com
• Company: Zaling Corporation

Moneytabs is a product of Zaling Corporation.