LEGAL INFORMATION

Privacy policy

Updated October 7, 2026

Mollete is a personal finance app for iPhone and Mac. It works locally first: on iPhone, you can use its main features without creating an online account. This policy explains which data is processed and why.

The person responsible for Mollete and for processing the personal data described in this policy is Víctor Francisco Bombella Hernández, in Mexico. You can contact him using the email address on this page.

1. Data you enter in Mollete

Accounts, transactions, amounts, budgets, categories, notes, goals and preferences are stored on your device. If your account has access to backup and sync, the corresponding data is transmitted over HTTPS and stored on Mollete’s server to make it available across your devices. Local mode avoids sending your financial records to Mollete’s server.

2. Signing in with Google or Apple

When you sign in, we process the identifier supplied by the provider and, when available, your name and email address. The app may display the profile picture supplied by Google. We use this information to identify your account, maintain your session and associate your data and access permissions. Mollete does not receive your Google or Apple password and does not request access to your Gmail, contacts or Google Drive files.

The use and transfer of information received from Google APIs comply with the Google API Services User Data Policy, including its Limited Use requirements. We do not use this data for personalized advertising or sell it.

If you choose a custom profile photo with Mollete Pro, we store a reduced copy without personal metadata in private Railway storage to display it across your devices. It visually replaces the provider image without changing it on Google or Apple. It remains if Pro expires, and you can remove it in Settings. Replacing it, removing it or deleting your account schedules deletion of the remote copy, with retries during service outages; your devices may retain a local cache until refreshed. The photo is not shared with participants in shared plans.

3. Subscriptions and shared plans

Apple processes Mollete Pro purchases. Mollete uses transaction identifiers and statuses to verify your access; it does not receive your full payment card details.

Shared plans require storing the display name and the plan details, participants, allocations and contributions needed for collaboration. Other participants can view that shared information, but not your private accounts or the rest of your personal records.

4. Purposes and providers

We use data to provide the app’s features, authenticate you, verify subscriptions, provide backup and sync where applicable, enable collaboration and respond to support requests. We do not sell your data or use it for advertising tracking across apps.

Apple, Google and infrastructure providers participate in these functions. Railway hosts the service and its database; Cloudflare manages domain services. Network requests may include technical information such as IP addresses. Messages you send to support are processed to handle your request. These services may process information outside your country.

5. Merchant recognition and logos

Counterparty suggestions based on the transaction description are generated on your device. To display logos, the app queries Logo.dev with the non-empty counterparty name. This includes names you freely enter, which may identify a business or person. The provider receives that name and your device’s network address, but not the transaction description, amount, account, notes or sign-in token. These requests may also occur in local mode.

When you open the logo picker, the brand search text is sent to the Mollete backend and Logo.dev to retrieve available brands and variants. If you choose a horizontal logo, the backend queries its domain to renew the temporary URL. Autocompletion of saved counterparties remains local. The backend temporarily retains this metadata without storing images.

The device caches images according to the provider’s headers. The Mollete backend neither stores nor serves those images. If a logo is unavailable, a generic icon is displayed. Logos provided by Logo.dev.

6. Retention and deletion

Local records remain until you delete them or clear the application’s data. Remote data is retained while your account exists. You can request deletion in Settings → your account → Delete account and data. Shared plans you own, contributions and associated memberships are deleted according to the collaboration model. Removing Mollete’s access from Google or signing out does not replace this deletion process.

7. Security and your choices

Mollete uses platform security controls, HTTPS transport and the system keychain for session tokens. No system guarantees absolute security. You can use local mode, manage Apple or Google authorizations and change notification permissions on your device.

This public site does not include advertising analytics or its own tracking cookies. Infrastructure may process technical information needed to deliver and protect the site.

8. Privacy questions and requests

To request access to, correction of or deletion of your data, or to ask a question, write to support@mollete.app. We may need to verify your identity to protect the information. Do not include passwords or complete financial records.

9. Changes to this policy

We will publish updates on this page with their date. If a change requires additional information or consent, we will request it through the appropriate channel.