Your financial data, protected
MoneyFeed handles income, expenses and receipts, so security matters. Here’s exactly how your data is protected, who processes it, and the control you keep over it.
Encryption in transit
Every connection to MoneyFeed is served over HTTPS/TLS, so data moving between your device, WhatsApp and our servers is encrypted.
Encryption at rest
Your data is stored in MongoDB Atlas, which encrypts stored data at rest and is hosted in managed, access-controlled infrastructure.
Phone + PIN authentication
Accounts are protected by phone-number verification and a personal PIN. PINs are stored only as a bcrypt hash — never in plain text.
Per-user data isolation
Every record is scoped to its owner. API requests are authenticated and can only read or write the signed-in user’s own financial data.
Abuse & fraud protection
Login and verification endpoints are rate-limited, and inbound WhatsApp webhooks are signature-verified so only genuine messages are processed.
Export your data anytime
You can export your transactions and receipts to CSV, Excel or PDF whenever you want — your data is never locked in.
Third-party services we use
MoneyFeed relies on a small set of trusted providers to operate. Each processes only what it needs to:
- TwilioDelivers and receives your WhatsApp messages.
- StripeProcesses subscription payments. MoneyFeed never stores your full card details.
- Google Gemini / OpenAIPowers AI categorization and receipt reading. Used to process the text and images you send.
- MongoDB AtlasManaged database that stores your account and financial records, encrypted at rest.
- Plaid (optional)Used only if you choose to connect a bank account for automatic import.
You stay in control
You can export your data (CSV, Excel or PDF) or delete your account entirely from Settings at any time. For full details, read our Privacy Policy, Data Protection page and Terms. Security questions? Email feed@maxefeed.com.
Security FAQ
Is my financial data secure with MoneyFeed?
Yes. Data is encrypted in transit over HTTPS/TLS and stored in MongoDB Atlas, which encrypts data at rest. Access is protected by phone-number and PIN authentication, PINs are stored as bcrypt hashes, and every record is scoped to its owner so users can only access their own data.
How is my WhatsApp data handled?
Messages and receipt images you send are processed to extract your income, expenses and tax details, then stored against your account. MoneyFeed uses Twilio to send and receive WhatsApp messages and is not affiliated with WhatsApp or Meta.
Do you sell my data?
No. MoneyFeed does not sell your personal or financial information. Third-party services are used only to operate the product (messaging, payments, AI processing and hosting).
Can I delete my account and data?
Yes. You can delete your account from Settings at any time, which removes your data, and you can export your transactions and receipts beforehand if you want a copy.
How do you protect my payment details?
Subscription payments are processed by Stripe. Card details are handled by Stripe’s PCI-compliant systems; MoneyFeed does not store your full card number.