Privacy notice

Last updated: 5 November 2026

This notice explains how Monurus Digital Solution (202603285369), the business behind Monurus ("we", "us"), handles your personal data when you visit monurus.my, join the waitlist, or use the Monurus app. We follow the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This notice is available in English and Bahasa Melayu. If the two versions differ, the English version applies.

1. The personal data we collect

• When you join the waitlist: your email address, your first name if you give it, the banks and e-wallets you tick, your language, and when you agreed to this notice.
• When you create an account: your email address, your name as it appears on your bank statements, a scrambled form of your password (we never store the password itself), the invite code you used, and when you sign up and log in. We also keep which version of the terms and of this notice you agreed to and when, that you confirmed you're 18 or older, and your answer to the AI's notice (yes or no, and when).
• Your financial data: the statements you import and everything made from them: transactions, balances, payees, categories, tags, trips, installments and loans, rules, budgets, the tax relief amounts you type in (such as EPF and insurance), your notes, the receipts and other files you add to transactions, and the questions you ask in the chat with their answers. Statements can also include the names of people you paid or who paid you.
• Payments (once paid plans start): your plan, payment status and receipts. Card and bank details are handled by our payment provider; we never see your full card number.
• Technical data: your IP address, browser type and a record of logins and security events, used to protect your account and stop abuse. We also count how many statements you import, how many chat questions you ask and how much the AI is used, to apply your plan's limits; never what they contain. To keep the service working we also record which of our readers read each statement you import, its file type, how many transactions it found and whether it worked (never what's in it); the emails we send you (to which address, the subject and whether it was sent, never the text); and errors, with personal data removed.
• Feedback: what you write when you use Send feedback, with your email address and the page you sent it from.
• Where you came from: if you open Monurus from a link with a label (in an ad, a creator's post or one of our posts), we keep that label with your account when you sign up; with no label, the name of the website you came from (such as google.com), never the page. Until you sign up it waits in your browser, for up to 30 days. Ad platforms get none of it.
• Refer a friend: if you sign up with a friend's link, we keep who invited you, to give you both a free month when you start Pro. The friend who invited you sees how many people signed up with their link and how many started Pro, never who.
• On your phone (the Android app): whether the fingerprint lock and bill reminders are on. These stay on your phone. Bill reminders are scheduled on your phone from what's due, and never show amounts.

Your email address and password are needed to create an account, and your email address is needed to join the waitlist. Everything else you give is up to you, but without your statements the app has nothing to show.

2. Why we use it

• to run the waitlist and email you about early access and the launch;
• to create your account, keep it secure, and let you recover it;
• to read your statements, sort your transactions, show your reports and answer the questions you ask;
• to bill you for a paid plan, once paid plans start;
• to keep the service working, fix problems and prevent abuse;
• to see which of our posts, ads and invites bring people who stay, and to give refer-a-friend months;
• to meet our legal obligations.

We do not sell your personal data. We do not use your financial data for advertising, and we do not use it to train AI models.

3. How your financial data is protected

• Each person's financial data is kept in its own encrypted database, one for each of their profiles (such as Personal and Business). The key that unlocks the first is itself locked with your password, and separately with the recovery code you're given when you sign up; the keys of any other profiles are locked with the first one's.
• While you're logged in, our server unlocks your data to do what you ask, such as reading a statement or answering a question. When you log out or your session ends, it is locked again.
• If you add a passkey, it unlocks your data the same way: the secret it makes is sent when you log in with it, and never stored.
• Backups contain only the encrypted databases, and are themselves encrypted.
• If you lose both your password and your recovery code, we cannot open your data or get it back for you.

4. Who we share it with

We share personal data only with service providers that help us run Monurus, and only what each one needs:

• Our hosting provider, Amazon Web Services (AWS), which runs our servers in Singapore, stores the encrypted databases and backups there, and sends the emails we send you (Amazon SES, also in Singapore).
• Our AI service, Amazon Bedrock, also from AWS. It runs Claude, an AI model made by Anthropic, in AWS's data centres in Japan (Tokyo and Osaka) only. Anthropic never receives your data, AWS doesn't use it to train AI models, and we keep Bedrock's logging of requests off, so no copy of what was asked is kept. It receives something only when you use an AI feature, and only once you've said yes to the AI (the app asks the first time; "Not now" sends nothing):
  • to sort transactions: the payee, note, type and amount of each transaction, whether it's on a credit card, and examples of categories you've chosen before;
  • for the chat: your question, and the totals and transactions the AI looks up to answer it;
  • to suggest which payments may count for tax relief: the same details as for sorting, plus each payment's category;
  • to read a receipt you add: the text read off it on our server. The picture itself is not sent;
  • for "Read with AI": the text of the statement or picture you chose. It can still include the address and balances printed on the statement. Pictures are read on our server; the image itself is not sent.
  Before anything is sent, your name as it appears on your statements is replaced by "[ACCOUNT HOLDER]", and MyKad numbers, account and card numbers, email addresses, phone numbers and recovery codes are masked. It never receives your account's email address or your password. The Privacy page in the app lists each time something was sent to the AI (the date, the feature and how many items), never the content. AI answers can be wrong; the chat never recommends financial products and isn't financial, investment or tax advice.
• Our mailbox provider, which keeps the emails you send to helpdesk@monurus.my so we can answer them.
• Our error-reporting service, Sentry (Functional Software, Inc., United States), only if we turn it on (it's off for now). It would receive reports when something goes wrong in the app: the type of error, where in our code it happened, the page and your browser type. We remove personal data before a report leaves our server: no transactions, no amounts or other numbers, no email addresses and no login details.
• Our payment provider, once paid plans start, to take payments.
• Authorities, when the law requires it.

If you share one of your profiles with another Monurus user, they can see everything in it, but not change it, until you or they stop the sharing. It's opened with a key locked for them, so we still can't open it. We record each time they look and show it to you; they're told this before they accept.

On the Family plan, everyone in the household can see and change what's in the household, but not each other's own profiles. Its key is locked for each of them the same way.

5. Transfers outside Malaysia

Our servers, backups and email sending are in Singapore (AWS). The AI runs in Japan (AWS, Tokyo and Osaka), whose privacy law protects personal data to a standard similar to the PDPA. Both are under our contract with AWS, which requires it to keep the data secure. We send only what each task needs, and mask private details first (section 4).

The AI is your choice: the first time a feature needs it, Monurus asks, and the transfer to Japan happens only if you say yes. You can change your answer at any time in Settings, Privacy. Without the AI, importing, your own rules, budgets, reports and the tax relief page still work; sorting, "Read with AI", receipts, the chat and tax relief suggestions don't.

Emails you send us may be kept by our mailbox provider outside Malaysia. If we turn error reports on, they go to Sentry in the United States, with personal data removed first.

6. How long we keep it

• Waitlist: sign-ups that aren't confirmed are deleted after 30 days. Confirmed entries are kept until you leave the list, and at the latest until 12 months after the public launch.
• Your account and financial data: for as long as your account is open. When you delete your account, your data is deleted from our servers straight away, and from our backups when they expire, within 30 days. If you pay for a Family household that other people use, deleting it, or your account, waits 24 hours: everyone in it is emailed so they can download a copy, and you can cancel until then. Then it's deleted the same way.
• Accounts nobody uses: a free-trial account that hasn't been used for 12 months is deleted with its data, the same way. We email you 30 days and again 7 days before, and using the app once keeps it. An account whose email address was never confirmed is deleted 30 days after sign-up, with a reminder a week before. Accounts that have had Pro are never deleted this way.
• Security records: logins for 90 days; other security events (such as password changes) up to 12 months.
• Records that keep the service working: the emails we sent you for 180 days, the statements read for 12 months, and error reports for 30 days.
• Feedback: up to 12 months.
• What went to the AI (the list on the Privacy page): the last 1,000 times, for 12 months at most. What was sent isn't kept.
• Usage counts (how many statements, chat questions and how much AI each month): 24 months.
• Where you came from (a link's label, or the website before): 24 months after you sign up. After that we keep only the totals, without you.
• Emails you send us: 24 months after the last message in the conversation.
• Payment records: 7 years, as tax law requires, also after you delete your account.

7. Your rights and choices

• Access and correction: ask what personal data we hold about you, and ask us to correct it. Most of it you can see and change in the app yourself.
• Take your data with you: export your transactions as a spreadsheet, or a full backup, at any time, on any plan.
• The AI: say yes or no when the app asks, and change it at any time in Settings, Privacy. No means nothing more is sent to the AI.
• Withdraw consent and delete: leave the waitlist with the link in any of our emails, or delete your account in Settings (how: delete your account).
• Emails: we only email you about the waitlist, your account and the service. Once a month we remind you to import last month's statement; it has no figures in it, and you can stop it with the link in the email or in Settings. Now and then we may email news about Monurus (new features and important changes): stop it with the link in any of them, or in Settings. You can stop launch and product emails at any time.

To make a request, email helpdesk@monurus.my. We reply within 21 days. We may ask you to confirm it's you first.

8. Data breaches

If a breach of personal data happens, we will notify the Personal Data Protection Commissioner and tell the people affected, as the PDPA requires.

9. Cookies and what's kept in your browser

We don't use advertising or tracking cookies, or any analytics from other companies. Monurus keeps only these on your device:

• The login cookie (monurus_session): keeps you logged in, for up to 14 days or until you log out.
• Your screen settings, in the browser's storage (names starting pmm.): your language, the period, page size and sections you folded, which bank accounts you've hidden, the chat window's size and which chat is open, a banner you closed, and on the Android app whether bill reminders are on. They never leave your device.
• A link's label (monurus.came on this website, pmm.came in the app): the label on a link you opened (section 1), until you sign up, for up to 30 days.
• The app's own files, so it starts quickly and opens offline as far as the login screen. Never your data. A statement you share to Monurus from another app on your phone waits there only until the Import page opens it.

10. Children

Monurus is for people aged 18 and over: you confirm it with its own box when you sign up. We don't ask for your date of birth or MyKad. If we learn that an account belongs to someone under 18, we close it and delete its data.

11. Changes to this notice

If we make an important change to this notice or the terms, we'll email you or show it in the app before it takes effect, and the app asks you to agree again before you carry on. We keep which version you agreed to and when. The date at the top shows when this notice last changed. If we change who runs the AI, or where, we ask you again before anything more is sent.

12. Contact us

For anything about your personal data, write to helpdesk@monurus.my: it reaches the person responsible for privacy at Monurus.

Monurus Digital Solution (202603285369)
Email: helpdesk@monurus.my