Tudlab Money privacy policy
The short version
Your money data stays on your device. Tudlab cannot see it, and we have no copy of it.
What stays on your device
Everything you put into Tudlab Money: statements, transactions, categories, budgets, goals and card details. It is stored in your browser, encrypted with your passphrase. We never have the passphrase, so if you lose both it and your recovery key, nobody, including us, can recover your data.
If you choose to keep your data in your own Google Drive, it is stored there in the same encrypted form, in a file only Tudlab Money can open (Google's drive.file permission). We cannot read it.
Bank alert emails (optional)
If you turn on bank alerts, you sign in with Google and allow Tudlab Money to read your email (Google's gmail.readonly permission). The app then:
- searches only for emails from bank alert senders, and reads only those;
- reads them on your device to find the amount, merchant, card and time;
- never sends, changes or deletes any email;
- never sends your email, or anything taken from it, to Tudlab or anyone else.
You can turn this off in the app at any time, and remove the permission at myaccount.google.com/permissions.
Tudlab Money's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What Tudlab does receive
- Feedback you choose to send. A mood, a topic, your note and, if you leave the box ticked, app details with no money data in them. Kept for up to 90 days. We do not store your IP address with it.
- Push alerts, if you turn them on. A random ID and the address your phone's browser gives us for sending notifications. Nothing about your money is ever in a notification we send.
The Tudlab Money app uses no analytics, advertising or tracking, and sets no cookies other than your language choice (see below). It sends nothing about your visits anywhere.
How this website counts visits
This website, tudlab.com, counts visits itself. Each page loads a tiny invisible image from our own server, with no third parties. For each visit we keep only the page you opened, your country, whether you are on a phone, tablet or computer, and a short code that lets us count unique visitors for that one day. The code is made from a secret that changes every day, so it cannot be used to recognise you on another day or on another site.
We never keep your IP address, your browser details, the page you came from, or any cookie. The only thing we store on your device is your language choice (English or Chinese), if you press the language button: a cookie called tudlab_lang (also kept in your browser storage) that holds just that one word, is shared by the Tudlab sites, and is never used to track you. This site runs one small script of our own, only to apply that choice. Visit records are deleted after 90 days.
Your rights
Under Singapore's Personal Data Protection Act you can ask what personal data we hold about you, and ask us to correct or delete it. Because your money data never reaches us, in practice this covers only feedback and push IDs. Email support@tudlab.com and we will reply within 30 days.
Contact
Tudlab, Singapore. support@tudlab.com