Security at Monovo
Access controls and practical safeguards for your money data.
Encrypted everywhere
TLS encryption in transit and AES-256 encryption at rest.
Read-only banking
Bank links can view, never move, money. Consent expires every 90 days.
Owner-scoped records
Access rules restrict private records to their owner. Shared household items and authorised support operations have separate permissions.
No passwords stored
Passwords are hashed by our authentication provider. We never see them.
On-device reports
Your health dossier PDF is built on your device and never uploaded.
You're in control
Export or permanently delete everything in one tap from Settings.
100% ad-free
No ad networks, tracking pixels or behavioural profiling — on every plan, forever.
Subscriptions you can't fake
Plan access is checked on our servers, not in your browser, so paid features can't be unlocked by tampering with the app.
Ongoing checks
We use automated backend and dependency checks alongside targeted tests. These checks are not an independent security audit or a guarantee against every attack. A deeper review remains outstanding.
Report a vulnerability
Found a security issue? Email support@monovo.co.uk with "Security report" in the subject. We'll respond within 48 hours and credit responsible disclosures.