Privacy policy
Last updated 7 November 2026
This policy explains what information MoneyLeaks ("we", "us") collects and how it is used. We follow the New Zealand Privacy Act 2020.
Your bank statements
When you use the statement tool, the file you select is read by your own web browser using JavaScript running on your device. The file and the transactions in it are not uploaded to us or to anyone else, and we never see them. The analysis happens entirely on your device and disappears when you close or reload the page.
The statement tool page is served with a security policy that blocks all outgoing data connections from that page. The tool page also does not load advertising or analytics scripts.
What is stored on your device
The tool stores a small amount of information in your browser's local storage so your preferences are remembered:
- category rules you create for specific payees (for example, that "Smith & Co" is a hardware store);
- which individual transactions you chose to exclude (stored as the date, amount and description only);
- whether you prefer light or dark mode;
- whether you view amounts per week, fortnight or month.
Remembering your statements is optional and off by default. If you turn on "Keep my statements in this browser", the statements you loaded are stored in this browser's local storage so your budget opens straight away next time. They are still never sent to us. Turning the option off deletes them. Don't use this option on a shared or work computer.
You can also save a backup file to your own device. It contains your category rules and, if you choose, your statements. We never see this file; keep it somewhere private.
All of this stays on your device. You can remove it at any time with "Forget everything on this device" in the tool's Save & rules tab, or by clearing your browser's site data.
Advertising and cookies on our guide pages
Our guide and information pages (not the statement tool) show advertising provided by Google AdSense. Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other websites. You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, and you can turn off personalised advertising in Google's Ad Settings.
Third-party vendors, including Google, use cookies to serve ads based on prior visits. Visitors from regions where consent is required will be asked for consent before personalised ads are shown.
Information you send us
If you email us, we receive your email address and whatever you include in your message. We use it only to reply and do not share it. Please do not send us your bank statements.
Hosting
The website is hosted by Netlify, which may keep standard server logs (such as IP address, browser type and the pages requested) for security and reliability. These logs never include your statement data, because that is never sent to the server.
Your rights
Under the Privacy Act 2020 you can ask for access to, or correction of, personal information we hold about you. Contact us at hello@moneyleaks.co.nz.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.