Panda Money Legal

Privacy Policy

Last updated: July 9, 2026

Panda Money is a personal finance app for recording wallets, transactions, budgets, reminders, bill splits, Panda Health insights, and Bamboo rewards. Financial records are personal, so this policy explains what information we collect, why we use it, who helps us process it, how long we keep it, and the choices available to you.

This policy applies to the Panda Money mobile app, website pages, APIs, account services, notifications, Panda AI features, Bamboo rewards, advertising, and in-app purchase flows operated by Alto Tun Chit Oo (the "Service Provider", "we", "us", or "our").

Our privacy-first commitments

Your financial records are used to provide Panda Money features for your account. We do not sell them.
We collect and keep only what is reasonably needed to provide, secure, maintain, and improve the Service.
Data sent between the app and our servers is encrypted in transit using TLS (HTTPS).
Access is limited to authorized personnel who need it to operate, support, or improve the app.
You can delete your account and data at any time from Profile → Account details → Delete account.

Service provider

Name: Alto Tun Chit Oo
Address: Thailand
Email: contact@altotunchitoo.me

For any privacy question or request, contact us at the email above.

Information we collect

We collect information in four ways: information you provide, information you create in the app, information collected automatically from your device and app activity, and information received from third-party services when you choose to use them.

Account information — your name, email address, password hash, email verification status, authentication method, and, if you choose Google or Apple sign-in, the account identifier those providers return to us. Registration is required to sync your data across devices.
Profile and preferences — app settings such as currency, time zone, theme, font, and other account preferences used to personalize the app.
Financial data — the information you enter or import to track your money: wallets and balances, transactions, transfers, categories, budgets, reminders, notes, bill-split records, participants, shares, settlement records, and transaction line items.
Panda AI inputs and results — when you use optional AI features, we process the receipt photo, shared text or typed text, voice-derived text, or bank or credit-card statement PDF you provide, together with limited account context such as currency, time zone, wallet names, and category names. The extracted result may be saved when you confirm or create the related transaction, bill split, or reviewed statement entries.
Bamboo rewards and purchases — your Bamboo balance, Bamboo ledger activity, rewards, ad reward claims, feature unlocks, theme/font/slot purchases, in-app product identifiers, store transaction identifiers, purchase verification payloads, verification status, and related audit records.
Device and technical information — automatically collected information such as device type and model, platform, operating system, app version, device or installation identifiers, IP address, crash logs, diagnostics, and app-usage events.
Notification token — a push token so we can deliver reminders, budget alerts, Bamboo notifications, and other service messages you enable or that relate to your account.
Approximate region at sign-up — estimated from your network information to seed your time zone and currency so dates, budget periods, and defaults match your locale. We do not collect precise GPS location for this purpose or continuously track your location.
Advertising and consent signals — identifiers, reward-ad events, ad frequency or quota data, and related consent preferences used to serve ads and credit optional Bamboo rewards.

How we use your information

To create and manage your account, authenticate sign-ins, verify email addresses, and securely sync your data across devices.
To provide finance tracking features, including wallets, transactions, transfers, budgets, categories, analytics, Panda Health, reminders, and bill splits.
To provide optional Panda AI features that extract transaction details from content you choose to submit.
To operate Bamboo rewards, feature unlocks, ad rewards, and in-app purchase redemption.
To send the reminders and budget alerts you choose to enable.
To send essential service email, such as account activation and password reset.
To diagnose crashes and understand general usage so we can improve the app.
To show ads, including the optional rewarded ads you can choose to watch to earn in-app rewards. Watching ads is always your choice.
To keep the service secure and prevent fraud and abuse.

We do not sell your personal information, and we do not use your financial records to build ad profiles.

Artificial intelligence (AI) features

Panda Money includes optional Panda AI features for receipt scanning, free-form text capture, shared content, voice-derived transaction text, and bank or credit-card statement parsing. These features run only when you choose to use them. We send the content you provide, together with limited account context needed to produce useful results, to our AI processor so it can extract structured transaction information. Panda AI results are used to prefill or review records for your account; they are not used by us to profile you for advertising.

You should review AI-generated suggestions before saving them. If you do not use Panda AI, we do not process receipt images, statements, or free-form transaction text through this feature.

Cookies and similar technologies

The app and some third-party SDKs may use identifiers and similar technologies to support authentication, security, analytics, crash reporting, push notifications, ads, rewarded ads, and purchase verification. Where required, we ask for your consent before using non-essential tracking technologies.

Who has access to your information

We do not sell your data. We share only what is necessary for trusted service providers to operate, secure, analyze, monetize, or support the Service. Depending on the features you use, these providers may include:

Google Play Services and Google sign-in services
Apple services — Apple sign-in and App Store purchase validation
Firebase Cloud Messaging — push notifications
Google AdMob — ads, including rewarded ads
Google Analytics for Firebase — usage analytics
Firebase Crashlytics — crash reporting
Google Play — Android in-app purchase verification

We may also disclose information:

when required by law, such as to comply with a subpoena or similar legal process;
in good faith to protect our rights, protect the safety of you or others, investigate fraud, or respond to a government request;
with trusted service providers acting on our behalf, who have no independent use of the data and must follow this policy.

We require service providers that process personal data for us to protect it and use it only for the services they provide to Panda Money.

International processing

We and our providers may process personal data in countries other than where you live. Where required, we use appropriate safeguards for that processing.

How we keep your information safe

Protecting your data is central to how we build Panda Money. We use TLS (HTTPS) to encrypt data in transit, store passwords only as secure hashes, host the Service on reputable infrastructure, and limit access to people who need it to operate, support, or improve the app. No system can guarantee absolute security, but we work to keep safeguards current and proportionate to the sensitivity of the data.

Security incidents

If a personal data breach occurs, we will assess it promptly and notify affected users or relevant authorities when required by law. Any notice will describe the nature of the breach, the data affected, and the steps taken to address it where appropriate.

Data retention and deletion

We keep your data only as long as we need it:

Account and financial data — kept while your account is active. When you delete your account, we revoke active sessions and start a 30-day grace period. Signing back in during that period restores the account; after the grace period, your account and related data are permanently removed.
AI and Bamboo audit data — retained as needed to operate balances, prevent duplicate purchase credits, investigate failed purchase claims, and maintain service integrity.
Diagnostics, crash logs, analytics, and ad events — retained for a limited period to keep the app stable, secure, and financially sustainable, then removed, aggregated, or anonymized.
Aggregated, anonymized data — may be kept indefinitely, as it no longer identifies you.
Records required for legal compliance — kept only as long as the law requires.

You can delete your account from Profile → Account details → Delete account in the app, or request deletion by emailing contact@altotunchitoo.me. Some information may be needed for the app to function, and uninstalling the app alone stops further collection but does not delete data already stored.

Children's privacy

Panda Money can help younger users build healthy personal finance habits, such as recording spending, understanding budgets, and learning how money moves. Children should use Panda Money with the involvement and consent of a parent or guardian where required by law.

We do not knowingly collect personal data from children without any required parent or guardian consent, and we do not knowingly target advertising to children. If you are a parent or guardian and believe a child has provided personal information without appropriate consent, please contact us at contact@altotunchitoo.me so we can review and take appropriate action.

Your choices and rights

Depending on where you live, you may be able to ask us to:

provide a copy of the personal data we hold about you;
correct inaccurate information;
delete your account and data;
limit or object to certain processing where applicable;
provide your data in a portable format where available;
withdraw consent for optional features, where processing is based on consent.

To make a privacy request, contact us at contact@altotunchitoo.me. We may need to verify your account before completing the request.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will post the updated policy with a new "Last updated" date and, where required, seek your consent before the changes take effect. Previous versions are available on request.

Contact us

Questions about your privacy, or want to exercise your rights? Email us at contact@altotunchitoo.me.