Your data, explained clearly

Privacy Policy

Your financial life is personal. This policy explains what Panda Money collects, why it is needed, and the choices you have.

Last updated: October 5, 2026

Panda Money is a personal finance app for recording wallets, transactions, budgets, reminders, bill splits, Panda Health insights, and Bamboo rewards. Financial records are personal, so this policy explains what information we collect, why we use it, who helps us process it, how long we keep it, and the choices available to you.

This policy applies to the Panda Money mobile app, website pages, APIs, account services, notifications, Panda AI features, Bamboo rewards, advertising, and in-app purchase flows operated by Alto Tun Chit Oo (the "Service Provider", "we", "us", or "our").

Our privacy-first commitments

  • Your financial records are used to provide Panda Money features for your account. We do not sell them.
  • We collect and keep only what is reasonably needed to provide, secure, maintain, and improve the Service.
  • Data sent between the app and our servers is encrypted in transit using TLS (HTTPS).
  • Access is limited to authorized personnel who need it to operate, support, or improve the app.
  • You can delete your account and data at any time from Profile → Account details → Delete account.

Service provider

For any privacy question or request, contact us at the email above.

Information we collect

We collect information in four ways: information you provide, information you create in the app, information collected automatically from your device and app activity, and information received from third-party services when you choose to use them.

  • Account information — your name, email address, password hash, email verification status, authentication method, and, if you choose Google or Apple sign-in, the account identifier those providers return to us. Registration is required to sync your data across devices.
  • Profile and preferences — app settings such as currency, time zone, theme, font, and other account preferences used to personalize the app.
  • Sign-in and security information — the devices and browsers signed in to your account (platform, device name, app version, IP address, and when each was last active), web sign-in requests approved or blocked from your phone, and connected AI assistants. If you turn on the app lock, your PIN is stored only as a salted hash so it can be checked on your other devices; biometric data never leaves your device.
  • Financial data — the information you enter or import to track your money: wallets and balances, transactions, transfers, categories, budgets, reminders, notes, bill-split records, participants, shares, settlement records, and transaction line items.
  • Panda AI inputs and results — when you use optional AI features, we process the receipt photo, shared text or typed text, voice-derived text, or bank or credit-card statement PDF you provide, together with limited account context such as currency, time zone, wallet names, and category names. The extracted result may be saved when you confirm or create the related transaction, bill split, or reviewed statement entries.
  • Notification capture (Android, optional) — if you turn it on and grant notification access, the app reads notifications only from the banking and payment apps you choose, to suggest transactions. See Notification capture.
  • Bill splits and shared links — the people you split with (the names you give them), what each person owes, and, if you share a split, anything a visitor submits on the public page, such as the name they enter when marking a share paid and the reference read from a bank-slip QR code. See Shared links.
  • Bamboo rewards and purchases — your Bamboo balance, Bamboo ledger activity, rewards, ad reward claims, feature unlocks, theme/font/slot purchases, in-app product identifiers, store transaction identifiers, purchase verification payloads, verification status, and related audit records.
  • Device and technical information — automatically collected information such as device type and model, platform, operating system, app version, device or installation identifiers, IP address, crash logs, diagnostics, and app-usage events.
  • Notification token — a push token so we can deliver reminders, budget alerts, Bamboo notifications, and other service messages you enable or that relate to your account.
  • Approximate region at sign-up — estimated from your network information to seed your time zone and currency so dates, budget periods, and defaults match your locale. We do not collect precise GPS location for this purpose or continuously track your location.
  • Advertising and consent signals — identifiers, reward-ad events, ad frequency or quota data, and related consent preferences used to serve ads and credit optional Bamboo rewards.

How we use your information

  • To create and manage your account, authenticate sign-ins, verify email addresses, and securely sync your data across devices.
  • To provide finance tracking features, including wallets, transactions, transfers, budgets, categories, analytics, Panda Health, reminders, and bill splits.
  • To provide optional Panda AI features that extract transaction details from content you choose to submit.
  • To operate Bamboo rewards, feature unlocks, ad rewards, and in-app purchase redemption.
  • To send the reminders and budget alerts you choose to enable.
  • To send essential service email, such as account activation and password reset.
  • To diagnose crashes and understand general usage so we can improve the app.
  • To show ads, including the optional rewarded ads you can choose to watch to earn in-app rewards. Watching ads is always your choice.
  • To keep the service secure and prevent fraud and abuse.

We do not sell your personal information, and we do not use your financial records to build ad profiles.

Artificial intelligence (AI) features

Panda Money includes optional Panda AI features for receipt scanning, free-form text capture, shared content, voice-derived transaction text, and bank or credit-card statement parsing. These features run only when you choose to use them. We send the content you provide, together with limited account context needed to produce useful results, to our AI processor so it can extract structured transaction information. Panda AI results are used to prefill or review records for your account; they are not used by us to profile you for advertising.

Cloud Panda AI features are processed by our AI processing provider. We send only the content you submit for that request and the limited context described above, and we keep a log of each AI request (feature, model, status, cost, timing, and a fingerprint of an uploaded image, not the image itself) to operate Bamboo charges and keep the feature reliable. Some text features can instead run on an AI model downloaded to your device, in which case the content does not leave your device.

You should review AI-generated suggestions before saving them. If you do not use Panda AI, we do not process receipt images, statements, or free-form transaction text through this feature.

Notification capture (Android)

Notification capture is optional and off by default. When you turn it on and grant Android's notification access permission, Panda Money reads notifications from the banking and payment apps you choose (and only those) so it can suggest transactions such as "Paid ฿120 at 7-Eleven". Suggestions wait in a review inbox and nothing is recorded until you confirm it.

  • Captured notifications are stored on your device until they are reviewed. To turn a notification into a suggestion, its text is read either by a learned pattern or the on-device model on your phone, or, if neither applies, by our cloud Panda AI (described above).
  • When you confirm a captured transaction, the notification text and the values you saved are kept on your device as examples. They are sent to us only if you tap Learn pattern, so we can work out the template that bank uses. The examples are used for that request and not stored; only the resulting pattern is kept.
  • Learned patterns are shared with other users of the same bank or payment app so their alerts can be read without AI. A pattern is a template such as "Payment successful — You paid ฿ [amount] to [merchant]"; it does not contain your amounts, balances, account numbers, or other personal details.
  • You can turn capture off, remove examples, or revoke notification access in Android settings at any time.

AI assistant connectors (Claude, ChatGPT)

You can choose to connect an AI assistant, such as Anthropic's Claude or OpenAI's ChatGPT, to your Panda Money account so you can ask it questions about your money. Nothing is connected unless you start the connection in that assistant and approve it with the Panda Money app on your phone.

  • Read-only. A connected assistant can read your wallets and balances, categories, income and expense statistics (including your balance sheet), transactions, budgets, and reminders. It cannot add, change, or delete anything, and it never receives your password, email address, or the payment QR codes saved on your wallets.
  • What we store. We keep a record of the connection (the assistant, when it was approved and last used, and the IP address it connects from) and the access credentials, stored only as one-way hashes. We do not store the questions you ask the assistant.
  • What the assistant does with your data. Data an assistant reads is sent to that provider and handled under its own privacy policy and your settings with it, such as Anthropic's or OpenAI's. We do not control how they process, retain, or use it.
  • Disconnecting. Each connection appears in Account details → Devices. Signing it out there disconnects it immediately. Access also ends on its own if the assistant stops using it for 30 days, and when you delete your account. We email you and send an in-app notice whenever a new assistant is connected.

When you share a bill split, anyone with the link can see that split: the expense, what each person owes, the names you entered for them, and, if you saved one, the payment QR code of the wallet that paid, so people can pay you back. Links can be revoked from the app and expire on their own.

A visitor can mark a share as paid. They enter a name and may attach a photo of their bank slip. The photo is read in their browser and is never uploaded; only the slip's QR reference (sending bank and transaction reference) is sent to us. Nothing is recorded as paid until you confirm it in the app.

Cookies and similar technologies

The app and some third-party SDKs may use identifiers and similar technologies to support authentication, security, analytics, crash reporting, push notifications, ads, rewarded ads, and purchase verification. Where required, we ask for your consent before using non-essential tracking technologies.

Who has access to your information

We do not sell your data. We share only what is necessary for trusted service providers to operate, secure, analyze, monetize, or support the Service. Depending on the features you use, these providers may include:

AI assistants you connect yourself, such as Claude or ChatGPT, are not our service providers: they receive data because you directed it, and they handle it under their own terms (see AI assistant connectors).

We may also disclose information:

  • when required by law, such as to comply with a subpoena or similar legal process;
  • in good faith to protect our rights, protect the safety of you or others, investigate fraud, or respond to a government request;
  • with trusted service providers acting on our behalf, who have no independent use of the data and must follow this policy.

We require service providers that process personal data for us to protect it and use it only for the services they provide to Panda Money.

International processing

We and our providers may process personal data in countries other than where you live. Where required, we use appropriate safeguards for that processing.

How we keep your information safe

Protecting your data is central to how we build Panda Money. We use TLS (HTTPS) to encrypt data in transit, store passwords only as secure hashes, host the Service on reputable infrastructure, and limit access to people who need it to operate, support, or improve the app. No system can guarantee absolute security, but we work to keep safeguards current and proportionate to the sensitivity of the data.

Security incidents

If a personal data breach occurs, we will assess it promptly and notify affected users or relevant authorities when required by law. Any notice will describe the nature of the breach, the data affected, and the steps taken to address it where appropriate.

Data retention and deletion

We keep your data only as long as we need it:

  • Account and financial data — kept while your account is active. When you delete your account, we revoke active sessions and start a 30-day grace period. Signing back in during that period restores the account; after the grace period, your account and related data are permanently removed.
  • AI and Bamboo audit data — retained as needed to operate balances, prevent duplicate purchase credits, investigate failed purchase claims, and maintain service integrity.
  • Diagnostics, crash logs, analytics, and ad events — retained for a limited period to keep the app stable, secure, and financially sustainable, then removed, aggregated, or anonymized.
  • Sign-in requests and connections — web sign-in and connection requests are deleted within about a day after they expire. A connected AI assistant's access is removed when you disconnect it, when it goes unused for 30 days, or when you delete your account.
  • Notification capture examples — kept on your device only, up to 20 per app, until you remove them or turn the feature off. Examples sent with Learn pattern are not stored.
  • Aggregated, anonymized data — may be kept indefinitely, as it no longer identifies you.
  • Records required for legal compliance — kept only as long as the law requires.

You can delete your account from Profile → Account details → Delete account in the app, or request deletion by emailing contact@altotunchitoo.me. Some information may be needed for the app to function, and uninstalling the app alone stops further collection but does not delete data already stored.

Children's privacy

Panda Money can help younger users build healthy personal finance habits, such as recording spending, understanding budgets, and learning how money moves. Children should use Panda Money with the involvement and consent of a parent or guardian where required by law.

We do not knowingly collect personal data from children without any required parent or guardian consent, and we do not knowingly target advertising to children. If you are a parent or guardian and believe a child has provided personal information without appropriate consent, please contact us at contact@altotunchitoo.me so we can review and take appropriate action.

Your choices and rights

Depending on where you live, you may be able to ask us to:

  • provide a copy of the personal data we hold about you;
  • correct inaccurate information;
  • delete your account and data;
  • limit or object to certain processing where applicable;
  • provide your data in a portable format where available;
  • withdraw consent for optional features, where processing is based on consent.

To make a privacy request, contact us at contact@altotunchitoo.me. We may need to verify your account before completing the request.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will post the updated policy with a new "Last updated" date and, where required, seek your consent before the changes take effect. Previous versions are available on request.

Contact us

Questions about your privacy, or want to exercise your rights? Email us at contact@altotunchitoo.me.