MoneyCoach34

Privacy readiness

What is confirmed, what is planned, and what still needs an answer.

Development copy · Fictional data only

Personal Mode is enabled for testing. It is not production-ready and must not hold real financial data.

Verified facts

Confirmed current app facts or documented platform claims—not a certification of future Personal Mode.

  • Cloud active in Europe (Paris)

    Development copy only, using fictional data. The region was confirmed after activation and cannot be changed.

    Read documentation ↗

  • Owner-only records (RLS)

    Every personal table has row-level security allowing only its signed-in owner to read or change rows. Anonymous visitors have no access. Tested with two accounts.

  • Verified email required

    Email confirmation is on; unverified accounts cannot open Personal Mode. Leaked-password checks are on.

  • Exact money

    Personal amounts are stored as integer cents and summed exactly. USD converts to AWG only explicitly, at USD 1 = AWG 1.79.

  • Separate Demo and Personal Modes

    Personal Mode starts empty and never receives demo records. Demo screens are unchanged.

  • Export and delete

    You can download only your own records, or delete all of them after a typed confirmation.

  • Encryption in transit: documented

    Lovable documents TLS 1.2 or newer for hosted app connections.

    Read documentation ↗

Planned protections

Still needed before a commercial launch.

  • Before any real customer data

    Independent security review, privacy policy, consent wording, a data-processing agreement and legal review for Aruba, Curaçao and Bonaire.

  • Account deletion

    Deleting your sign-in account itself (not just records) is not built yet.

Unverified protections

  • Encryption at rest

    Database encryption at rest and key management have not been confirmed from the documentation reviewed.

  • Exact country placement

    Paris was reported for this project; the platform may use other data centers within the Europe region.

  • Permanent erasure from backups and logs

    Deleted records may remain in backups for about 14 days and in infrastructure logs. The full erasure timeline is unresolved.

    Read documentation ↗

Unresolved Cloud decisions

  1. Resolve encryption-at-rest and key-management assurances.
  2. Obtain a data-processing agreement and exact country placement.
  3. Confirm backup and log retention and permanent-erasure limits.

Passing the isolation and money tests is not an independent penetration test or production-security certification.

Back to Profile