Privacy Policy
Last updated: 30 June 2026
Moola Money (“we”, “our”, or “us”) is committed to protecting the privacy of individuals who visit our website or use our financial coaching service. This Privacy Policy explains how we collect, use, store and protect your personal data. See also our Cookie Policy.
1. Who we are
Moola Money provides AI-augmented financial education and coaching, helping users gain confidence in managing their personal finances. We are based in the United Kingdom and operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
2. What personal data we collect
We may collect and process the following categories of personal data in order to provide our service.
Website visitors
Email address (if submitted via our website), together with cookies and similar technologies, including analytics and marketing identifiers. To learn more, please refer to our Cookie Policy.
App users
- Name and email address
- Phone number (where you choose to link WhatsApp or verify your identity)
- Income, assets, debt, savings, pensions and other financial details you provide
- Psychometric-based financial risk profile
- Financial goals and timeframes
- Self-assessed financial understanding and preferences
- Records of your interactions with our AI-augmented coach, including chat messages — in the app and, where you have opted in, over WhatsApp
- Account and subscription information, including your Moola Pro status and billing details (card payments are processed securely by our payment provider, Stripe; we do not store full card details)
- Technical and usage data (e.g. device information, IP address, and how you interact with our service)
We do not collect special category data (such as data about your health, race, or political views).
3. How we collect your data
All non-cookie data is collected through direct user input within our app or website.
4. Why we use your data (legal basis)
We rely on the following legal bases under UK GDPR:
- Performance of a contract: to provide our core financial education and coaching services, manage your account, and — where you subscribe — provide Moola Pro and process your payments.
- Legitimate interests: to operate, secure and improve our service, personalise your financial education tools, and facilitate affiliate cashback you are owed (see below), where not overridden by your rights.
- Consent: for marketing communications; for non-essential analytics and advertising cookies and similar technologies (managed through our cookie banner); and for communicating with you over WhatsApp where you have opted in. You may withdraw consent at any time.
- Legal obligation: where we must process data to comply with the law (for example, financial record-keeping).
Affiliate cashback. Where you reach us through a cashback or affiliate partner, we use a tracking identifier solely to make sure any cashback you are owed is credited. This cookie is treated as strictly necessary under PECR (in line with the ICO’s October 2024 position on cashback cookies) and is not placed behind consent; the related processing relies on our legitimate interest in facilitating cashback. It is not used for advertising.
5. How we use your data
Your data is used to:
- Generate a financial health report
- Provide financial education content and coaching
- Support interactions with our AI-augmented coach to define achievable goals
- Provide guidance over WhatsApp, where you have opted in
- Manage your account and, where applicable, your Moola Pro subscription and payments
- Send you service-related messages and, with your consent, marketing communications
- Improve your user experience and personalise the education and recommendations we show you
We do not use your data for automated decision-making or profiling.
6. Marketing communications
We may send you email updates about new features or financial education content. You may opt out of marketing emails at any time using the unsubscribe link in our emails or by contacting us at support@moola-money.com. Where you have opted in to receive messages from us on WhatsApp, you can opt out at any time by replying STOP.
7. Third parties
To help us run our services effectively, we sometimes use trusted external companies, known as third-party processors, who handle certain customer data on our behalf. These partners are essential for running our platform, offering key features and keeping everything secure.
We take your data protection seriously and thoroughly check all our third-party processors to make sure they meet the high standards of the UK GDPR and the Data Protection Act 2018. This means they are legally bound to keep your data safe and only process it according to our instructions. If your data ever needs to go outside the UK or European Economic Area (EEA), we make sure there are strong safeguards in place to protect it (such as UK GDPR adequacy agreements or Standard Contractual Clauses), just as if it were still in the UK.
Our main third-party processors are:
| Processor | Purpose | Data processed | Location | Legal basis |
|---|---|---|---|---|
| Amazon Web Services Inc. | Cloud hosting and backend infrastructure | All personal data processed by our application | EU | Performance of our contract with you |
| Wix | Marketing website hosting | Personal data submitted via our marketing website (e.g. contact and enquiry details) | Israel | Performance of our contract with you |
| Google Analytics | Marketing website analytics | Usage data (anonymised IP address, device information, page views and interactions) | USA | Legitimate interest; your consent (via our cookie banner) |
| PostHog | Product analytics | Anonymous user ID, user events, session information, survey progress, feature usage | EU | Legitimate interest; your consent |
| Supabase | Cloud hosting and backend infrastructure | Contact info (name, email), usage data, account info, event and application data | EU | Performance of our contract with you |
| Vercel | Application deployment and serverless hosting | Server logs, IP addresses, application data during request processing | USA | Performance of our contract with you |
| Azure OpenAI | AI-powered financial coaching and questionnaire (primary model) | Chat messages processed in real-time (not stored for model training) | EU | Performance of our contract with you |
| Anthropic | AI-powered financial coaching and questionnaire (fallback model) | Chat messages processed in real-time (not stored for model training) | USA | Performance of our contract with you |
| Resend | Transactional email delivery (OTP codes, support) | Email address, name | USA | Performance of our contract with you |
| Twilio | WhatsApp and SMS messaging, including verification codes | Phone number, WhatsApp message content | USA | Your consent (WhatsApp opt-in); performance of our contract with you |
| Meta Platforms | WhatsApp message delivery; advertising measurement (Meta Pixel and Conversions API) | Phone number and message metadata; online identifiers and advertising events | USA | Performance of our contract with you (WhatsApp); your consent (advertising) |
| Stripe | Payment processing for Moola Pro subscriptions and coaching | Email, billing and subscription details (card details collected directly by Stripe) | USA | Performance of our contract with you |
| Google Ads | Advertising and conversion measurement | Online identifiers, advertising and conversion events | USA | Your consent (via our cookie banner) |
| Sentry | Application error monitoring and diagnostics | Technical and diagnostic data, IP address, error logs | USA | Legitimate interest |
| Awin | Affiliate cashback tracking | Click identifiers (awc), conversion data | Germany (EU) | Legitimate interests — used solely to facilitate cashback. The cookie is strictly necessary (ICO, Oct 2024), so it is not behind consent. |
| HubSpot | Customer relationship management and feedback handling | Contact information, correspondence and feedback | USA | Legitimate interest; your consent |
| Calendly | Scheduling of coaching sessions | Name, email, booking details | USA | Performance of our contract with you |
8. WhatsApp messaging
If you choose to use our “Text Moola on WhatsApp” feature, you can link your phone number to your account and message our AI-augmented coach on WhatsApp.
Linking is optional and requires your explicit consent. To confirm the number is yours, we send a one-time code to it via WhatsApp.
When you message us, we process your phone number and message content to provide guidance based on the information in your Moola account. As with the rest of our service, this is general guidance and education, not regulated financial advice.
Messages are delivered through our processors Twilio and WhatsApp (Meta), so your phone number and message content are processed by them, including outside the UK/EEA under appropriate safeguards.
You can stop at any time by replying STOP, and you can unlink your number in your account settings whenever you wish.
9. Data storage and security
Your data is stored securely, primarily within the United Kingdom and European Economic Area (EEA). Some of our processors are located outside the UK/EEA (for example, in the USA) — where data is transferred internationally, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses. The locations of our processors are listed in the table above.
We implement standard industry practices to protect your data, including:
- Data encryption in transit and at rest
- Access controls and role-based permissions
- Regular security reviews and audits
- Monitoring for unauthorised access
We retain your data — including your account information and records of your interactions with our coach (in the app and over WhatsApp) — only for as long as needed to provide our services or as required by law. If you stop using our service, we may retain your data for a reasonable period (up to 24 months) for operational and legal purposes, after which it will be deleted or anonymised.
10. Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to, or request restriction of, our processing — including profiling
- Request portability of your data
- Withdraw consent at any time, including for marketing and for WhatsApp messaging
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at support@moola-money.com.
11. Children's privacy
Our services are intended only for users aged 18 and over. We do not knowingly collect data from children under 18. If we become aware of such data, we will delete it immediately.
12. Changes to this Privacy Policy
We may update this policy from time to time. Any significant changes will be communicated via our app or website.
13. Contact us
For any questions, concerns, or requests related to your personal data, contact support@moola-money.com.
Moola Money Ltd, Silverstream House, 45 Fitzroy Street, London W1T 6EB. ICO registration ZC122598.