Private by design
Yours to control
No passwords, read-only access, and a consent you can end in one tap. Here is exactly how that works.
How your bank data reaches Moncass
Through India’s RBI-regulated Account Aggregator framework - the same rails banks use between themselves for consent-based sharing. Four steps, and you are in charge of all four.
You pick the accounts
Inside Moncass you choose which banks to link. Nothing is discovered or connected without you selecting it first.
Your bank asks you, not us
You are handed to an RBI-licensed Account Aggregator and approve on your own bank’s consent screen. Moncass is not in that conversation and never sees your credentials.
A scoped, dated consent
The consent names exactly what is shared (balances and transactions), what for, and for how long. Outside that scope nothing flows, even by accident.
You can end it in one tap
Revoke from Consent management whenever you like. Data stops immediately - no email, no support ticket, no waiting period.
At no point does Moncass see your netbanking password. There is no screen in the app that asks for one, and there is no code path that could store one.
What we hold, and what we never touch
Stored, so the app can work
- Balances and transaction history for the accounts you linked.
- Your profile answers - income band, goals, the things that make advice yours.
- Your corrections, which train categorisation on your account only.
- Your phone number or the email from your Google / Apple sign-in.
Never, under any setting
- Your netbanking password, PIN, UPI PIN or card CVV. We never ask.
- The ability to move, transfer or withdraw money. Access is read-only.
- Your data sold, rented or shared with advertisers. There is no ad product.
- Anything at all from an account you have not connected.
Everything is reversible, by you
None of these needs a support request. Each is a tap in the app, and each takes effect straight away.
Revoke any consent
Consent management → Revoke. Takes effect immediately.
Disconnect an account
Connected banks → Disconnect. The account and its history leave your view.
Export everything
Privacy & security → Export my data. Yours, in a file, whenever you want it.
Delete your account
Privacy & security → Delete account, or request it from the website.
This page is the plain-language version. The Terms of Service and Privacy Policy are the documents that govern your use of Moncass, and both are shown in the app before you connect anything. Questions about either go to our contact form.
Explore first
Connect later
Nothing beyond signing in is mandatory. Join the early access list and link an account only when you want to.