Privacy

Menu Money's earning model depends on knowing whether an ad could actually be seen. We collect the minimum needed to verify that — and nothing else.

Never collected

Keystrokes

Never. Idle time is a scalar count of seconds since last input — no content, ever.

Screenshots or screen recording

Never. Fullscreen detection uses window geometry only — no window titles, no images.

Browsing history & app contents

Never. We don't know what you read, watch, or write.

Location, contacts, microphone, camera

Never requested. The app holds no sensitive permissions.

Advertising identifiers

No IDFA/IDFV-style tracking. Events are tied to random surrogate ids.

Third-party trackers

No analytics or tracking SDKs in any client.

What is collected, and why

Email + password hash

Account access. Passwords are scrypt-hashed; we can't read them.

Screen-state booleans

Locked / asleep / fullscreen / session-active / idle-seconds, sampled every ~25s. Used solely to verify impressions.

Ad events

Timestamps, campaign/ad ids, eligibility snapshot — for billing, payouts, and fraud detection.

Device name

One you can edit. Shown only to you.

Machine UUID

Used solely as a multi-account fraud signal. Never used for ads or shared.

Payout records

Amounts and status — retained as financial records.

Your controls

Ads are pausable anytime from the app. Fullscreen, sleep, and lock pause earning automatically. Account deletion removes personal data; financial ledger records are retained as required for audit.