Household sharing notice

Notis perkongsian isi rumah

Version 2026-08-27 · English and Bahasa Malaysia · Operated by Team JUST50, Malaysia

What the people in your household can and cannot see, what changes when you revoke, and how to leave.Apa yang orang dalam isi rumah anda boleh dan tidak boleh lihat, apa yang berubah apabila anda menarik balik, dan cara untuk keluar.

Private by default

Eight kinds of data can be shared with your household. Two are on by default because the app cannot do its job without them — what must be paid, and the total each person contributed. The other six are off.
Must-pay items — SHARED by default. When on: Your household sees the bills and commitments you have recorded, and whether they are outstanding. When off: Your commitments are yours alone. Nobody else can see what is due, so nobody else can cover it for you.
What you contributed — SHARED by default. When on: Your household sees one number: the total you put in this month. Never what it was spent on. When off: Your contribution is not attributed to you. Household totals still add up; they just do not say how much of it was yours.
Your spending categories — PRIVATE by default. When on: Your household sees how much you spent per category — groceries, transport, dining — without the individual purchases. When off: Your category breakdown is yours. Household totals still include your spending; it is simply not broken down by you.
Your individual transactions — PRIVATE by default. When on: Your household sees each purchase you record: merchant, amount, date, and any note you attached. When off: Your purchases are yours. This is the default, and it is the one most people should leave alone.
Your goals — PRIVATE by default. When on: Your household sees what you are saving towards and how far along you are. When off: Your goals are yours until you decide to say so. Goals the household set together are unaffected.
Receipts and statements — PRIVATE by default. When on: Your household can open the receipt photos and imported statements attached to your records. When off: Your documents are yours. A receipt is a photograph of where you were, so this stays off unless you turn it on.
Your Money Health Score — PRIVATE by default. When on: Your household sees your personal H-Score, its band, and the five sub-scores behind it. When off: Your score is yours. The household score, computed over shared money, is unaffected.
Your insights and forecast — PRIVATE by default. When on: Your household sees the forecasts and Honey insights written about your money — including shortfall warnings. When off: Your forecast is yours. A forecast says what you will not be able to afford, which is nobody else's business by default.

Peribadi secara lalai

Lapan jenis data boleh dikongsi dengan isi rumah anda. Dua dihidupkan secara lalai kerana aplikasi tidak dapat menjalankan tugasnya tanpanya — apa yang mesti dibayar, dan jumlah yang disumbangkan oleh setiap orang. Enam yang lain dimatikan.
Butiran penuh setiap satu, berserta apa yang dilihat oleh isi rumah anda apabila ia dihidupkan dan dimatikan, dipaparkan dalam Perkongsian & privasi. Tetapan lalai adalah: item mesti-bayar dan jumlah sumbangan DIKONGSI; kategori perbelanjaan, transaksi individu, matlamat, resit dan penyata, H-Score, serta wawasan dan ramalan adalah PERIBADI.

Who a share reaches

The household, as a whole — every current member of it, named for you on the sharing screen. There is no per-person matrix, deliberately: sharing with one member of a household but not another invites exactly the negotiation this app exists to remove, and it would let an owner grant themselves access to somebody else's data.
Nobody outside your household, ever, through this mechanism. Sharing settings govern what your household sees. They have nothing to do with third parties, which are covered by the Privacy Notice.
IMPORTANT, AND EASY TO MISREAD: these switches make your data private from the PEOPLE IN YOUR HOUSEHOLD. They do not make it private from us. HoneyMoney is not zero-knowledge — your records are readable in our database because the server computes your dashboard and H-Score over them, and a small number of people on our team hold credentials that can read any household. Marking something private hides it from your partner, not from the operator. The only thing in HoneyMoney we genuinely cannot read is a sealed backup, which is encrypted in your own browser with a passphrase we never receive.
Only you can change what you share. Not an owner, not an administrator, not us. There is no field in the request that names whose sharing is being changed, so there is no request anyone else can construct.

Siapa yang dicapai oleh perkongsian

Isi rumah, secara keseluruhan — setiap ahli semasanya, dinamakan untuk anda pada skrin perkongsian. Tiada matriks setiap orang, secara sengaja: berkongsi dengan seorang ahli isi rumah tetapi bukan yang lain menjemput rundingan yang aplikasi ini wujud untuk menghapuskannya, dan ia akan membenarkan pemilik memberikan dirinya akses kepada data orang lain.
Tiada sesiapa di luar isi rumah anda, sama sekali, melalui mekanisme ini. Tetapan perkongsian mentadbir apa yang dilihat oleh isi rumah anda. Ia tiada kaitan dengan pihak ketiga, yang diliputi oleh Notis Privasi.
PENTING, DAN MUDAH DISALAH FAHAM: suis ini menjadikan data anda peribadi daripada ORANG DALAM ISI RUMAH ANDA. Ia tidak menjadikannya peribadi daripada kami. HoneyMoney bukan sistem tanpa-pengetahuan — rekod anda boleh dibaca dalam pangkalan data kami kerana pelayan mengira papan pemuka dan H-Score anda daripadanya, dan sebilangan kecil orang dalam pasukan kami memegang kelayakan yang boleh membaca mana-mana isi rumah. Menandakan sesuatu sebagai peribadi menyembunyikannya daripada pasangan anda, bukan daripada pengendali. Satu-satunya perkara dalam HoneyMoney yang benar-benar tidak boleh kami baca ialah sandaran bermeterai, yang disulitkan dalam pelayar anda sendiri dengan frasa laluan yang tidak pernah kami terima.
Hanya anda boleh mengubah apa yang anda kongsi. Bukan pemilik, bukan pentadbir, bukan kami. Tiada medan dalam permintaan yang menamakan perkongsian siapa yang sedang diubah, jadi tiada permintaan yang boleh dibina oleh orang lain.

Revocation, and what happens to history

REVOCATION IS RETROACTIVE. Switching a share off hides your existing records as well as anything new. This is the more surprising of the two possible rules and it is the one we chose, because someone revoking is usually revoking because of what is already there — a rule that left the last two years visible would protect nobody.
Nothing is deleted. Your records stay yours and stay in your own view. Hiding them from your household does not remove them from the app, and your own totals do not change.
It cannot undo what was already read. If someone has seen a figure, they know it. No switch takes that back and we will not pretend otherwise.
Household money stays household money. A bill recorded against the household rather than against a person is everyone's record and stays visible. These switches govern what is attributed to you.
A gap is visible. Someone who could see a figure yesterday can tell that it is no longer there, even though they cannot see what it was.

Penarikan balik, dan apa yang berlaku kepada sejarah

PENARIKAN BALIK BERKUAT KUASA KE BELAKANG. Mematikan perkongsian menyembunyikan rekod sedia ada anda serta apa-apa yang baharu. Ini adalah peraturan yang lebih mengejutkan antara dua kemungkinan dan inilah yang kami pilih, kerana orang yang menarik balik biasanya berbuat demikian kerana apa yang sudah ada di sana — peraturan yang membiarkan dua tahun lepas kelihatan tidak melindungi sesiapa.
Tiada apa-apa dipadamkan. Rekod anda kekal milik anda dan kekal dalam paparan anda sendiri. Menyembunyikannya daripada isi rumah anda tidak membuangnya daripada aplikasi, dan jumlah anda sendiri tidak berubah.
Ia tidak boleh membatalkan apa yang sudah dibaca. Jika seseorang telah melihat sesuatu angka, mereka mengetahuinya. Tiada suis yang boleh menariknya balik dan kami tidak akan berpura-pura sebaliknya.
Wang isi rumah kekal wang isi rumah. Bil yang direkodkan terhadap isi rumah dan bukan terhadap seseorang ialah rekod semua orang dan kekal kelihatan. Suis ini mentadbir apa yang dikaitkan dengan anda.
Jurang itu kelihatan. Seseorang yang boleh melihat sesuatu angka semalam boleh mengetahui bahawa ia tiada lagi, walaupun mereka tidak boleh melihat apa nilainya.

Joining and leaving

Nobody joins your household without being invited AND accepting. An invitation is a code with an expiry, it can be bound to one email address, it can be revoked before it is used, and the person receiving it has to act to accept. Adding someone silently is not possible.
An invitation does not grant access to your private data. A new member sees what your sharing switches say they see, which by default is the must-pay items and the contribution totals.
You can leave at any time, immediately, without anyone's approval. Your sharing is revoked first and your membership removed second, in that order. Records you entered stay in that household's history because they are part of its accounts; the link to you goes.
Being in a relationship, contributing to a bill, or having access to somebody's device does not authorise access to their financial information.

Menyertai dan keluar

Tiada sesiapa menyertai isi rumah anda tanpa dijemput DAN menerima jemputan. Jemputan ialah kod dengan tarikh luput, ia boleh diikat kepada satu alamat e-mel, ia boleh ditarik balik sebelum digunakan, dan penerimanya perlu bertindak untuk menerimanya. Menambah seseorang secara senyap adalah mustahil.
Jemputan tidak memberikan akses kepada data peribadi anda. Ahli baharu melihat apa yang dinyatakan oleh suis perkongsian anda, yang secara lalai ialah item mesti-bayar dan jumlah sumbangan.
Anda boleh keluar pada bila-bila masa, serta-merta, tanpa kelulusan sesiapa. Perkongsian anda ditarik balik dahulu dan keahlian anda dibuang kemudian, mengikut susunan itu. Rekod yang anda masukkan kekal dalam sejarah isi rumah itu kerana ia sebahagian daripada akaunnya; pautan kepada anda dibuang.
Berada dalam sesuatu hubungan, menyumbang kepada sesuatu bil, atau mempunyai akses kepada peranti seseorang tidak memberi kuasa untuk mencapai maklumat kewangan mereka.

Seeing who looked

Every time another member opens data you have shared, it is recorded, along with every change you make to your own sharing and everybody joining or leaving. You can read that log; nobody can delete a line from it, including us.
Your log is yours. Other members cannot see it, which means nobody can watch you checking your own privacy settings.
It records access through the app, which is the only thing the app can honestly claim to know about. It cannot record somebody reading over your shoulder, a screenshot taken before you revoked, or anything you said out loud.

Melihat siapa yang telah melihat

Setiap kali ahli lain membuka data yang anda kongsi, ia direkodkan, bersama setiap perubahan yang anda buat pada perkongsian anda sendiri dan setiap orang yang menyertai atau keluar. Anda boleh membaca log itu; tiada sesiapa boleh memadam satu barisnya, termasuk kami.
Log anda milik anda. Ahli lain tidak boleh melihatnya, bermakna tiada sesiapa boleh memerhati anda menyemak tetapan privasi anda sendiri.
Ia merekodkan akses melalui aplikasi, iaitu satu-satunya perkara yang aplikasi ini boleh dakwa mengetahuinya dengan jujur. Ia tidak boleh merekodkan seseorang yang membaca dari belakang bahu anda, tangkapan skrin yang diambil sebelum anda menarik balik, atau apa-apa yang anda sebut sendiri.