Privacy Policy

What we collect

• Account details: your name, email address and household name. We also keep your password, stored only as a secure hash by our authentication provider.
• What you enter: budget lines, categories, rules, bills, income, notes and transactions you add by hand.
• Statements you upload: the transactions and balances we read from them. The files themselves are not kept.
• Receipt, invoice and check photos: the store or payer, date, amount and line items we read from them. The photos are not kept.
• Tags and notes you add: what or who a purchase was for, who will pay you back, and the things you look after (for example a pet or a car) with their history.
• Bank connections (if you choose to link a bank): through our partner Plaid we receive account names, types, the last four digits of account numbers, balances, and transactions (date, amount, merchant, category). We do not receive or store your bank username or password.
• Questions to Mira: answered on your iPhone from your own Manna data; your questions are not sent to an AI service. Spoken questions are turned into text by Apple's speech recognition, on your iPhone when the device supports it. We do not record or store audio.
• Technical data: standard server logs (for example IP address, time and errors) kept by our hosting providers for security and troubleshooting. Manna has no advertising trackers or third-party analytics.

How we use it

We use your data only to provide Manna to you: to show your budget, sort transactions, find duplicates, answer your questions, keep your household in sync across devices, secure your account, and respond when you contact us. We do not use your financial data for advertising, and we do not sell or rent it to anyone.

Consent

When you create an account, you agree to this policy and to the processing described here, including reading statements and receipts with Anthropic's Claude. Linking a bank is optional. Before any bank data is collected, Plaid shows you its own consent screen and you choose which accounts to share. You can unlink a bank or delete your account at any time.

Who processes your data

We share data only with service providers that help us run Manna, and only for that purpose:

• Supabase: database, sign-in and server functions (United States).
• Plaid: bank connections, if you link a bank. Plaid's handling of your data is described in the Plaid End User Privacy Policy.
• Anthropic: reads the statements, receipts and checks you upload and returns the amounts. Anthropic does not keep these files or use them to train its models.
• Apple: app distribution, and speech recognition when on-device recognition isn't available.
• Expo: delivers app updates. It does not receive your financial data.

We may also disclose data if the law requires it, or to protect the rights, safety or security of our users or the service. If CUEDIn is ever acquired, this policy continues to apply to your data.

Households

If you invite someone to your household, they can see and edit the household's budget and transactions. An advisor you invite can see them but not change them. You control who is in your household and can remove people at any time.

Security

Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256). Each household's data is isolated at the database level. Bank connection tokens stay on our servers and are never sent to your phone. On your phone, Manna's copy is encrypted with a key kept in the iOS Keychain, and you can lock the app with a passcode or Face ID. No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.

How long we keep it

• While your account is open, we keep your data so Manna works.
• When you delete your account (You → Your data → Delete account), we immediately delete your sign-in. We also delete every household where you are the only member, including its budget, transactions, accounts and bills, and remove its bank connections. A household you share with someone else stays with them.
• Backups holding deleted data are overwritten automatically within 7 days.
• Server logs are kept by our providers for a limited period (typically 7 to 90 days) and then deleted.
• Uploaded files and photos are never stored. They are processed and discarded.

Your choices and rights

• Access and export: download all your transactions and your budget as spreadsheets from You → Your data → Export.
• Correct: edit or delete any entry in the app.
• Delete: delete your account in the app, or email us and we'll do it within 30 days.
• Unlink a bank: at any time in the app.
• Depending on where you live (for example California), you may have additional rights, such as knowing what we collect and not being discriminated against for using them. Email us to exercise any right; we respond within 30 days. We do not sell or "share" personal information as those laws define it.

Children

Manna is not intended for anyone under 18, and we do not knowingly collect data from children.

Changes

If we make material changes to this policy, we'll update the date above and tell you in the app before they take effect. We review this policy at least once a year.

Contact

CUEDIn Inc. · [email protected]