Privacy Policy
This policy explains what personal information maneko collects, how it is used, who it is shared with, and the rights you have over it. It applies to the maneko application and website.
maneko is the data controller for the information described here. For any question about this policy, or to make a request about your information, contact privacy@maneko.app.
1. Information we collect
Information you provide. The financial records you create — accounts, balances, transactions, categories, budgets, goals, investments and notes — together with any documents or images you upload, such as receipts and statements.
Account information. Your email address, an encrypted form of your password (we never store the password itself), any passkeys you register, and your preferences such as reporting currency, time zone and display settings.
Information collected automatically. Your IP address, browser and device type, the pages you visit within the Service, and diagnostic information when an error occurs. Monetary amounts are not recorded in our diagnostic logs.
Messaging channels. If you choose to connect a messaging service, the identifier for that account and the messages you send to maneko through it.
maneko does not connect to your bank, access your email, track you across other websites, or serve advertising. We use no advertising trackers and nothing that follows you between sites.
Our network-security and content-delivery provider counts visits to the public marketing pages, and runs its bot-protection script there. That measurement is cookie-less, is not tied to you and is not joined to anything else, and it does not run inside the app where your financial data is. We use no other analytics. The provider is listed in the table below.
2. How we use it, and our legal basis
| Purpose | Legal basis (where the GDPR applies) |
|---|---|
| Providing the Service: storing and presenting your records | Performance of a contract |
| Authenticating you and securing your account | Performance of a contract |
| Reading documents you upload, and answering you in the assistant | Consent |
| Diagnosing errors and protecting the Service | Legitimate interests |
| Processing payments, and meeting tax and accounting obligations | Contract and legal obligation |
| Sending notifications and alerts | Consent |
Where we rely on consent you may withdraw it at any time, without affecting processing already carried out.
We do not sell personal information, and we do not use your financial records for advertising.
3. Who we share it with
We use service providers to operate the Service. They process personal information only on our instructions, under contract, and only to the extent needed to perform their function. They fall into the following categories:
- Automated document and message processing (AI)
- Cloud hosting and storage
- Network security and content delivery
- Payment processing
- Error monitoring and diagnostics
We may also disclose information where required by law, or to establish or defend legal claims.
Automated document reading and the assistant. When you upload a document, or send a message to the assistant, that content is transmitted to a third-party artificial intelligence service for processing. This happens only in response to an action you take; we do not submit your records for processing in the background, and under that provider's business terms your content is not used to train their models. If you would prefer particular information never to be transmitted to a third party, enter it manually rather than uploading it.
4. Where information is held
The Service is operated using infrastructure and providers located in several countries, including those identified in the table above. Your information is therefore processed outside your country of residence.
Where information is transferred out of the United Kingdom or the European Economic Area, that transfer is made under the standard contractual clauses included in our agreement with the relevant provider, or another transfer mechanism permitted by applicable law.
5. How long we keep it
We keep your information for as long as your account remains open. When you delete your account, your records and documents are deleted, and residual copies held in backups are removed in the ordinary course of our backup cycle. Diagnostic records are kept only as long as needed to investigate and resolve faults. Where we are required to retain information for longer — for example, records relating to payments — we retain it only for that purpose and only for as long as required.
6. Security
We protect personal information using encryption in transit and at rest, access controls that isolate each account's data, and passwords stored only in an encrypted form that cannot be reversed. No service can be guaranteed completely secure, and we cannot warrant absolute security.
7. Your rights
You can view, export, correct and delete your information directly within the Service at any time, in Settings. This is the fastest route and requires no request to us.
Depending on where you live, you may also have the right to object to or restrict processing, the right to receive your information in a portable format, and the right to lodge a complaint with your local data protection authority. Individuals in the United Kingdom and the European Economic Area have these rights under the GDPR; individuals in Malaysia and Singapore have equivalent access and correction rights under the applicable Personal Data Protection Acts.
To exercise any right, contact privacy@maneko.app. We will respond within the period required by applicable law.
We do not carry out automated decision-making that produces legal or similarly significant effects. The assistant proposes; you decide.
8. Data breaches
If a breach of personal data occurs, we will notify the relevant supervisory authority, and affected individuals where the breach is likely to result in significant harm, within the periods and in the manner required by applicable law.
9. Cookies and local storage
maneko does not use advertising or analytics cookies. We store information in your browser that is necessary for the Service to function: your sign-in tokens, your preferences, and a local copy of your data so the application works offline. Clearing your browser's storage removes this information and signs you out.
10. Children
The Service is not intended for, or directed at, anyone under 18, and we do not knowingly collect information from children.
11. Changes to this policy
We may update this policy. Where a change is material, the version number will be updated and you will be asked to review and accept the revised policy before continuing to use the Service. Each version you have accepted is recorded, together with the date.
12. Contact
privacy@maneko.app — for access requests, deletion requests, complaints and any other question about this policy.