Privacy Policy

Last updated: 2 October 2026

In short: we collect only what you type into ManaKhata plus your email and name. We don’t run ads, don’t sell data and don’t use tracking cookies. Your household’s data is protected by database-level access rules, stored with Supabase in Mumbai, and you can export or delete it whenever you like.

1. Scope

This policy explains how ManaKhata handles personal data when you use the web app at frontend-phi-lemon-1hkzt9uj98.vercel.app and the ManaKhata Android app. It is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and comparable laws such as the GDPR.

2. What we collect

Account data: your name, email address and a securely hashed password (handled by Supabase Auth). Optionally a phone number.
Household data you enter: amounts, descriptions, categories, dates, budgets, bills, goals, chores, chat messages, vehicle, trip, investment, insurance and tax-proof records, and your stated monthly income.
Technical data: our hosting providers keep standard server logs (such as IP address, browser type and timestamps) for security and reliability.
On your device: the app stores your sign-in session, theme preference and — if you use it — the demo household in your browser’s local storage. These are not tracking cookies.

We do not collect bank credentials, card details, UPI PINs, contacts, location or advertising identifiers.

3. Why we use it

To provide the Service: show your household’s records, calculate totals and insights, and keep family members in sync.
To secure the Service: authenticate you, prevent abuse and investigate problems.
To contact you about your account: confirmation and password-reset emails, and important changes to these policies.

We process your data on the basis of your consent and to perform our agreement with you. We do not use your data for advertising or sell it to anyone.

4. Who can see your data

Your household: members see shared entries and each other’s names, roles and stated income. Entries you mark private are visible only to you — this is enforced by Postgres Row Level Security, not just by the app.
Service providers (processors): Supabase, Inc. (database and authentication, data stored in the AWS ap-south-1 Mumbai region) and Vercel, Inc. (web hosting). They process data only on our instructions.
Legal requirements: we may disclose data if required by law or to protect the rights and safety of users.

5. How long we keep it

We keep your data while your account exists. When you delete your account, your login, profile, private entries, income records, tax proofs, chat messages and personal budgets are deleted. Shared household entries remain for the other members but are no longer linked to your identity. If you were the only member, the entire household is deleted. Residual copies in our providers’ backups expire on their standard schedule.

6. Your rights

Access and portability: download your data any time from Settings → Your data (CSV and JSON).
Correction: edit your profile and entries directly in the app.
Erasure and withdrawal of consent: delete your account from Settings → Delete account.
Grievance redressal: raise a concern via the contact below; we aim to respond within 30 days. Under the DPDP Act you may also approach the Data Protection Board of India.

7. Children

ManaKhata accounts are for adults. Children and teenagers may be added only to a household created by a parent or guardian, who consents to the processing of their data and controls what they can see.

8. Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our providers. Every database row is checked against your household membership by Row Level Security, and sensitive actions (approvals, wallet changes) run as audited server-side functions that re-check your role. No system is perfectly secure; please use a strong, unique password.

9. Changes

We will update the “last updated” date when this policy changes and notify you in the app before material changes take effect.

10. Contact

Privacy questions or requests: open an issue at github.com/iragavarapunagaatchutaneelima/ManaKhata/issues (do not post personal data publicly — ask for a private contact channel).