Privacy Policy

Manu is an iPhone app that connects to a server you operate. This policy explains what the app stores, what it sends, and what this website does. The short version: Manu has no cloud of its own, and we never see your data.

What the app stores on your phone

• Your login: the server address you enter, your email, and the session token returned by your server. These live in the iOS keychain and are removed when you sign out.
• Preferences: which half of the app you last used, your tab layout, and whether test trades are hidden. These live in the app's local settings.
• A push token, if you allow notifications, so your server can send them to this phone.

What the app sends, and to whom

Manu talks to exactly one place: the server address you typed on the sign-in screen. Every request, including strategy changes, grades, chat messages and bank sync, goes to that server and nowhere else. The app contains no analytics, advertising or crash-reporting SDKs, and no third-party servers are contacted by the app itself.

Push notifications are delivered through Apple's push service. Their content is composed by your server.

Bank and broker data

Bank connections (Plaid, SimpleFIN, OFX servers, OFX/QFX imports, Apple Wallet) and broker connections are configured on your server and stored there. Manu displays what your server returns and does not hold bank or broker credentials.

Linking a bank through Plaid

When you choose to connect a bank, Manu can use Plaid to do it. You start the link yourself from the Banks screen, and you sign in to your bank on Plaid's own page. Manu never sees your bank username or password.

• What Plaid receives: the credentials you enter on Plaid's page and, from your bank, your account names, account numbers (masked), balances and transactions. Plaid's handling of this data is described in the Plaid End User Privacy Policy. By linking a bank you agree to Plaid collecting and sharing this data with your server.
• What your server stores: the Plaid access token for each linked bank, encrypted at rest, plus the account names, masked numbers, balances and transactions Plaid returns. Nothing else is collected.
• What it is used for: showing your balances, spending and transaction history in the app. It is not sold, shared with advertisers, or used for anything else.

Apple Card, Apple Cash and Apple Savings

On iPhone, Manu can read your Apple Card, Apple Cash and Apple Savings accounts through Apple's FinanceKit, but only after you choose to connect them and approve Apple's permission prompt. You pick which accounts to share, and you can turn access off at any time in the iPhone Settings app.

• What Manu reads: account names and types, balances, credit limits, and transactions (date, amount, merchant name and category, status and description). Manu only reads this data. It cannot make payments or change anything on your Apple accounts.
• Where it goes: the app sends it to your server, the same one that stores your other bank data, so it appears alongside your other accounts and is shared with the members of your household. It is never sent to us or to any third party.
• What it is used for: showing your balances and transactions, budgets, bill reminders, net worth and spending reports. It is not sold, not shared with advertisers or data brokers, not used for advertising or marketing, and not used for anything else.
• Deleting it: removing an Apple account in Manu deletes its accounts and transactions from your server, and turning off access in Settings stops Manu from reading any more.

Data retention and deletion

Bank data is kept only for as long as the bank stays linked. Removing a bank in the app deletes its accounts and transactions from your server and asks Plaid to delete the connection on its side, so Plaid stops receiving data for it. Signing out removes your session from the phone. Because the data lives on your own server, you can also delete the database file at any time. The full Data Retention and Disposal Policy lists every category of data, where it lives and how it is deleted. This policy is reviewed at least once a year.

Your rights

You can see, export, correct or delete your data at any time, because it is on hardware you control. To ask Plaid to delete data it holds about you, use the Plaid Portal. If you have a request we can help with, contact us at the address below.

What we, the makers of Manu, receive

Nothing from the app. We do not operate a backend for Manu and have no access to your server, your trades or your transactions.

This website

manu.so is a static site hosted on GitHub Pages. It runs no analytics, but with your consent where the law requires it, it uses the Meta and X advertising pixels, which set cookies in your browser, so we can show Manu ads to people who have visited. These never receive anything from the app. Visitors in Europe are asked first, and anyone can change their choice in Cookie settings. GitHub may record standard server logs (such as IP address and pages requested) as described in GitHub's privacy statement. Fonts are loaded from Google Fonts, which receives the request for the font files.

Children

Manu is not directed at children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes, the date at the top will be updated. Material changes will be noted on this page.

Contact

Questions about this policy, or privacy requests: email nithin@vritam.com or reach us on X.