Privacy Policy

Overview

Manaaki is a personal finance tool. To do its job — showing your balances, tracking spending, helping you plan — it needs access to your financial data. This policy explains what we collect, why, and how we protect it.

We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

Account information

When you sign up, we collect your name, email address, and a password. If you invite a partner, we collect their name and email too.

Financial data you enter

You can manually add accounts, transactions, goals, and bills. We store this data so you can see your finances across sessions.

Bank connections

In Australia, bank connections are live through Basiq, an accredited data recipient under the Consumer Data Right (CDR). When you connect a bank account, Basiq handles the consent flow directly with your bank — we never receive your bank login credentials.

Through this connection, we receive read-only access to your account balances and transaction history. We cannot move money, make payments, or modify your accounts in any way. The data helps us show you your balances and categorise your spending.

Bank feed availability varies by country. In the US and Canada, connections via Plaid are in development. In other countries, bank feeds may not yet be available.

Usage data

We collect basic analytics: which pages you visit, how often you log in, which features you use. This helps us improve the product. We don't sell this data.

AI conversations

When you use the Ask feature, your questions and the AI's answers are stored so you can revisit them. The AI may read your transactions and goals to give contextual answers. Conversations are private to you — your partner cannot see them.

We never hold a cent

Manaaki is a planning and tracking tool — not a bank. We don't hold deposits, process payments, or move money on your behalf. Your money stays exactly where it is: at your existing bank accounts. We simply help you see and organise the full picture.

How we use your data

• To run the product: showing dashboards, calculating runway, displaying spending trends
• To power the AI: giving the assistant context to answer your questions
• To improve Manaaki: understanding which features matter and fixing bugs
• To communicate with you: account notices, product updates (you can opt out of marketing)

We don't sell your personal information. We don't use your financial data for advertising. We don't share it with third parties except as needed to run the service (hosting, bank integrations) or as required by law.

Data security

Your data is encrypted in transit (TLS) and at rest. We use industry-standard cloud infrastructure with access controls and monitoring. Our database is hosted in Australia.

No system is perfectly secure. If we ever experience a data breach, we'll notify affected users and the relevant authorities as required by law.

Household privacy

If you share a household with a partner, both of you see joint accounts and shared goals. But personal pots are private: your partner cannot see the transactions, categories, or spending trends inside accounts you own personally.

This separation is enforced at the database level, not just in the UI. Support access to personal pot contents requires explicit user permission and is logged.

Your rights

You can access, correct, or delete your personal information at any time. To export or delete your data, go to Settings or email us. We'll respond within a reasonable timeframe.

If you delete your account, we'll remove your data from our active systems. Some data may persist in backups for a limited time as required for legal or operational reasons.

Cookies

We use essential cookies to keep you logged in and remember your preferences (like dark mode). We may use analytics cookies to understand usage patterns. You can disable non-essential cookies in your browser settings.

Third parties

We use third-party services to run Manaaki:

• Supabase: database and authentication (hosted in Sydney)
• Anthropic: AI models that power the assistant
• Basiq (AU bank feeds): an accredited data recipient under the Consumer Data Right (CDR). When you connect an Australian bank account, Basiq retrieves your account and transaction data on our behalf. See Basiq's privacy policy and CDR policy.
• Plaid (US/CA, in development): bank data aggregation for US and Canadian accounts. Production access pending.

Each provider has their own privacy policy. We only share the minimum data needed for them to provide their service. We do not share your data for advertising or sell it to third parties.

Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via email. The "Last updated" date at the top reflects when this policy was last revised.

Contact

Questions or concerns about your privacy? Email us at hello@manaaki.ai.