What you give Manna stays yours.
Receipts, transactions, and everything you type into Manna belong to you. This page explains, in plain terms and in binding ones, how we protect it and what we will never do with it.
You own it
Export or delete everything, any time, in the app.
Encrypted, always
In transit and at rest, including every receipt photo.
Never sold
No ads, no data brokers, no “partner offers.”
1. Ownership
You retain all right, title, and interest in the financial information, images, notes, and other content you submit to Manna Money (“Your Data”). Manna Money, Inc. (“Manna,” “we”) does not acquire ownership of Your Data. You grant Manna a limited, revocable license to store and process Your Data solely to provide the Service to you and for no other purpose.
That license ends when you delete the data or close your account.
2. What we collect
We collect only what the Service needs to work:
- Account information. Email address and authentication credentials.
- Transactions. Amount, date, merchant, and category for accounts you choose to connect or entries you make by hand.
- Receipt images. Photographs you take or upload, and the line items we read from them.
- Budget and giving data. Goals, categories, and recipients you set.
- Messages to Mira. Questions you ask and the responses returned.
We do not collect your contacts, location, or advertising identifiers.
3. Encryption
Your Data is encrypted in transit using TLS 1.2 or higher between your device and our servers, and at rest using AES-256 encryption on our storage systems. Encryption keys are managed through a dedicated key-management service, stored separately from the data they protect, and rotated on a regular schedule.
Access to production systems is restricted to named personnel, requires multi-factor authentication, and is logged.
4. Receipt photos
When you photograph a receipt, the image is encrypted on your device before upload and remains encrypted at rest. We process the image to extract merchant, date, line items, tax, and tip, then attach that structured data to the transaction.
- Receipt images are stored in a private bucket that is not publicly addressable.
- Images are visible only to you and to the automated systems that read them.
- You may delete any receipt image at any time. Deletion removes the image and any derived line items.
- Receipt images are not used to train models unless you separately and explicitly opt in.
5. Bank connections
Manna does not store your bank username or password. Account connections are made through a regulated data-aggregation provider using tokenized, read-only access. Manna cannot move money, initiate payments, or change anything at your financial institution.
You may disconnect any account at any time, which revokes the access token.
6. Mira
Mira answers using your budget and transaction data. Requests are processed under agreements that prohibit the provider from retaining your data or using it to train models. Mira cannot move money, connect accounts, or take any action on your behalf.
7. What we never do
Manna will not, under any circumstances:
- Sell, rent, or license Your Data to any third party.
- Share Your Data with advertisers, data brokers, or lenders.
- Use Your Data to market third-party financial products to you.
- Disclose Your Data to any church, employer, or organization, including giving recipients.
We disclose Your Data only to service providers bound by written confidentiality and data-processing agreements and acting on our instructions, or where required by valid legal process, in which case we will notify you unless prohibited by law.
8. Your controls
- Export. Download all of Your Data in CSV and JSON formats from Settings at any time.
- Delete. Delete individual transactions, receipts, or your entire account from Settings. No email or phone call required.
- Disconnect. Revoke any bank connection instantly.
- Correct. Edit any record Manna has created or read from a receipt.
9. Retention and deletion
Your Data is retained for as long as your account is active. When you delete your account, Your Data is deleted from production systems within 30 days and from encrypted backups within 90 days. We retain only what applicable law requires, such as records of your consent, for the period the law specifies.
10. Changes to this page
If we change these commitments, we will notify you by email at least 30 days before the change takes effect. We will not weaken the protections in Sections 1, 3, 4, or 7 without your affirmative consent.
Questions: [email protected]