Privacy policy

About this notice

Mannafest Budget is a private household budgeting and planning service operated by Evan Velardi. This notice describes how the service handles information when you request access, sign in, connect an account or use its planning tools. Contact mannafestbudget@gmail.com with privacy questions or requests.

Information we collect

Account and access information includes your name, email, household name, approved membership and remembered-device records. A signup request also records the referring household, its status and processing dates.

Connected accounts may provide account names and types, masked identifiers, balances, transaction descriptions, merchants, amounts and dates. Where you authorize the available features, providers may also return debt terms, investment holdings, investment activity and contribution information. Available information varies by institution and provider.

Information you enter or import may include budgets, corrections, savings goals, income and bill schedules, debts, birthdays, retirement assumptions, dependents, tax estimates, home addresses and property values. Enter only information needed for your household plans.

Technical information includes sign-in and session records, timestamps and limited security or troubleshooting information. Short-lived abuse counters use a keyed, rotating representation of an incoming network address. Hosting and sign-in providers may separately process network addresses, device/browser information and security logs under their own policies.

How we use information

We use information to authenticate approved users, keep households separate, import account history, categorize transactions, calculate budgets and forecasts, track goals and net worth, and provide debt, retirement and tax planning estimates. We also use limited information to review access requests, support users, prevent abuse, investigate security concerns and handle privacy requests.

The app does not sell or rent your personal or financial information, use it for targeted advertising, or send your household finances to a public AI service as a built-in app feature. If you export a file and share it with another service yourself, that service’s policies apply.

Bank connections are read-only

Mannafest Budget reads information from accounts you choose to connect. It cannot send payments, transfer money, place trades, change bank records or write changes back to those accounts. Changing a budget, recording a transfer or assigning savings changes only your plan in Mannafest. You make any real payment or transfer directly with your financial institution.

Bank authentication is handled through the connection provider and, where supported, your institution’s authorization screen. Do not send bank passwords, email codes or recovery keys to Mannafest support. The app stores protected connection access material needed for authorized imports, rather than asking you to enter a bank password into a Mannafest form.

Who can access or receive information

Approved members of your household can access its shared financial information. Other households cannot view your balances, transactions, plans or membership through the app. Authorized service administrators and approved maintenance or support tools may access information needed to operate, troubleshoot or secure the service. Household information is not encrypted so that only household members can decrypt it.

Cloudflare provides application hosting and database storage. Descope handles verified-email sign-in. Plaid handles account connections where enabled; SimpleFIN and its Bridge support existing connections during migration. These providers receive information needed for the features you authorize and have their own privacy notices.

Google provides the operational email and notification service. Automated signup alerts contain a generic notification, without applicant details or bank information; the authorized operator views requests inside the app. GitHub stores private application source and operational records. Authorized development tools may process limited troubleshooting information when needed for approved maintenance.

If you request a property-value lookup, the home address you supply may be shared with the property information service, such as Zillow, to find the property. Entering an address does not authorize a public posting of your household finances.

We may disclose limited information when required by applicable law or when reasonably necessary to address fraud, protect people or respond to a security incident. Service providers may process information in the United States or other locations according to their services and policies; this notice does not promise US-only storage.

Shared merchant knowledge and your choices

Settings has separate choices to use business types confirmed by other households and to share your confirmed business types. These choices are on by default for new or unconfigured households; saved choices are respected. You can turn either off.

Sharing contributes a normalized business name and its confirmed business type, such as grocery store or restaurant. The service keeps an internal household reference so a contribution can be corrected or withdrawn. Other households receive a suggested business type and strength, without your household identity, transaction amounts, purchase dates, individual budget names or full transaction descriptions. We do not describe these internal records as completely anonymous.

Turning sharing off removes your household’s shared contributions when the setting is saved. Other households’ independent confirmations remain. Your household’s own financial history and categorization choices stay in your private budget.

Cookies, devices and tracking

The app uses necessary cookies for secure sign-in, request status and remembered-device access. A device session can remain active for up to one year and renew during ordinary use. Signing out, revoking a device or clearing its browser data ends that device’s access. Keep shared devices and your sign-in email secure.

Mannafest does not include advertising trackers or cross-site behavioral advertising. It does not use browser Do Not Track signals to change its necessary sign-in or security functions. Providers may use their own necessary cookies and security technologies.

Retention and deletion

We retain active household financial history while the household uses the service and wants its history kept. Disconnecting a bank or archiving a budget stops or hides a feature; it does not delete historical records. Usable connection access material is removed or revoked when authorization is withdrawn or deletion is approved.

Pending, declined and approved signup request records are kept for at most 90 days from the applicable creation or decision date; approved household membership is a separate record. Temporary sign-in and migration records have shorter lifetimes. Request-status forms expire within 30 days after submission; expired forms are removed during monthly retention checks.

We acknowledge privacy requests within seven calendar days. After verifying identity and authority for the requested scope, we complete authorized deletion from active application storage within 30 calendar days, or sooner when applicable law requires it. Whole-household deletion requires authority over the shared records, including resolving any member dispute. An export is optional and does not have to delay deletion.

Application-controlled copies are removed or rewritten within 30 days of active deletion. Provider-managed recovery copies may persist until their normal expiry; Cloudflare D1 currently documents seven days on Free plans and 30 days on Paid plans. We confirm the actual window for a deletion request. Copies are not restored for normal use without respecting completed deletion requests.

Minimal request-completion and security records may be retained for 12 months. An opaque inactive household marker may remain while needed to prevent deleted information from being reactivated. A specific legal duty may require limited, restricted retention; we document and explain such an exception. Bank and sign-in providers have separate obligations for their own records.

Your access, correction and privacy requests

You can review and correct your plan in the app, export your household data in Settings, manage remembered devices, change merchant-sharing choices, and request disconnection or deletion. Email mannafestbudget@gmail.com to request access, correction, withdrawal or deletion, or to raise a privacy concern. Tell us the scope of your request; do not include bank passwords, sign-in codes, government identifiers or unnecessary financial records.

We verify identity and household authority before disclosing or deleting private information. We may ask you to use your normal approved sign-in or clarify the scope. Applicable legal rights and shorter mandatory deadlines take priority over this schedule. Requests are reviewed by the operator rather than an automated eligibility decision.

Security and intended audience

We use encrypted connections, managed encryption at rest, protected connection credentials, server-side household access checks and restricted administrative access. Security controls reduce risk but cannot guarantee that every device, provider or system will remain secure. Contact the operator promptly if you suspect unauthorized access.

The service is intended for adults managing private household finances. Adults may enter dependent or education-planning information for their household. It is not intended for children to create their own accounts.

Changes to this notice

This notice’s date identifies the current version. We will publish updates here and notify affected users of material changes through the app or their approved contact address. A new notice does not authorize a new use of previously collected information that requires additional consent.