Privacy Policy

Account data: your name and email address, used to create and secure your account and to contact you about it.

Sign-in data: if you sign in with email and password, we store a salted hash of your password, never the password itself. If you use Google Sign-In, Google provides us your name, email address and a unique account identifier. We do not receive your Google password.

Financial data you enter yourself: transactions, budgets, savings goals, accounts, assets, categories, currencies and manual exchange rates, plus notes or receipt images you attach. This is the core of the app and is stored so it can be shown back to you on any device you sign in from.

Subscription status: whether you have an active trial or paid plan, which plan it is, and its renewal date. For subscriptions bought on this website we receive this from Stripe; for subscriptions bought inside the app we receive it from the app store through RevenueCat (see below). We never see or store your card number.

Basic technical data: app version, device type and operating system version, and crash reports without personal content, used only to keep the app working.

• No bank credentials, and no linking to bank accounts. Mizan does not connect to any bank, card issuer or open-banking provider. Every transaction is entered, imported or scanned by you.
• No location data.
• No access to your contacts.
• No advertising identifiers (such as IDFA or GAID) and no advertising networks or SDKs.
• No third-party analytics or tracking scripts, in the app or on this website.
• No selling of data to anyone, ever.

To run the app: store and sync the data you enter, show budgets and reports, and calculate forecasts.

To provide the AI coach: answer your questions, scan receipts and produce reviews and forecasts, as described in the next section.

To manage your subscription and respond to support requests.

To keep the service secure and fix bugs.

We do not use your data to build advertising profiles, and we do not use your financial data to train AI models.

We share data only with the providers needed to run Mizan, and only the minimum each one needs.

• OpenAI (OpenAI, L.L.C.): powers the AI coach. When you ask the coach a question, scan a receipt or request a review or forecast, the relevant text (your question and the transaction, budget or goal data needed to answer it, or the receipt image) is sent to OpenAI’s API for processing. We send data only when you use an AI feature, never in the background. We use OpenAI’s API under terms that state that API data is not used to train their models. Your name and email are not included in these requests.
• Stripe (Stripe, Inc.): processes card payments made on this website. When you subscribe here we send you to Stripe’s own checkout page, where you enter your card details directly with Stripe. Stripe receives your email address and the plan you chose, and tells us whether the payment succeeded. Your card number never reaches Mizan’s servers. Stripe handles payment data as an independent controller under its own privacy policy.
• RevenueCat (RevenueCat, Inc.): processes in-app subscriptions. RevenueCat receives an anonymous app-user identifier and your purchase and renewal status from the app store so we can unlock the right plan.
• Apple App Store and Google Play: handle payment, billing, renewals and refunds for subscriptions bought inside the app, under their own privacy policies. We never receive your payment details.
• Hosting and database provider: your account and financial data are stored in a database operated by a cloud hosting provider on our behalf. The provider is bound by contract to process data only on our instructions.
• Google (Google Sign-In): only if you choose to sign in with Google.

We do not share data with advertisers, data brokers or “partners” for marketing. If we ever add a provider that handles your data, this policy will be updated first.

Data is encrypted in transit using TLS between the app, this website and our servers. Stored data is protected by access controls and is encrypted at rest by our hosting provider.

We keep your data for as long as your account exists. When you delete your account, your account record and all financial data in it are permanently deleted from our production database within 30 days; encrypted backups are overwritten within a further 30 days. Aggregate, anonymous usage counts that cannot identify you may be kept.

Data may be stored and processed on servers outside your country of residence. Where required, we use standard contractual protections for such transfers.

• Export: you can export all of your data at any time from Settings > Data > Export (PDF, Excel or CSV).
• Delete: you can delete your account and everything in it from Settings > Account > Delete account. See the Delete Account page for details.
• Correct: you can edit any data you entered directly in the app.
• Access, portability, objection and complaint: depending on where you live (for example under the GDPR, UK GDPR, or similar laws), you may have additional rights. Email support@mizan-ai.org to exercise any of them; we respond within 30 days.

You can use most of the app without the AI coach. AI features run only when you ask for them.

Mizan is not directed at anyone under 13 years of age (or the higher minimum age required in your country), and we do not knowingly collect data from children. If you believe a child has created an account, email support@mizan-ai.org and we will delete it.

We may update this policy as the app changes. Material changes will be announced in the app before they take effect. The date at the top shows the current version.

Questions, requests and complaints: support@mizan-ai.org.