Privacy Policy
What Manila LLC ("Manila," "we") collects at manila.money, why, and who it's shared with. We don't sell personal information or show ads.
Effective October 30, 2026
What we collect
| Information | From | Used for |
|---|---|---|
| Account informationYour name, email address, and Google photo; your Google or Apple account ID, kept only as a hash | Google or Apple | Signing in, emailing you, and showing Player 1 and Player 2 to each other |
| Financial informationFor the credit cards you share: names, last four digits, balances, limits, transactions, statements, payments, and recurring charges; each bank's name and logo | Your financial institutions, through Plaid | Showing it to Player 1 and Player 2; credits, bills, spending, and reminders |
| Access tokensKeys Manila uses only to read the accounts you've connected | Plaid | Syncing |
| What you enterCredit corrections, bank names, credit reset dates, searches, and email settings | You | The features you use |
| Subscription informationYour plan, its status and paid-through date, and Stripe's IDs for it; never your card number | Stripe | Billing |
| LogsEach request (its address, which can include search terms; your IP address and browser) and security events, such as sign-ins and each use of an access token | Your browser | Security and fixing errors |
| CookiesSession (90 days, renewed each visit), sign-in (10 minutes), and invitation (1 hour); no advertising or analytics cookies | Manila | Keeping you signed in |
Bank connections
Manila connects to your financial institutions through Plaid Inc. ("Plaid"), an independent company that provides that service to Manila. You sign in to your bank in Plaid's window, and Manila never receives your bank username or password. By connecting an account, you authorize Plaid to retrieve its financial information for Manila and acknowledge that the Plaid End User Privacy Policy governs Plaid's handling of it. You can remove a bank you connected anytime from Banks.
AI search
A search you submit on Transactions sends what you typed and today's date, and nothing else, to a language model (Workers AI, run by Cloudflare) to turn into filters. We don't store your search or the model's answer; the filters appear in the page's address, so in your browser history and our logs. Card credits are matched by fixed rules and your corrections, never by AI.
Sharing
Only as needed to run Manila, with these providers, each under its own privacy policy: Plaid, to connect your banks (your browser also loads merchant and category icons from it); Stripe, for payments, to which we send your email address and an ID for your subscription (policy); Cloudflare, for hosting, storage, email, AI search, and counting visits to our public pages (Web Analytics), never the pages you see signed in (policy); and Google or Apple, for sign-in (Google, Apple). Player 1 and Player 2 each see all financial information and each other's account information. We may also disclose information when the law requires it, or to a successor if Manila LLC is merged or sold, under this policy.
Security
We encrypt information in transit and at rest, encrypt access tokens again with our own key, and keep each subscription's information in its own database. No system is perfectly secure; we'll notify you of a breach affecting your information as the law requires.
How long
Until it's deleted (below); logs, 7 days. If a subscription lapses, we email Player 1 a warning on day 45, and on day 60 disconnect every bank and erase all information, keeping only a record that we did, with no account or financial information, for 30 days.
Deleting
Delete your account from Account. If you're Player 1, we cancel the subscription, disconnect every bank, Player 2's too, erase all information right away, and email Player 2 that their access has ended. If you're Player 2, or Player 1 removes you, we disconnect the banks you connected and erase their financial information and your account information; Player 1's banks stay.
Your choices
Email privacy@manila.money to see or export what we hold about you. Turn off reminder emails from Account or any reminder's own link; emails about your subscription, bank connections, and security still come. Manila is only for adults 18 and older in the United States. We'll email you before a material change to this policy takes effect.