Mandede Privacy Policy

Mandede is a personal and household finance app built and operated by Christopher Phiri (“we”, “us”). This policy explains what information Mandede collects, how it is used, and the choices you have. It applies to the Mandede mobile app and this website.

This policy is effective as of 2026-09-17.

Information we collect

Account information. When you create a Mandede account we collect your name, email address, and password. Passwords are stored as salted hashes, never in plain text. We also issue authentication session tokens, which are stored securely on your device.

Financial data you enter. Mandede is a finance tracker, so the core of the service is data you choose to enter: accounts, transactions, budgets, categories, goals, bills, loans, contacts, and household/group memberships (including invites you send or accept). This data is stored on our servers so it can sync across your devices and be shared with household members you explicitly invite.

Technical data. To keep the app working reliably, we automatically collect limited technical information: device model and operating system version, app version, network connectivity status, and basic request logs (such as IP address, timestamp, and endpoint) generated when the app communicates with our servers. We use this only to operate, debug, and secure the service.

What we do not collect. Mandede does not request access to your camera, microphone, photo library, device storage, or contacts. We do not use advertising SDKs, and we do not run analytics or crash-reporting SDKs inside the app.

How we use your information

We use the information above to:

  • Create and secure your account, and authenticate your sessions
  • Provide the core functionality of the app (tracking, budgeting, sharing finances with household members you invite)
  • Operate, maintain, and troubleshoot our servers
  • Communicate with you about your account, such as responding to support requests

We do not sell your personal information, and we do not use it for advertising.

Who we share information with

We do not share your personal or financial data with third parties for their own marketing or advertising purposes. Limited data is processed by infrastructure providers strictly to operate the service:

  • Cloudflare – provides DNS and network routing for our website and API, and sees connection-level metadata (such as IP address) in the course of delivering traffic.
  • Expo Application Services (EAS) – delivers app updates and hosts app builds. Expo may process device and app runtime information needed to deliver the correct update to your device. See Expo’s Privacy Policy.
  • Google Play Services – required by Android to install, license, and update the app. See Google Play’s Privacy Policy.
  • Sentry – used on this website’s server only (not inside the mobile app) to capture error reports when something goes wrong, so we can fix it. See Sentry’s Privacy Policy.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of Mandede, our users, or others.

Household and shared data

If you join or create a household/group within Mandede, other members you’ve connected with may be able to see financial data you choose to share within that group (for example, shared budgets, bills, or settlements). Data outside a shared context remains visible only to your account.

Data retention and deletion

You can request deletion of your account and associated data at any time, from within the app (Profile → Delete account and data) or by visiting mandede.cphiri.dev/delete-account — no sign-in required. Within 30 days of a verified request we permanently delete your account, sessions, profile, and financial records from our active systems. Residual backups expire within 90 days. Full details, including limited legal-retention exceptions, are on the account deletion page.

Security

We use commercially reasonable measures to protect your information, including encrypted connections (HTTPS) between the app and our servers and hashed password storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children’s privacy

Mandede is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided us with personal information, we will delete it. If you believe a child has provided us with personal information, please contact us at the email below.

Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the effective date above.

Contact us

Questions or requests about this Privacy Policy or your data can be sent to skybox.mw@gmail.com.