Privacy Policy

Mulga is a personal finance tool built on a simple principle: your data is yours. We collect the minimum information needed to run the service and never sell, share, or monetise it.

Who we are

Mulga is a personal finance dashboard operated as an independent project. If you have questions about this policy, you can reach us at [email protected].

What we collect

We collect only what is necessary to provide the service:

Email address - used to create and authenticate your account.
Financial data you enter - account balances, income, expenses, investments, and any other information you choose to input. This data is stored securely and associated with your account.
Session data - a refresh token stored in your browser's local storage to keep you signed in between visits.

We do not collect your name, phone number, location, or any government identifiers. We do not connect to your bank or any financial institution. All financial data in mulga is entered manually by you.

What we don't collect

No advertising identifiers or tracking pixels
No analytics or behavioural tracking
No bank account numbers, credit card details, or financial credentials
No data from third-party sources

How we use your data

Your data is used solely to operate mulga:

To authenticate you and keep your account secure
To store and sync your financial data across your devices
To display your dashboard and power calculations within the app

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

How your data is stored

Your data is stored using Supabase, a managed database platform with encryption at rest and in transit. Authentication is handled through Supabase Auth using industry-standard practices.

Supabase infrastructure is hosted on AWS. You can read Supabase's own security and privacy documentation at supabase.com/privacy.

Data sharing

We do not sell, rent, or share your personal data with any third parties, except where strictly required to operate the service (i.e. Supabase as our database provider) or where required by law.

Your rights

You have the right to:

Access the data we hold about you
Correct any inaccurate data
Delete your account and all associated data
Export your data at any time

To exercise any of these rights, contact us at [email protected] and we will respond within a reasonable timeframe.

Cookies & local storage

mulga does not use tracking cookies. We use your browser's local storage for two purposes:

Session token — keeps you signed in between visits without requiring you to log in each time.
Financial data cache — your app data (accounts, categories, transactions, etc.) is cached locally so the app loads instantly and works smoothly. This is the same data that is synced to our server; it is stored locally purely for performance.

This data never leaves your device except as part of authenticated API requests to our server. You can clear it at any time by signing out or using your browser's "Clear site data" option.

Children

Mulga is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of Mulga after changes are posted constitutes your acceptance of the updated policy.

Contact

Questions, concerns, or requests relating to your privacy can be directed to [email protected].