Privacy Policy

mibu is a personal budgeting app for Android and iOS, developed and published by Ethonex ("we", "us"). We are the data controller for the information described in this policy. One policy covers both apps because they are built from the same code and use the same backend.

This policy does not cover the Google Play Store or the Apple App Store, which handle your download and any store-level account under their own privacy policies.

You type this information into the app, and it is only collected when you provide it:

• Your name and email address, if you create an account through Google Sign-In or Sign in with Apple. Apple may give us a private relay address instead of your real one — that is fine, and it is what we will use.
• The records you keep: transactions (amount, category, merchant, note, payment method, account, date), budgets and their limits and periods, savings goals, bill reminders, opening balances, custom categories, and your first name, country, currency, and pay cycle from the setup screens.

There is no advertising profile of you, no contact book upload, and no free-text field that asks for anything sensitive. Please don't put bank passwords or card numbers in a note.

mibu is local-first. Your records live in the app's private storage on your phone, and the app is fully usable this way.

• Your settings (theme, currency, payment preferences, reminder options) are stored in the app's local preferences on the device.
• PDF and Excel exports are generated on your device. When you tap share, your operating system's share sheet opens and you choose the destination — we never receive that file and we don't control where it goes.
• Notifications for upcoming bills are scheduled locally by the app on your device.

Nothing in this section leaves your phone unless you sign in (section 5) or export a file yourself.

An account is optional and exists only to sync your records between devices. You can sign in with Google or with Apple. We never see or store your Google or Apple password — the provider confirms who you are and passes us an account identifier, your email address, and (from Google) your name.

Authentication is handled by Supabase Auth. When you sign in, we also record a session row containing your account ID, the platform (Android or iOS), and the sign-in and sign-out times, so we can see whether sync is working and how long a session lasted. Signing out in the app ends the session and stops sync; it does not delete your synced records.

While you are signed in, the app continuously copies your records to our Supabase backend so they can be restored on another device. The synced fields are:

Rows are protected by row-level security in the database, so a signed-in account can only read and write its own records. Delete a transaction in the app and the synced copy is removed on the next sync.

Both mobile apps send product analytics to Amplitude. This tells us which features people actually use, so we can fix and improve them. It is not used to build an advertising profile and is not sold.

What an analytics event contains: an account ID and email address when you are signed in (and a device-level identifier when you are not), your platform (Android or iOS), and the name of the action — for example, that a transaction was added, which screen was opened, or that a sign-in succeeded. It does not include the merchant names, notes, amounts, or any other contents of your financial records.

There is no analytics consent switch inside the app. If you would rather not be measured, email us and we will delete the analytics data tied to your account ID (see section 15).

The Android and iOS apps show a banner ad on the Home screen, served by Google AdMob. This is how the app stays free. Ads are not shown in the web version.

To serve and measure ads, Google and its advertising partners may collect your advertising identifier (the Android Advertising ID, or the Identifier for Advertisers on iOS), your IP address, and device and usage information, under Google's own privacy policy. Depending on your region and settings, ads may be personalized using that data.

You can limit ad personalization at any time in your device settings, without leaving the app:

• Android: Settings → Privacy → Ads → Delete advertising ID or Opt out of Ads Personalization.
• iOS: Settings → Privacy & Security → Tracking → turn off Allow Apps to Request to Track, or turn mibu off individually.

Turning these off does not remove ads; it makes them less relevant. We do not receive your advertising identifier ourselves — it is exchanged between your device and Google's ad servers.

mibu requests as little as the platform allows. Here is the complete list of what each app asks for.

Notifications are for your bill reminders. We never send marketing or promotional push notifications.

To be unambiguous, here is what the apps do not access, on either platform:

• ×Contacts, address book, or call logs
• ×Text messages or any other app's messages
• ×Precise or approximate location — the app requests no location permission at all
• ×Photos, camera, microphone, or files outside the exports you create yourself
• ×Bank, card, or UPI credentials. mibu has no bank connection and no login to your bank
• ×Health, fitness, or biometric data
• ×Anything at all from the phones of people who are not mibu users

• To run the app — showing your budgets, totals and insights, and scheduling your bill reminders.
• To sync your data — restoring your records on a new device after you sign in.
• To keep it working — diagnosing crashes and sync failures, and understanding which features are used so we can improve them.
• To show ads in the free mobile apps, through Google AdMob.
• To answer you — responding when you email us, including deletion requests.
• To meet the law — complying with a valid legal request, where one applies.

We do not sell your personal information, we do not share it with data brokers, and we do not use the contents of your transactions to target advertising.

We share data only with the service providers that make mibu work. Each one is bound by its own privacy policy, and each receives only what its job requires.

Beyond these providers, we disclose information only if the law requires it, if we must protect the rights or safety of our users, or as part of a merger or acquisition — in which case this policy would continue to apply until it is replaced, and we would tell you before your data moved under a different one.

• Local data stays on your phone until you delete it in the app, clear the app's storage, or uninstall mibu.
• Synced records stay in our backend while your account exists, so they are there the next time you sign in.
• Session records (sign-in times and platform) are kept while your account exists.
• Analytics events are kept for as long as we need them to understand product usage, under our Amplitude project's retention setting.

When you ask us to delete your account, we delete the synced records, the session records, and the analytics data linked to your account ID, subject to the narrow legal exceptions described in section 13.

You are in control of both copies of your data.

On your device

Delete individual transactions, budgets or goals in the app, or uninstall mibu to remove everything the app stored locally. Signing out stops sync but keeps the cloud copy.

Your account and synced records

Email us from the address you signed in with and we will erase your account and every record synced to it. There is nothing else to fill in — no form, no waiting period, no reason required.

Request deletion of my account

We confirm and complete deletion requests within 30 days.

We may keep a minimal record if we are legally required to — for example, a billing or fraud-prevention record — and only for as long as that obligation lasts. Aggregated statistics that no longer identify you may be kept.

• Data is encrypted in transit with HTTPS/TLS between the app, Supabase, Amplitude and Google's ad servers.
• Synced rows are isolated per account with row-level security in the database, so one account cannot read another's records.
• Sign-in is delegated to Google and Apple using their standard token flows; we never handle your password.
• We do not store card numbers, bank credentials, or any means of moving your money — mibu is a record-keeping app, not a payment app.

No system is perfectly secure, and no app can promise that. Keep your device passcode and your Google or Apple account protected; those are the keys to your synced data.

Depending on where you live, you have some or all of the following rights over the personal data we hold. Email hello@ethonex.com to exercise any of them, and we will respond within 30 days.

• Access and portability — a copy of what we hold, in a machine-readable format. You can also export your own records to PDF or Excel from inside the app at any time.
• Correction — fixing data that is wrong. Most of it you can edit directly in the app.
• Erasure — deleting your account and everything synced to it (section 13).
• Objection and restriction — asking us to stop or limit a particular use, including analytics.
• Withdrawing consent — where a use rests on your consent, withdrawing it is enough; we stop.
• Complaint — you may complain to your local data-protection authority. Under the EU and UK GDPR, and under India's Digital Personal Data Protection Act, 2023, you have these rights against us directly; our grievance contact is the email above.

We do not sell or share your personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA, so there is no "Do Not Sell" opt-out to exercise. You can still opt out of personalized ads on your device (section 7).

mibu is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has used mibu and provided us with information, email us and we will delete it. If you are a parent or guardian and want your child's data removed, the deletion route in section 13 works for that too.

Our backend and analytics providers store and process data on servers located in the United States and other regions. If you use mibu from outside those regions, your information is transferred there. Where required, our providers rely on standard contractual clauses or an equivalent safeguard for those transfers. Because the app works without an account, you can avoid any transfer of your financial records by simply not signing in.

When we change how mibu handles data, we update this page and the "Last updated" date at the top. For a material change — a new category of data, a new provider, or a new purpose — we will say so plainly in the app's release notes and, if you have an account, by email. Continuing to use mibu after a change means you accept the updated policy; if you do not, you can stop using the app and ask us to delete your data.

Questions about this policy, a data request, or something that looks wrong: write to us. A human reads it.

Last updated 22 September 2026 · Effective 22 September 2026