Privacy Policy

1. Who we are

Mango Money is provided by Primed Mind Technology Solutions Limited, registered at Apartment 67, Westend Village, Dublin 15, D15 YF65, Ireland, company number 737502. We are the data controller for the limited processing described in sections 4 and 5. Questions about this policy can be sent toinfo@primedmindtech.com.

2. Beta status

Mango is distributed through Apple's TestFlight while it is in beta. It is pre-release software under active development: features may be incomplete, change, or be removed. Keep your bank's own records, and do not rely on Mango as the authoritative record of an account. This policy will be reviewed again before a public App Store release.

3. What the app stores on your iPhone

Depending on how you use Mango, the app can store your accounts and their names, balances and balance checkpoints, transaction dates, amounts, currencies, descriptions, payees, categories, notes, linked transfers, import history and duplicate fingerprints, column mappings, and your display and lifestyle preferences.

This is held in the app's private storage on your device. Small secrets — such as the app-lock setting and, if you provide one, your own AI API key — are held in the iOS Keychain and are only readable while the device is unlocked. Primed Mind operates no account system and no personal-data database for Mango: we cannot read, recover, or restore any of it.

Whether a copy of this data appears in an Apple device backup is governed by your own iOS and iCloud settings, not by us.

4. What can leave your device, and when

Nothing in the list below happens in the background, on a timer, or at launch. Each one is the direct result of something you do.

• Bank sync — only after you connect a bank. See section 5.
• AI categorisation — off by default. Enabling it requires an explicit Settings toggle and your own Anthropic API key. When enabled and triggered, a request carries only a transaction description, a formatted amount, and a currency code. Account names, balances, bank references and your transaction history are never included. If you open a statement whose column layout Mango does not recognise while this feature is already enabled, the file's header row and up to three sample rows are also sent so a column mapping can be suggested; the suggestion only pre-fills a form you still confirm. Anthropic applies its ownAPI retention rulesto those requests.
• Official inflation data — when you ask for it. Every lifestyle and cost-of-living calculation runs on the device from your own confirmed transactions. The single network call this feature can make fetches a published national price index from Ireland's Central Statistics Office, and carries only a country code, a series identifier, a published category, and reference months. It has no field capable of carrying a transaction, amount, category, account, balance, or goal.
• Support email — if you write to us. We process the contact details and message you send so we can reply and keep an appropriate support record.

Mango contains no advertising, no cross-app tracking, no third-party analytics, no telemetry, and no crash reporting. We do not sell personal information. This website sets no advertising or analytics cookies; our host processes limited technical connection information, such as IP address and request logs, to deliver and secure these pages.

5. Bank connections

Bank sync is off until you explicitly connect a bank, and a sync only runs when you start one. Authentication happens on pages provided by your bank and by Enable Banking, our open-banking provider. Mango never receives or stores your online-banking password, PIN, or one-time codes. The connection is read-only: Mango cannot initiate a payment.

When you sync, Enable Banking obtains account information from your bank and delivers it to the app through a dedicated Mango relay hosted on Vercel. The relay exists because the private key that signs requests to Enable Banking cannot safely be placed inside an iPhone app. It briefly processes authorisation codes, session and account identifiers, account metadata, balances, and transaction responses in order to pass them through. It has no bank-data database, sendsCache-Control: no-store on protected responses, and does not intentionally persist response bodies.

Synced transactions arrive as review candidates. Nothing is added to your records until you confirm it.

These providers process data under their own notices and terms:Enable BankingandVercel. Vercel may retain operational and security logs according to its own settings and legal obligations.

6. Backups and exports

A portable backup is encrypted on your device with a key derived from a password you choose. You decide where the file is saved or shared. We never receive a copy and cannot decrypt a backup or recreate a lost password or recovery key. Anything you export and send elsewhere is then governed by wherever you sent it.

7. Retention and deleting your data

On-device records remain until you delete them, replace them by restoring a backup, or remove the app. Mango also provides a single confirmed action that revokes every bank session and then deletes your account and bank names, transactions, balance checkpoints, mappings, custom categories, connection metadata and import filenames in one operation; if a revocation fails, local deletion stops rather than falsely reporting success.

Deleting the app removes its locally stored data from that iPhone, subject to Apple's device-backup behaviour. It does not by itself guarantee that a bank consent has been revoked — use Mango's disconnect action, or your bank's or Enable Banking's consent controls, to do that. Backups you exported remain wherever you saved them until you delete them there.

8. Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, objection, and data portability in respect of personal data we control. Because your financial records are held on your own device and we hold no copy, those rights are exercised directly in the app for that data. For the limited information we do hold — support correspondence, and provider-side logs relating to bank sync — contact us atinfo@primedmindtech.com. You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

9. Legal bases

Where we process personal data, we rely on the performance of our agreement with you to deliver a bank sync you requested and to answer your support messages; on your consent for optional AI categorisation, which you may withdraw at any time by turning the setting off; and on our legitimate interests in keeping this service secure and operational.

10. Children

Mango is not directed at children, does not knowingly collect children's personal information, and provides no social or public-sharing features.

11. Changes to this policy

We may update this policy as the app changes or legal requirements change. The effective date above identifies the current version. Material changes will be reflected here and, where appropriate, communicated in the app.