Privacy Policy

What we collect

Maeve Money is a perk tracker for the website, the iPhone app, and the Android app. We collect the account data needed to run it:

• Your email address, for sign-in and the messages you ask us to send
• Your name, if you add one
• Optional identity details from Apple or Google when you choose that sign-in, such as your name, email address, and the provider's user identifier
• Which credit cards you tell us you own, and which perks you mark as used
• An account identifier we create for you

You can track cards manually or choose to connect an account through Plaid. For connected credit-card accounts, we store institution and account identifiers, account names and masked account numbers, an encrypted connection token, and imported transactions including amounts, currencies, dates, descriptions, merchants, categories, and pending status. We also store matches between transactions and benefits, connection status, and webhook records received from Plaid. Maeve does not receive the bank password you enter through Plaid.

How we use your data

We use this data to:

• Sign you in and keep your session
• Show the perks on the cards you added
• Sync connected accounts and use imported transactions to suggest or automatically record benefit usage. A match is a tracking aid, not confirmation that an issuer has reimbursed you
• Send email reminders you turn on, and replies when you contact us
• Bill a website Plus subscription, if you start one on maeve.money
• Find and fix crashes when error reporting is enabled

We do not sell your data and we do not use it for advertising or cross-app tracking.

Who processes it

These providers help operate Maeve. Their handling of data is also described in their own privacy notices.

• Railway hosts the website and the API
• Supabase Auth stores your sign-in and session
• Amazon SES sends email
• Plaid connects financial accounts you choose to link and supplies account and transaction information. We send Plaid your Maeve account identifier when starting a connection
• Stripe processes website Plus payments. Maeve Money does not store your full card number. The iPhone and Android apps do not offer a purchase and do not send payment details
• Sentry receives crash and error reports when error reporting is enabled for a build. Reports can include an account identifier, diagnostic details, and a small sample of performance data. Website and API reports can include your account email. Native clients associate reports with an account identifier; iPhone screenshot and view-hierarchy capture are disabled. These reports are not used for ads

Cookies and on-device storage

The website uses essential cookies so you can stay signed in. We do not use tracking cookies. The apps store the sign-in session on the device. That session is excluded from Android backup.

Deleting your account

You can delete the account yourself. Deletion removes the profile, the cards you added, perk history, and linked-account and imported-transaction records from our application database. A website Plus subscription, if you have one, is canceled with the account. There is no App Store or Google Play subscription in this version. We do not offer a self-serve data export.

We retain your account identifier and deletion request/completion timestamps to prevent old sessions from recreating the account. This record does not contain your email, name, cards, or perk history. It currently has no automatic expiry. If a billing or sign-in provider is unavailable, deletion stays pending and retries automatically; account access is blocked while the data awaits cleanup.

• In the iPhone or Android app: Me, then Account settings, then delete the account and type DELETE
• On the website: sign in, open Account, open Data & privacy, then delete the account and type DELETE
• By email: write to hello@maeve.money from the address on the account and ask us to delete it

The same steps are on the delete account page. You can also turn off marketing email from account settings.

Connected accounts and retention

You can disconnect a linked account in Account → Connections. This removes its connection, account, transaction, and matching records from our application database. Previously recorded benefit usage remains. Disconnect and account deletion preserve encrypted connection-recovery material while removal from Plaid is pending. We retry provider removal; missing or mismatched connection configuration requires investigation. Local removal does not guarantee that access at Plaid or your institution has been revoked.

Imported transactions have no automatic age-based expiry in the application. Transactions removed by the data provider may remain stored as hidden records until disconnect or account deletion. New Plaid webhook audit records contain event metadata rather than raw payloads. Item-linked audit records are removed with the connection. Historical records that cannot be linked to an existing connection, and remaining event metadata, currently have no automatic age-based expiry. These actions do not establish when copies held by service providers or backups are erased. You can review connected-app permissions with your institution or Plaid.

Benefit links

When you choose an action link for a benefit, we record the benefit and action you selected so we can operate and improve the feature. Some links may be affiliate links; merchants may pay Maeve Money a commission at no additional cost to you. We do not share your account data with merchants through these links.

Contact

Questions? Email us at hello@maeve.money.