MAUVE ("MAUVE", "we", "us") is a personal finance app that helps you track spending, manage budgets, and understand where your money goes. This policy explains what data we handle, why, who we share it with, and the choices you have. We aim to collect only what the app genuinely needs to work.
MAUVE is run by an independent developer based in Singapore. If you have any questions about this policy or your data, contact us at [email protected].
When you create an account we use Supabase Auth to manage sign-in. Depending on how you sign in, we receive:
The core of the app. This is data you create by using MAUVE:
If you set up the optional Apple Pay auto-log Shortcut, when you make an Apple Pay transaction your device passes the transaction's amount, merchant, date, and card/payment mode to MAUVE so it can be logged automatically. This runs only if you enable it, and you can remove the Shortcut at any time to stop it.
If you allow notifications, we store an Expo push token for your device so we can send round-up summaries and budget nudges. You can turn notifications off in your device settings at any time.
| Purpose | Data used |
|---|---|
| Run your account and sign you in | Account & identity (1.1) |
| Track expenses, budgets and recurring items; show summaries and trends | Financial & usage data (1.2) |
| Automatically categorise transactions | Transaction description text, corrections (see §3 for the AI processor) |
| Auto-log Apple Pay / PayNow payments (if enabled) | 1.3, 1.4 |
| Write your weekly and monthly round-up summaries | Spending totals, budgets, a few notable transactions, and some onboarding answers (1.2) — see §3.2 |
| Send round-up summaries and budget reminders (if enabled) | Push token (1.5) |
| Keep the service secure and rate-limit abuse | Request metadata |
| Understand how MAUVE is used and improve it | Account & financial data (1.1, 1.2), reviewed only by the operator |
To improve MAUVE we look at how it's used — for example, how many people log expenses each week or use a feature. Only the operator sees this, and individual accounts are shown under a pseudonym, not your name or email.
MAUVE uses Anthropic's Claude AI models for two things, described below. Anthropic processes these requests as our service provider. Under Anthropic's commercial API terms, inputs sent through the API are not used to train their models. See Anthropic's Privacy Policy for details.
To suggest a category for a transaction, MAUVE sends the transaction's description text (and, for screenshot logging, the on-device OCR text) to Anthropic, which returns a category suggestion. We send the transaction text and amount context needed for categorisation; we do not send your name, email, or account identifiers as part of that request.
Each week and month, MAUVE writes a short summary of your spending. To do this we send Anthropic your spending totals by category, your budgets and how you're tracking against them, recent averages, a few notable transactions (merchant or description, and amount), and some of your onboarding answers: life stage, what motivates you, and any savings goal and its target. Your income is never sent as a figure, only as a broad band (lower, mid or higher). We don't send your name, email, or account identifiers. Round-up summaries are on by default; you can turn them off in Profile → Notifications, and they stop being created for your account.
We use a small number of service providers ("processors") to run MAUVE. They may process your data only to provide their service to us:
| Provider | Role | Data |
|---|---|---|
| Supabase | Authentication + database hosting | Account & identity, all app data |
| Fly.io | Backend app hosting (Singapore region) | Data in transit / processing |
| Anthropic | AI categorisation and round-up summaries | Transaction / OCR text; spending summaries for round-ups (§3) |
| Expo | Push-notification delivery | Push token + notification content |
| Apple / Google | Sign-in (if you use them) | Identity claims (§1.1) |
We may also disclose data if required by law, or to protect the rights, safety, and security of our users and the service.
We keep your data for as long as your account exists. When you delete your account (see §7), your data is deleted. Residual copies in encrypted backups are purged within 30 days.
Consistent with Singapore's Personal Data Protection Act (PDPA), you can:
We may update this policy as the app evolves. We will revise the "Last updated" date above and, for material changes, notify you in the app or by email.
Questions, requests, or complaints about your data: [email protected].
Data Protection Officer: [email protected].