What is kept
Your account: your email, your name and a one-way hash of your password (Argon2id). The password itself is never stored.
Your records: accounts and balances, transactions, categories, merchants and rules, plans, goals and monthly reviews — what you enter or bring in.
The bank messages you paste or send from your phone. The original text is encrypted at rest (AES-256-GCM) and kept for 90 days, so you can check what Mizan read from it; after that only the fields read from it remain. You can delete an original sooner, one at a time or all at once, under Settings → Capture & privacy.
What is never asked for or kept
Online-banking passwords, PINs and one-time codes. Mizan has no feature that could use them. Messages that look like one-time codes are dropped before anything is stored.
Message content never goes into logs. Log lines carry identifiers and whether a message could be read, not what it said.
Who can see it
Only you, in your own workspace. The demo workspace is fictional and kept apart from your records.
Administrators of this Mizan installation manage invitations and accounts; the app gives them no view of anyone else’s money.
What leaves the server
Nothing is sold, used for advertising or sent to analytics. There are no tracking scripts, and fonts and icons are served by Mizan itself, so pages load nothing from anyone else.
Emails for invitations, password resets and sign-in links go out through the installation’s mail service. Exchange rates are fetched from a public reference-rate service; no data of yours is sent with the request.
If you connect eToro, the key you give is stored encrypted and used read-only, to fetch your balance. Disconnecting removes it.
No AI service reads your messages or records.
Cookies
One cookie, mizan_session, keeps you signed in. It is sent only to Mizan, can’t be read by page scripts, and ends after a week without use or a month at most. There are no other cookies, so there is nothing to consent to.
The Android companion
On your phone, messages are filtered before anything is sent: only messages from your banks’ senders go to Mizan, and one-time codes never leave the phone. The companion’s token can only add messages — it can’t read your records — and you can revoke it from Data Sources at any time.
What you can do
- Download everything in your workspace as one file, from Settings → Data export & deletion.
- Delete a transaction, an original message, a whole workspace or your account.
- Hide every amount on screen with Mask, for shared or public screens.
This page describes how Mizan works; it isn’t yet a formal privacy notice, which comes before Mizan opens beyond its invited testers.