Privacy Policy

1. Who we are

ManagEasily (manageasily.app) helps families keep track of their money in one shared place: income and expenses, businesses, assets, agriculture and loans. This policy explains what information ManagEasily keeps, why, who can see it and the choices you have. "We" and "us" mean the team that runs ManagEasily.

Business and support information is available in our Ownership Statement.

2. What you can store

What you add

• Your login: your email address, your password and your time zone. The password is stored only as a one-way hash (bcrypt), so it can't be read back. The time zone is your device's when you sign up (Pakistan time if it can't tell); you can change it on your Profile.
• Your name in each family you belong to, your role there (Family Head, Admin or Viewer), and the family's name and fixed usage timezone, used to keep daily and monthly plan limits consistent for all members.
• Invitations: when a Family Head invites someone, the name, email and role they enter, until the invitation is accepted or cancelled.
• Whether your email is confirmed, and a new email you've asked to change to while it waits to be confirmed.
• Your family's records: whatever your family enters, such as financial records with their amounts, dates, categories and notes, businesses and their investors, assets, crops and suppliers, and organization loans.
• Who did what: which member added or changed a record and when, and the edit history of businesses, assets, crops and records (each field before and after).
• A Legacy Letter: if a Family Head writes one, its message, subject, the names and emails of its (up to two) recipients, and the date it's to be sent. The message and recipients are stored encrypted. Until it's sent, only the Family Head can see it.
• Notifications: when someone adds a record for an earlier month, the others in the family are told who added which records, and whether they've read it.
• Your plan: which plan a Family Head has and until when, when each family's trial ends, and how many records and items each family has added each month, to apply the plan's limits. We also keep payment amounts, provider references, payment and refund statuses, and unused plan credit to manage billing. Payments are handled by our payment providers, and we never see or keep your full card number.
• Support chat: messages anyone in your family writes to us with the chat button, and our answers, with the writer's name and when it was sent. Everyone in the family with access can read the family's chat.
• Messages you send us, for example by email.

What's recorded automatically

• Your IP address and browser details, which our hosting and network providers record in their logs when you open a page.
• Failed sign-in attempts: to stop password guessing we count failed attempts per email, IP address and device. These counts expire after 30 minutes.
• Cookies that keep you logged in and protect your account, described in Cookies.

We don't collect your location, contacts, bank logins or card details, and ManagEasily never connects to your bank. Amounts are only what your family types in.

3. Sign in with Google

If you choose to sign in with Google, Google tells us your name, your email address (and that Google has verified it), and an ID for your Google account, so we can find your ManagEasily login the next time. We ask only for this basic profile and email (the openid, email and profile permissions).

We never see your Google password and get no access to your Gmail, Google Drive, contacts or anything else in your Google account. We don't share what Google sends us with anyone, or use it for anything except signing you in.

ManagEasily's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove ManagEasily's access at any time from your Google Account's third-party connections; you can then still log in with your email and password if you've set one.

4. How we use it

Only to run ManagEasily for you:

• to log you in and keep you logged in;
• to send the emails the app needs: confirming your email, choosing a new password when you've forgotten it, invitations to join a family, payment receipts and payment-review notices, trial and plan-expiry reminders, and a Family Head's Legacy Letter with its reminders.
• to show your family's records, totals and reports to the members of your family;
• to protect accounts from password guessing, bots and misuse;
• to answer your questions and fix problems you report.

No one outside your family can see your data.

5. Who can see it

• Your family: a family's records are visible only to its members. The Family Head invites members by email and chooses their role: Admins can add and change records, Viewers can only look. A member whose access is revoked can no longer see the family.
• A Legacy Letter's recipients: on the date the Family Head chose, each recipient is emailed the letter and, unless they're already in the family, a link to join it as a Viewer (working for 90 days). The Family Head is reminded by email 8 days and 1 day before, and can postpone or cancel it until then.
• Support: our administrator can help you to fix an account specific issue when you ask.
• Service providers who host and protect ManagEasily, listed below.

No one else, including other families, can see your information.

6. Cookies

ManagEasily uses only cookies it needs to work. There are no advertising, analytics or tracking cookies.

• Session: keeps you logged in. It ends when you close your browser, or after 30 days without a visit if you tick Remember me. Logging out removes it.
• Device: a random ID for your browser (kept for 2 years) and a scrambled list of the logins used on it (kept for 1 year). They let a device you've signed in from before skip the limits on failed attempts, so no one can lock you out by guessing your password. They don't contain your email.
• Security: a token that stops other websites from sending forms as you.
• Time zone: your device's time zone (for example Asia/Karachi), kept for 1 year, so a login you make on it starts with the right time zone.

7. Services we use

These companies process information for us, only to provide ManagEasily:

• Render, which runs the app (hosting);
• Neon, which stores the database;
• Cloudflare, which delivers the site and protects it from attacks;
• Resend, which sends our emails, so it receives the address and the content of each email;
• Google, only if you choose Sign in with Google;
• Safepay, which handles payments in Pakistani Rupees and sends payment and refund notifications to us.

Their servers may be outside your country, for example in the United States or Europe.

8. Keeping and deleting your data

• We keep your family's information for as long as the family uses ManagEasily.
• A Legacy Letter stays until the Family Head deletes it (before it's sent) or the family is deleted. Once sent, it's kept as a record of what was sent.
• An invitation is deleted once it's accepted or cancelled; one that expired stays until the Family Head cancels it.
• Support chat messages are deleted automatically 30 days after they're sent.
• A Family Head can delete the family from the Family Members page. This permanently deletes the family and everything in it: its records, loans, businesses, assets, crops, Legacy Letter and memberships.
• To delete your login, email us from your account's email address and we'll do it within 30 days. Records you added to a family stay with that family, as they're part of its history.

9. Security

Every connection to ManagEasily is encrypted (HTTPS). Passwords are hashed, failed sign-ins are limited, sign-ups are protected against bots, and each family's data is kept apart from every other family's. Please use a strong password that you don't use elsewhere, and change your password or tell us straight away if you notice any suspicious activity.

10. Your choices

• Change your name, email and password at any time on your Profile.
• Leave a family from My Families, or ask your Family Head to revoke your access.
• Remove Sign in with Google from your Google Account, as described above.

11. Children

ManagEasily is meant for adults managing their family's money. Children under 13 shouldn't have their own login; a Family Head who adds a younger family member is responsible for doing so with a parent's permission. If you believe a child's information was added without that permission, delete it within one hour of adding it, or contact us.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how your information is used in an important way, we'll tell you in the app before it takes effect.

13. Contact us

Questions or requests about your privacy: [email protected].