Skip to content
Mizan

Privacy

Updated 11 October 2026

Mizan keeps what it needs to work out your household's spending, and nothing more. This page lists what it keeps, where, and who sees it.

What Mizan keeps

  • Your name, email, and password. Supabase stores the password as a hash that nobody can turn back into the password.
  • If you sign in with Google, Google gives Mizan your name and email, and Mizan keeps those two only. Your account then has no Mizan password.
  • Your household's data: categories, entries and purchases, the shopping list, the people you buy for, exchange rates, bills, income, and funds.
  • A receipt photo from the app: it stays in private storage for 12 months, then Mizan deletes it; the lines read from it stay. A receipt photo sent to the bot stays on Telegram, and Mizan keeps its file ID only. In a linked family group, the bot reads each photo sent with no caption, or with a caption that names a receipt or an amount, to see whether it is a receipt; it keeps nothing from a photo that is not one.
  • If you link Telegram: your chat ID, and the group's title if you link a family group. Mizan never sees your phone number.
  • If you link Telegram: which bot messages you turned on, and the hour you picked for each.
  • A bot message it could not read: Mizan keeps the text on the review page until you log it or set it aside. From a voice note it keeps the text only; the audio stays on Telegram.

Where it lives

  • The database runs on Supabase in London.
  • The app runs on Netlify in Ohio, USA. Your requests pass through it on their way to the database.
  • Every Friday an encrypted backup goes to a private GitHub repository, and GitHub deletes each backup after 90 days.

Who sees what

  • Google Gemini gets the text of your message to the bot or to Ask Mizan, with the names it needs to read it: your categories, your bills and expected income, the things you bought before, and the people you buy for. It reads your receipt photos too. Mizan uses the free plan, and Google may use that text and those photos to improve its models, so keep private details out of your entries and photos. Entries typed on the app's keypad go to no one.
  • Groq gets the same text and names when Gemini is busy, to read the message. It is also the first to hear your voice notes, from the bot or the app's microphone, to turn them into text. Groq does not train its models on this data.
  • Gladia hears a voice note when Groq cannot, to turn it into text, and Mizan deletes each note there as soon as it has the text. When Gladia is down too, Gemini hears the note.
  • Ask Mizan: the AI reads your question only to understand it. The answer comes from your household's numbers in Mizan's own code, so your entries never go to the AI to answer a question.
  • Exchange rates: each morning Mizan fetches world rates from a public source (currency-api on jsDelivr), and sends it nothing about you.
  • App errors: when something breaks, Mizan sends the error and where in the app it happened to Sentry, so we can fix it. It sends no name, email, words you typed, or amounts.
  • Telegram carries your chat with the bot. In a linked family group, everyone in the group sees the entries and numbers posted there.
  • Your household: every member sees all of the household's entries and numbers, except what its author marks private: the others, the admin too, see only its amount and who logged it. Private spending you send to the bot or Ask Mizan still goes through Gemini like any message.

What Mizan does not do

  • No ads, no tracking, no analytics, and nobody buys your data.
  • It sets three kinds of cookie only: one keeps you signed in, one remembers your language, one remembers the theme.

What stays on your device

  • Ask Mizan: your last 100 chat messages stay in this browser, for you alone, and "Clear the chat" removes them.
  • A basket you have not saved yet, and your choice between the keypad and the keyboard on the add screen.
  • That you closed the install card on home, so it stays closed.

What you control

  • Send /mute to the bot to stop the morning and evening messages.
  • Unlink Telegram in Settings, and Mizan drops your chat ID.
  • Leave the household from the members page. Your entries stay with the household.
  • Delete your account in Settings > Delete account. Mizan deletes your account, and your household too if you are its only member. In a shared household your entries stay, without your name. A deleted household's receipt photos go within a day, and backups that hold your data within 90 days.
  • A question about your data? Get in touch.
Back to the home page