Privacy Policy

Last updated: May 16, 2026

ManiKA Money ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

• Account data: Name, email address, hashed password.
• Subscription data: Billing information (processed by Paddle — we never store card details).
• API keys: Alpaca API keys are stored encrypted on our servers and used solely to fetch your portfolio data.
• Usage data: Pages visited, features used — for improving the service.
• Push notification tokens: Browser push subscription endpoint and keys, used only to send you portfolio news alerts.

2. How We Use Your Data

• To provide and improve the ManiKA Money service.
• To send transactional emails (email verification, password reset).
• To send portfolio news notifications (if you opt in).
• To process subscription payments via Paddle.
• We do not sell your personal data to third parties.
• We do not use your data for advertising.

3. Data Storage and Security

Your data is stored on servers located in Germany (Hetzner Cloud). We use encryption for sensitive fields (API keys). Passwords are hashed using bcrypt and never stored in plain text. We use HTTPS for all data transmission.

4. Third-Party Services

• Paddle: Payment processing. Subject to Paddle's Privacy Policy.
• Alpaca: Brokerage data (only if you connect your account).
• yfinance / FRED API: Market data — no personal data is shared.

5. Cookies

We use localStorage (not cookies) to store your session token and preferences. No third-party tracking cookies are used.

6. Your Rights (GDPR)

If you are located in the European Union, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at burakhakanakin@manikamoney.com.

7. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Anonymized usage data may be retained for analytics.

8. Children's Privacy

Our service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email. Continued use of the service constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions: burakhakanakin@manikamoney.com