Privacy Policy

1. Introduction

MahFrend (“we,” “us,” or “our”) is a personal lending management app that helps you track loans, payments, and borrowers among friends and family. This Privacy Policy explains what information we collect, how we use it, and how we keep it safe.

2. Information We Collect

Account Information

When you sign up, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name and email from your Google account.

Lending Data

You provide information about your loans, borrowers, payment schedules, and payment records. This includes borrower names, contact details (email, phone), loan amounts, interest rates, payment dates, and notes you choose to add.

Usage Data

We collect basic analytics through Vercel Analytics and Speed Insights to understand how the app is used and improve performance. This includes page views, device type, and general usage patterns — no personal financial data is included.

3. How We Use Your Information

We use your information to:

• Provide and maintain the MahFrend service
• Display your loans, payment schedules, borrower profiles, and dashboard
• Calculate penalties and track payment balances
• Authenticate your identity when you log in
• Improve the app based on aggregated, anonymized usage data

We do not sell, rent, or share your personal or financial data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored securely in Supabase, a hosted database platform with encryption at rest and in transit. Authentication is handled through Supabase Auth, which uses industry-standard security practices including secure session tokens and OAuth 2.0 for Google sign-in.

While we take reasonable measures to protect your data, no system is 100% secure. We encourage you to use a strong, unique password for your account.

5. Your Data, Your Control

All the lending data you enter — loans, borrowers, payments — belongs to you. You can:

• View, edit, or delete your loans and payment records at any time
• Update or remove borrower information
• Request a full deletion of your account and all associated data by contacting us

6. Third-Party Services

MahFrend uses the following third-party services:

• Supabase — database hosting and authentication
• Vercel — app hosting, analytics, and performance monitoring
• Google OAuth — optional sign-in method

Each of these services has its own privacy policy. We only share the minimum data required for these services to function.

7. Cookies and Local Storage

We use cookies solely for authentication — to keep you logged in across sessions. We do not use cookies for advertising or tracking across other websites.

8. Children's Privacy

MahFrend is not intended for use by anyone under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we'll update the “Last updated” date at the top of this page. Your continued use of MahFrend after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or want to request deletion of your data, please reach out to us through the app or contact us directly.