Privacy

How Munimly handles account details, saved financial reports and deletion requests during beta.

Updated 22 October 2026

Your account and saved reports

Munimly uses Google sign-in through Supabase. Your Google account supplies account information such as your name and email. The app also asks for your full name and mobile number. Munimly does not ask for or store your Google password.

Reports can contain borrower details, financial statements, facilities, loan schedules and identifiers you enter. Only enter client data you are authorised to use.

How the service uses this information

Your inputs are used to save and reopen reports, calculate projections and generate Excel and PDF exports. Calculations use programmed financial formulas. Client financial data is not used to train models or sold for advertising.

Authorised administration tools can inspect saved report information and operational events to support the service. We do not send your report to a lender for you.

Services involved

• Vercel: hosts the public website.
• Railway: hosts the customer app, calculation/export API and administration app.
• Supabase: provides account authentication and the database for profiles and saved reports.
• Google: provides Google sign-in. The customer app also requests its Manrope stylesheet and fonts from Google Fonts.

Processing locations and provider backup retention settings have not yet been verified for this notice. Contact hello@munimly.in before entering data that requires a particular processing location or deletion guarantee.

Browser storage and diagnostics

The app uses browser local storage for the sign-in session and local report drafts. Signing out clears the app’s local draft. Downloaded Excel and PDF files remain on your device.

When workflow diagnostics are enabled, they record predefined actions such as calculation/export results, validation categories and approximate timing. These events use account/report identifiers; they are not anonymous. Their event fields exclude typed financial values, borrower names, document text and raw error messages. Hosting providers may also keep operational logs.

If you accept analytics, the website and app use PostHog US Cloud to measure page visits, Create CMA clicks, sign-in, report creation, calculations and exports. We send a pseudonymous account identifier for signed-in users to measure repeat usage across devices where analytics was accepted. Events exclude names, emails, borrower details, financial figures, report contents and authentication tokens. Session recordings and automatic interaction capture are disabled. PostHog receives network request information, including your IP address. The project is configured to discard client IP addresses from stored events. Hosting providers may also receive request data.

Analytics is optional. Accept or decline using the preference notice, and change your choice through Analytics settings on either site. The choice is shared across munimly.in subdomains in this browser for up to 180 days. Accepting on one device does not grant consent on another. Withdrawing stops future collection and clears analytics browser storage; it does not remove events previously received by PostHog. You can request deletion of analytics associated with your account through hello@munimly.in. PostHog’s free plan currently specifies one year of analytics retention. Your account, reports and downloads work without analytics.

Report retention and deletion

You can delete a saved report from the app dashboard. A successful deletion removes its saved database row. Copies already downloaded and browser storage on other devices are separate.

Automatic deletion after 60 days without activity on a report is planned. It is not yet verified as active, so do not rely on that deadline. There is no verified promise here that deletion immediately removes all provider backups or logs.

Account closure and questions about access, correction or deletion can be requested at hello@munimly.in. Account closure is a support request, not an instant self-service action. Keep your own copy of reports you need.

Access protection

Account ownership is enforced with database row-level security. Administration reports require authorised membership and multi-factor authentication. Public connections use HTTPS. These measures do not guarantee that a service can never suffer a security incident.

Questions and updates

For a privacy question or complaint, email hello@munimly.in with “Privacy” in the subject. A fixed support response time is not currently offered during beta.

This notice describes the product’s current handling of data. Legal identity details and the remaining infrastructure facts are pending review. This page does not claim certification or a completed legal compliance review.

Meaningful updates will be dated here. See the changelog for selected published product changes.