Privacy Policy

Manor (“Manor,” “we,” “us”) is a voice-first expense journal for Morocco, offered as an Android app and website. It is built and operated by Rida Lamhadri, an independent developer in Morocco. This policy explains the data handled on this website and in the Manor app, and the choices available to you.

Questions or requests: me@ridalamhadri.com.

Data collected on this website

The Android test form collects the first name and Gmail address you provide, plus the consent-notice version and registration time. We use this data to operate the test and related launch communications. The Gmail address is normalized to prevent duplicate registrations.

The registration and deletion forms use Cloudflare Turnstile. We do not store the Turnstile token or IP address with requests. Cloudflare Web Analytics measures aggregate, cookieless website visits and performance. We do not use Google Analytics or advertising cookies.

Data in the Manor app

Google account and Manor profile

To use the app, you choose Continue with Google. Google confirms your identity and gives Manor your name, verified email address, and provider identifier. Manor then creates a profile linked to that account. You can edit the name shown in Manor, but not the verified address supplied by Google.

Better Auth runs inside Convex and manages the account, Google provider link, and sign-in sessions. Manor stores internal profile and session identifiers, associated dates, and the data needed to authenticate you and assign each record to the correct account. Manor requests only standard Google identity information: profile, name, and email. It does not request offline access or access to Gmail, Drive, Contacts, or other Google products.

Expense entries: amount, category, date, note, and the original transcript of what you said or typed.
Budgets and fixed expenses that you enter.
Voice recordings you choose to make when capturing an expense.
Account-specific local data: pending captures, files, cache, onboarding progress, and scheduled reminders.

The app contains no advertising, connects to no bank account, and includes no mobile product analytics or session-replay tools. We never sell this or any other personal information.

How voice and text are understood

When you record or type an expense, Manor securely sends the recording or text to Google Gemini. Gemini returns the structured amount, category, date, note, and transcript, which Manor stores in Convex. Gemini processing is separate from Google sign-in.

Why we use this data

To sign you in and maintain the security of your session.
To operate your journal, budget, and account synchronization.
To turn your voice or text into an expense.
To run the Android test and prevent abuse of public forms.
To measure aggregate website traffic and performance.

Service providers we use

Convex : database, file storage, server functions, and Better Auth hosting. Convex stores the profile, account and session data, expenses, budgets, fixed expenses, transcripts, voice files, and public requests.
Google : Google OAuth confirms your identity; the Gemini API processes voice and typed captures. These services apply their own terms and privacy policies.
Cloudflare : website hosting, Turnstile form protection, and aggregate cookieless website analytics.

We share only the data these providers need to operate Manor. We do not share data for advertising and never sell personal information. We may disclose data if required by law or to protect the rights and safety of the service and its users.

Security

Data is sent over encrypted HTTPS connections. Sign-in secrets remain on the server, and local session material uses the device’s secure storage. No method is completely secure; we nevertheless take reasonable steps to protect your information.

Retention

We keep account, session, and app data while your Manor account exists or until it is deleted. Test registrations remain during the test and launch program or until you ask us to remove them. We target completion of a verified external deletion request within seven calendar days; after completion, its email is removed and only minimal non-personal completion status and dates remain.

Google, Convex, and Cloudflare may retain some information under their own terms, security backups, and legal obligations. We do not promise to delete information those providers must retain independently of Manor.

Delete your account and data

Full instructions and the public request form are on our Data deletion page.

In Account, choose Delete account and all data. After confirmation and, when required, signing in again with the same Google account, Manor deletes your product data, files, profile, provider link, sessions, and account-specific local data.
Without the app, submit the public form with the exact Google-account address. Rida Lamhadri emails that address and requires a reply from the same address before deletion. The receipt never reveals whether an account exists.

If you later return with the same Google account, Manor creates a new empty account. Deleted expenses, budgets, files, and other data do not reappear.

Children

Manor is intended only for adults aged 18 or older. If you believe a child has provided information, contact me@ridalamhadri.com.

Changes to this policy

We may update this policy as Manor evolves. When we do, we will change the effective date at the top of this page.