Privacy policy
Your money is your business. This policy explains, in plain terms, exactly what data Mitten processes, why, and the controls that keep your financial records out of human hands.
Last updated July 22, 2026
The short version
Mitten reads your transactions to do the work you asked for, like categorizing spending or adding up a budget. That happens in code, not in front of people. Nobody at Mitten browses your spending.
Support sees a thin layer only: your email, an anonymous household ID, and whether your subscription is active. Our logs are built to never contain your transactions, amounts, or merchant names.
You can access, correct, or delete your data at any time, and delete your whole household from the app.
This summary is here to help you read the rest. It is not a contract. The full text below is what actually governs your use of Mitten.
Who we are
Mitten is a household-finance service that helps the members of a household track shared spending, budgets, and debt. In this policy, "Mitten," "we," and "us" refer to the operator of the Mitten service, who is the data controller for the personal data described here.
For anything about your data or this policy, contact us at support@mitten.money. We are the right first point of contact for access, correction, and deletion requests.
Payments are handled by Paddle.com Market Ltd, which acts as our merchant of record and is a separate data controller for the billing data it processes. See the section on billing below.
How we handle household financial data
Your financial records are the most sensitive thing you trust us with, so we are specific about how they are handled.
- Automated processing only.Transactions, budgets, and debt records are processed by Mitten's backend services solely to provide the features you use: categorization, monthly aggregation, statement import, payoff planning. Processing is performed by software; results are shown only to signed-in members of your household.
- No human review. Mitten personnel do not access household financial records in the ordinary course of business. Support and operations use a minimal data layer: your account email, a pseudonymous household identifier, and subscription status.
- No financial data in logs. Application logs, error reports, and analytics are engineered to exclude transaction descriptions, merchant names, amounts, and other personal financial details.
- AI features. Transaction text you submit for categorization or statement parsing is processed by our AI provider under contractual terms that forbid it from using these prompts or responses to train or improve its models or products. The provider logs them only briefly to detect abuse.
- Product analytics. If we measure feature usage in the app (screens opened, actions taken), events come from a fixed whitelist, carry no financial data or personal details, and are tied to a random identifier rather than your account. The marketing site uses cookieless analytics.
- Where we're going. We are working toward encrypting household financial data at rest, so it is unreadable outside an authenticated household session. Until then, data is protected by access controls, and the commitments above.
What we collect and why
We keep the set of data deliberately small. Here is everything, where it lives, and the legal basis for processing it under the GDPR.
- Account identity. Your email address and an authentication identifier, used to sign you in and tie you to your household. Legal basis: performance of our contract with you.
- Household financial records.Transactions, budgets, envelopes, debt accounts, and the categories and rules you create, used to run the product for your household. Legal basis: performance of our contract with you.
- AI processing. Transaction text and statement content you ask Mitten to categorize or parse. Legal basis: performance of our contract; our terms with the provider forbid it from using this content to train or improve its products.
- Billing (Paddle).Your subscription status and the billing details you give Paddle at checkout. Paddle is the merchant of record and the controller of your payment data. Mitten does not receive or store your card details. Legal basis: performance of our contract and Paddle's legal obligations.
- Transactional email. Your email address, used to send account and service messages such as trial and billing notices. Legal basis: performance of our contract.
- Analytics. Cookieless usage measurement on the marketing site, and whitelisted, non-financial product events tied to a random identifier in the app. Legal basis: our legitimate interest in understanding and improving the product.
How long we keep it
We keep your household's data for as long as your account is active so the product has a history to work with. If you delete your account, we remove your household's financial records from our active systems, and backups age out on a rolling schedule after that.
Billing records that Paddle is legally required to retain (for tax and accounting) are kept by Paddle for the period the law requires, independently of Mitten.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to certain processing, and to receive a copy in a portable format. You also have the right to lodge a complaint with your local data protection authority.
To exercise any of these, email support@mitten.money. We will respond within the time the law allows. You can also delete your household and its data directly from the app's account settings, which triggers our deletion path.
Changes to this policy
If we change how we handle your data, we will update this page and the "last updated" date above. For material changes we will also let you know by email or in the app before they take effect.