Your money, your data, your control.

Mitten never asks for your online banking username or password, and never connects to your bank account directly. You upload a statement (PDF or CSV) when you choose to, and that's the only information Mitten ever sees.

That file is one you export yourself, for the accounts you choose, for the months you choose. Nothing arrives that you did not send.

One person told us they nearly reported a real purchase as fraud because the charge showed up under a name they didn't recognize. That's exactly the problem Penny solves: she reads each line of your statement and turns cryptic entries into something readable, checking with you first whenever she's not sure, instead of guessing silently.

That text is processed by our AI provider under contractual terms that forbid it from using these prompts or responses to train or improve its models. The provider logs them only briefly, to detect abuse.

Nothing reaches your ledger until a member of the household confirms it, and a correction teaches her how your household sorts things.

Traffic between your browser and Mitten travels over an encrypted connection, and the databases and file storage behind it encrypt what they hold on disk. Household records are readable only by signed-in members of that household, enforced on the server for every request.

We are also working toward encrypting household financial records so they are unreadable outside an authenticated household session. That work is not finished, and the privacy policy says so in the same words.

Application logs, error reports, and analytics are built to exclude transaction descriptions, merchant names, and amounts. Mitten personnel do not read household financial records in the ordinary course of business. You can delete your uploaded statements and your account at any time; deleting your account takes those records out of the active systems, with backups ageing out on a rolling schedule afterwards.

This page is the plain language version. For the full legal terms, see our privacy policy and terms of service.

The policy sets out every category of data, why it is processed, the legal basis under the GDPR, how long it is kept, and how to get access to it, correct it, or have it deleted.