Privacy Policy

Mana is operated by Mana Credit. We are the data controller for personal data collected through this platform. Questions about this policy can be directed to hello@manacredit.co.uk.

Profile data (local only by default). When you use Mana's quiz, goal calculator, or practice arena, we save your preferences, investing stage, monthly amount, and goal to your browser's localStorage. This data stays on your device and is not sent to our servers unless you create an account.

Account data. If you create a Mana account, we store your email address, profile settings, and learning progress in our database (hosted on Supabase, EU region). We use magic links for authentication and never store passwords.

Analytics data. We use PostHog to understand how people use Mana. PostHog collects pseudonymous event data (pages visited, features used, quiz step completions). Data is processed on PostHog's EU-region servers. No directly identifying information is collected unless you are signed in, in which case events may be associated with your account.

Email address. If you opt in to email updates, we store your email address and send you educational content related to halal investing. You can unsubscribe at any time via the link in any email.

We use your data to:

• Personalise your experience (show relevant ETFs, articles, next steps)
• Remember your investing stage across sessions
• Send educational emails if you have opted in
• Understand which features are useful and which aren't
• Improve the accuracy and relevance of AI-generated guidance

We do not use your data for automated decision-making that has legal or significant effects on you. We do not sell your data to third parties.

Legitimate interests: analytics and platform improvement, where your interests do not override ours.

Contract performance: storing account and profile data to deliver the service you've signed up for.

Consent: email marketing. You can withdraw consent at any time by unsubscribing.

We use the following third-party processors. Each operates under its own privacy policy and data processing agreement with us:

Mana uses minimal cookies. We do not use advertising cookies or cross-site tracking.

Essential cookies: required for authentication sessions (Supabase auth token). Cannot be disabled without breaking login functionality.

Analytics cookies: PostHog sets a pseudonymous identifier cookie to distinguish returning visitors. You can opt out via the "Decline" option if a cookie banner is shown.

Local profile data (localStorage) is retained in your browser until you clear your browser storage or use the reset function in your profile.

Account data is retained while your account is active. You can request deletion at any time by emailing us. We will delete your account data within 30 days of receiving a verified request.

Anonymised analytics data may be retained indefinitely as it cannot identify you.

You have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: ask us to delete your personal data
• Restriction: ask us to limit processing in certain circumstances
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: for any processing based on consent (e.g. email marketing)

To exercise any of these rights, email hello@manacredit.co.uk. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We may update this policy as the platform evolves. The date at the top of this page reflects the most recent update. We will notify account holders of material changes by email.