Privacy policy
Effective November 2, 2026 · Last updated November 2, 2026
The short version
- We don’t sell your personal information, and we don’t share it for advertising. There are no third-party ads or tracking tools in the app or on this website.
- We never see or store your bank password.
- Your household sees your shared money. Purchases you mark private show to them only as “Private purchase” and the amount.
- You can get a copy of your data or delete your account at any time.
This policy explains how Perpetual Hive LLC handles personal information in the MAAT app (on phones and the web) and on this website (together, the “Service”). It’s part of our Terms of Service. If you don’t agree with it, please don’t use the Service.
1. Who we are
MAAT is made by Perpetual Hive LLC, a Wyoming limited liability company (“we”, “us”). For privacy questions or requests, email privacy@monthatatime.com.
The Service is meant for adults in the United States. Your information is stored and processed in the United States.
2. What we collect
Information you give us
- Account details: first and last name, username, email address and password. Your password is stored scrambled (hashed) by our sign-in provider, so nobody can read it, including us.
- Your agreement: that you confirmed you’re 18 or older and agreed to our Terms and this policy, and when.
- What you and your household add or import: people, accounts and balances, income, bills and other expenses, transactions, categories, budgets, goals, notes, comments and reactions, requests to check with each other before a purchase, and files you import from a bank or another budgeting app.
- Reports and requests: what you write in bug reports and feature requests, along with your username, the part of the app, your type of device and the app version. Feature requests and your username are visible to other users.
- Messages to us: anything you send by email.
Information from banks you link (optional)
- If you choose to link a bank, card or investment account, our service provider Plaid Inc. connects to it with your permission. We receive the institution’s name, each account’s name, type and last 4 digits, balances, posted transactions and, for investment accounts on the Pro plan, holdings.
- You sign in to your bank in Plaid’s window or on your bank’s own page. We never see or store your bank username or password.
- Plaid gives our server an access key for each linked bank. It stays on our server and never reaches your phone or browser.
- Plaid’s own handling of your information is described in the Plaid End User Privacy Policy. By linking an account, you agree to Plaid collecting and using your information as it describes.
Information collected automatically
- Sign-in records: each phone or browser you sign in from, when, the browser or device type, and the IP address, kept by our sign-in provider for security. You can see your current sign-ins in the app under Settings → Profile → Privacy and security.
- Approximate location at sign-up: once, when you create an account, your IP address is looked up to estimate your city and state. We keep the result in a notice email to the developer, not the IP address. We don’t collect precise location.
- Crash reports: if the app crashes, it automatically sends a report with what went wrong, the part of the app, your type of device and the app version.
- Anonymous usage counts: how many times a day each part of the app is opened. These counts don’t record who opened what.
- Service logs: our hosting and email providers keep short-lived technical logs (such as IP addresses and request times) to run and protect their services.
This website uses no cookies, analytics or tracking scripts. The app stores a copy of your data on your device so it works offline; we don’t use cookies or device identifiers for advertising.
3. How we use it
- To provide the Service: show your money, forecasts and reminders, keep your household in step across devices, connect banks you link, and send the alerts you turn on.
- To keep accounts and the Service secure, prevent fraud and abuse, and enforce our Terms.
- To fix problems and improve the Service, using reports and anonymous counts.
- To communicate with you about your account, such as sign-in codes, confirmations and important changes. We don’t send marketing email.
- To comply with the law and respond to lawful requests.
We don’t sell your personal information, share it for cross-context behavioral (targeted) advertising, or use it to make automated decisions that have legal or similarly significant effects on you.
4. Who can see it
- Your household: everyone in it sees the household’s accounts, income, expenses, transactions, budgets and goals. For purchases you mark private, others see only “Private purchase”, the amount, date, account, category and who paid, never the store, description, note or split.
- Nobody else using the app can see your household. Our server checks this on every request.
- Us: a small number of authorized people at Perpetual Hive LLC have administrator access, used only to run and secure the Service, fix problems, and meet legal obligations.
5. Who we share it with
We share personal information only with service providers that help us run the Service, under contracts that limit how they can use it, and only as much as each needs:
| Service provider | What it does |
|---|---|
| Supabase | Stores your data and handles sign-in (United States). |
| Plaid | Connects to banks, only if you link one. |
| Resend | Sends emails: sign-in codes, confirmations, and reports to the developer. |
| ipapi.co | Estimates city and state from the IP address once at sign-up. |
| Cloudflare | Hosts this website. |
| Google Play and the App Store | Deliver the app and, once paid plans open, handle payment. We never receive your card details. |
We may also disclose information: when required by law, court order or other legal process; to protect the rights, property or safety of our users, the public or us; with your direction or consent; or to a buyer or successor if the business is sold, merged or reorganized, in which case this policy continues to apply to your information.
Financial privacy notice (GLBA). To the extent the federal Gramm-Leach-Bliley Act applies to us: we collect the information described in section 2; we share it only with service providers and as permitted or required by law, as described above; we have no affiliates and don’t share it with other companies for their marketing. Because we don’t share in ways that require it, there is nothing you need to opt out of.
6. How we protect it
- Data is encrypted in transit (HTTPS) and at rest by our hosting provider.
- Access rules on our server check every request against your household. Bank access keys stay on the server.
- Deleting a single item in the app marks it deleted, so it can be recovered if needed and a stolen sign-in can’t wipe a household for good. Deleting your account is permanent.
- We follow a written security plan, review it with every change, and limit administrator access.
- The copy on your device isn’t separately encrypted by the app. Please use a screen lock. The app’s optional PIN deters casual snooping, not a determined person with your device.
No method of storing or sending information is completely secure, so we can’t guarantee absolute security. If a breach affects your personal information, we’ll notify you and the authorities as the law requires.
7. How long we keep it
- Account and household data: for as long as your account exists.
- Linked banks: links nobody in the household has opened the app for in 30 days are disconnected automatically, and their access keys are deleted. Their history stays in the app.
- When you delete your account: your sign-in, email, username and profile are deleted; your private purchases (and comments on them) are permanently deleted; and banks you linked yourself are disconnected. Shared household data stays for the others in your household, including your name as it appears there, comments you wrote on shared items, and the household’s activity history. Feature requests you posted stay, shown as “Former user”. If you were the only person in your household, the whole household and all its data are deleted.
- Backups and logs: copies in database backups and providers’ logs are deleted or overwritten on their normal schedules, within 30 days.
- We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.
8. Your choices
- See and correct it: everything you add is visible and editable in the app. Change your name, email or password in Settings → Profile.
- Get a copy: Settings → Profile → Data → Export everything.
- Delete it: Settings → Profile → Delete my account, or follow these steps without the app.
- Unlink a bank at any time in Settings → Bank info.
- Notifications can be turned off in the app or your device settings.
9. Your privacy rights
Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states, you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate information;
- delete your information;
- opt out of the sale or sharing of personal information, targeted advertising and profiling (we don’t do these);
- limit the use of sensitive information (we use it only to provide the Service); and
- not be treated differently for using these rights.
We offer these rights to all our users, wherever they live. To make a request, email privacy@monthatatime.com from the email on your account. We’ll confirm it’s you before acting and respond within 30 days. You may use an authorized agent with your signed permission; we may still ask you to confirm your identity. If we decline your request, you can appeal by replying to our answer with “Appeal”; we’ll respond within 45 days, and if you’re still not satisfied you can contact your state attorney general.
California: in the past 12 months we collected the categories of information in section 2 (identifiers, financial information, internet or device activity, approximate location, and your communications) for the purposes in section 3, and disclosed them only to the service providers in section 5. We haven’t sold or shared personal information, and we don’t knowingly sell or share information of anyone under 16. We don’t share personal information with third parties for their own direct marketing.
Do Not Track and Global Privacy Control: we don’t track you across other websites or apps. We honor Global Privacy Control signals as a request to opt out of sale and sharing, which we don’t do anyway.
10. Consumer health data
Some spending you track may reveal information about health, such as purchases at a pharmacy or in a “Health and medicine” category. Washington, Nevada and some other states protect this as consumer health data. We collect it only because you add or import it, use it only to provide the Service to you and your household, never sell it, and share it only with the service providers in section 5. You can see, delete or stop sharing it at any time, as described in sections 8 and 9.
11. Children
The Service is for adults 18 and older. We don’t knowingly collect personal information from children under 13. If you believe a child has given us information, email privacy@monthatatime.com and we’ll delete it.
12. Not financial advice
MAAT is a budgeting tool. Forecasts, suggestions and other content in the Service are general information based on the data available to it, not financial, legal, tax or investment advice. See our Terms of Service.
13. Changes to this policy
We’ll post any changes here and update the date at the top. If a change is material, we’ll tell you in the app or by email before it takes effect. Continuing to use the Service after a change means you accept the updated policy.
14. Contact
Perpetual Hive LLC (Wyoming) · privacy@monthatatime.com · Security issues: security@monthatatime.com