Privacy Policy
The short version
Mickle is a personal finance tracker. You give it your email and whatever you choose to log — amounts, categories, notes. It uses that to show your own numbers back to you, and for nothing else. It is never sold. It is never shared with third parties for their own use. You can take a full copy of it whenever you want, and you can delete all of it, permanently, whenever you want. The rest of this document is the detail behind that summary.
Who operates Mickle
Mickle is built and operated by Ishan Savio Kerketta, trading as Diveriontech (diveriontech.com). This is not, as of this writing, a registered company — it's operated by an individual. That's stated here plainly because a privacy policy that implied a corporate structure that doesn't exist would be exactly the kind of technically-true-but-misleading statement this document is trying to avoid making anywhere else in it.
Contact: support@diveriontech.com
What Mickle collects
- Your email address, to create and secure your account.
- The financial information you choose to enter — transaction amounts, categories and items, notes, budgets, currency, and any recurring rules you set up. All of it is typed in by you. Mickle does not read your SMS messages, notifications, bank accounts, or any other source on your phone — everything in the app is there because you put it there.
- Basic account preferences — display name, base currency, and the display settings you choose in Settings (date format, whether App Lock is on, and so on).
Mickle does not collect location data, contacts, photos, or anything else your phone's permissions aren't explicitly asked for — and as of this writing, the app requests no device permissions beyond what App Lock needs to check for a fingerprint, Face ID, or device passcode, which happens entirely on your phone and is never sent anywhere.
Why it's collected
To run the app for you, full stop. Your transactions are used to compute your own monthly totals, budget progress, and insights — the numbers you see are your numbers, calculated from what you entered, for you to look at. Your email exists only to identify your account and to send you account-related email — confirming sign-up, resetting your password when you ask for a reset, and confirming a change of email address. There is no newsletter, no product announcement, and no promotional email of any kind; Mickle only emails you in response to something you did.
Who can see it
This is the part most privacy policies gloss over, and it's worth being exact about instead.
Mickle is built on Supabase, a hosted database service. Two separate things protect your data there:
- From other users: row-level security rules, enforced by the database itself, mean another Mickle account can never read, edit, or delete your data — not through the app, and not even if someone tried to query the database directly with a modified version of the app. This has been independently tested against the live system, not just written in code and assumed to work.
- From the operator: as the person who administers the database, Ishan has the technical ability to access account data — this is true of essentially every app built this way, including most of the finance and budgeting apps you've probably used before. That access is not used to view, browse, or analyze anyone's financial details, and exists only as a consequence of running the service (for example, to investigate a bug someone reports, or to fulfill a legal request Mickle is required to comply with). It is never used to build a profile of you, and your data is never looked at out of curiosity.
Data at rest in Mickle's database is encrypted (AES-256, provided by Supabase's infrastructure) and every connection between the app and the database is encrypted in transit (TLS/HTTPS). This protects your data from anyone intercepting it over the network or accessing the underlying storage without authorization — it does not, and no honest privacy policy should claim it does, prevent the operator described above from being able to access the data as part of operating the service.
What Mickle never does
- Never sells your data. Not in aggregate, not anonymized, not ever.
- Never shares it with third parties for their marketing, advertising, or any other purpose of their own.
- No advertising. There are no ad networks, ad SDKs, or ad-targeting integrations anywhere in the app.
- No analytics or tracking SDKs. Mickle does not send your usage or your data to any third-party analytics service.
- No data brokers. Nobody outside of running Mickle itself ever receives your information.
The outside services Mickle relies on are Supabase (to store your data), a transactional email provider (Resend, for the account emails described above), and — only if you choose it — Google, to sign you in. Each of them processes data solely to provide that specific service to Mickle, not for their own purposes, and none receives more than what's needed to do that job.
A note on the Google option specifically, since it's the one that involves another company knowing something about you. If you tap Continue with Google, Google confirms your identity to Mickle and passes along your email address and basic profile information such as your name. Google will also know that you hold a Mickle account — that is unavoidable with a "sign in with Google" button in any app, and it's stated here rather than left for you to work out. If you would rather Google not know, sign up with an email address and a password instead; the app works identically either way. Mickle never sees your Google password, and never has access to anything else in your Google account — no Gmail, no Drive, no contacts.
Your control over your data
- Export. Settings → Export your data gives you a full copy of everything Mickle holds about you — as a complete backup (JSON) or as a spreadsheet-readable list of your transactions (CSV) — at any time, with no waiting period.
- Delete. Settings → Delete account permanently removes your account and everything tied to it — every transaction, category, budget, and recurring rule — in one action. This is enforced at the database level (not just hidden from view), takes effect immediately, and cannot be undone. Deleting your account is also how you exercise a right to erasure under most privacy laws, including India's Digital Personal Data Protection Act.
- Nothing is kept "just in case." Once your account is deleted, the data is gone from Mickle's database — there is no separate retained copy kept for analytics, backups beyond routine infrastructure backups that age out on their own schedule, or any other purpose.
Children
Mickle is not directed at, and is not knowingly used to collect data from, children. If you believe a child's account or data has ended up in Mickle, contact the address below and it will be removed.
Changes to this policy
If this policy changes in a way that matters — what's collected, who it's shared with, how long it's kept — that change will be reflected here with an updated date, and, for a material change, you'll be told about it inside the app rather than left to notice a footer date changing.
Grievance officer
India's Digital Personal Data Protection Act requires every service holding your personal data to name a specific person you can complain to — not a support queue, a person. For Mickle that is:
Ishan Savio Kerketta
Grievance Officer
grievance@diveriontech.com
Write to that address about anything to do with your personal data: a request you made and didn't get, data you think is wrong, a deletion that didn't work, or a decision you disagree with. You will get an acknowledgement within 72 hours and an answer within 7 working days. If the answer is no, it will say which provision of the Act it relies on rather than simply declining.
Mickle is currently run by one person, so that address reaches the same individual who built the app and administers the database. That is stated plainly rather than dressed up as a department, because a fictional support tier would be exactly the kind of thing the rest of this document avoids.
If you are not satisfied with the outcome, you have the right to complain to the Data Protection Board of India directly. Exhausting the route above first is expected, but it is not a precondition of your rights.
Contact
Anything else — questions about the app, a bug, or general concerns about how Mickle handles your information: support@diveriontech.com