Privacy Policy

Sorrel is a personal budgeting app operated by MW Cyber Architects LLC. This policy explains what we collect, where it lives, who can see it, and what happens when you leave.

Sorrel is currently in beta testing. This policy describes what we do today, not what we might do later.

What we collect

Account information

• Your email address
• Your first and last name, and a preferred name if you give one
• Your time zone, detected from your browser

Financial information you enter

• Accounts you set up, including their names, types and balances
• Transactions you record, including amounts, dates, descriptions and categories
• Budgets, savings goals, recurring schedules and investment holdings
• Any notes or labels you add

Sorrel does not connect to your bank. Everything financial in Sorrel is information you typed in yourself. We have no access to your bank accounts, cards or credentials, and Sorrel never asks for them.

Technical information

• Sign-in times and session records
• Error logs when something goes wrong, which may include the page you were on and what failed

We don't use advertising trackers, analytics pixels, or third-party cookies. The only cookies Sorrel sets are the ones that keep you signed in and support the sign-in process. Your theme and a few display preferences are stored in your browser's local storage, on your device only.

Where your information is stored

Your data is held in a PostgreSQL database operated by Supabase, hosted in Amazon Web Services' US West (Oregon) region. It is encrypted in transit and at rest.

The app itself is served by Vercel. Emails from Sorrel — confirmations and password resets — are sent through Resend.

These three providers process data on our behalf. We don't share your information with anyone else, and we don't sell it. Not now, and this policy will be updated before that ever changes.

Who can see your information

Other users cannot see your data. Sorrel enforces this at the database level: every table is restricted so that one account's queries can only ever return that account's rows.

We can see your data. We want to be straightforward about this, because many apps are not. As the operator, we have administrative access to the database and can read what's in it. In practice we look at individual accounts only when:

• You ask us to, usually because something is wrong
• We're investigating an error that appears to affect a specific account
• We're legally required to

We don't browse user data out of curiosity. During the beta we may look at how the app is being used in aggregate — how many accounts exist, how often features are used — to decide what to fix.

Backups

The database is backed up automatically once a day, and backups are kept for seven days. Backups are held by Supabase in the same region as the live database.

This means that if something goes badly wrong, up to 24 hours of your data could be lost. Sorrel is beta software, and we tell you this plainly rather than burying it.

Deleted data may persist in a backup until that backup expires, which is at most seven days after deletion.

Deleting your account

You can delete your account at any time from Settings. Deletion is immediate and permanent.

What is deleted: every transaction, account, category and category group, budget, savings goal and goal contribution, recurring schedule, investment holding, notification and setting associated with you — along with your profile and your login credentials. All of it, straight away.

What is not deleted:

• Security audit records. Supabase keeps an authentication log recording events such as sign-ins and password changes. Depending on the event, an entry may contain your account's internal identifier, your email address and the IP address the request came from. It does not contain your financial data, your name, or anything you entered into Sorrel. We retain it because it is how account security incidents get investigated. Entries are kept for seven days, then removed automatically.
• Backup copies, until the backup they're in expires — at most seven days.
• Error logs, which may reference your account identifier, for a limited period.

We mention this because a policy claiming everything is erased when it isn't would be a false statement, and the whole point of this document is that it's accurate.

Security

• Every table is protected by row-level security, so one account cannot read or write another account's data
• Passwords are stored as cryptographic hashes and are never readable, including by us
• All traffic uses HTTPS
• Database access requires authentication, and administrative access is limited to the operator

No system is perfectly secure, and Sorrel is beta software built by one person. If you'd rather not put real financial information into it, use approximate numbers. We'd rather tell you that than have you assume more than we can promise.

Your choices

• See your data — it's all visible in the app
• Correct it — edit or delete anything, any time
• Take it with you — email us and we'll send you an export
• Delete everything — Settings, as above

Children

Sorrel is not for anyone under 18. We don't knowingly collect information from children. If you believe a child has created an account, email us and we'll remove it.

Changes

If this policy changes in a way that affects how your information is handled, we'll email you before it takes effect. The date at the top shows when it was last revised.

Contact

hello@mysorrel.com