Privacy

Effective date: October 19, 2026

Manna is a household budgeting service from The Forge, a brand operated by Michael McClanahan in Wilson, North Carolina, USA. This page describes the information the Manna application actually collects, why it is collected, and who else receives it.

What we collect

When you create an account we ask for your name, your spouse's name, your email, and a password. We store your name and email on the account. The password is stored only as a hash. We also store the time you confirmed that you are 18 or older and that you agree to this policy and the Terms.

Your spouse's name is not saved on the account. It is included in the signup notice sent to the operator, described under Sharing.

If you open Manna from a campaign link, we store the campaign fields that were on that link (source, medium, campaign, content, and term) on your account, each trimmed to 200 characters. Visits to the home page, the about page, and the signup page also record an anonymous hit: the page path, those same campaign fields, and the referring page, each trimmed so the row stays short. Those hits do not store your IP address or your browser's user agent. Obvious automated crawlers are skipped.

After you set up a household, Manna stores what you enter so the budget, covenants, and Flow calendar can work:

• Household name, whether you are married or engaged, and an optional wedding date.
• Monthly income, emergency-fund balance and target, and the reserve balance.
• The couple's giving percentage, investing percentage, and emergency-fund month targets.
• Budget lines (category, give / save / spend / invest, planned and actual amounts).
• Debts (name, balance, minimum payment, interest rate, order, payoff, and whether a debt is a mortgage) and sinking funds.
• Paychecks (name, amount, how often, and the first date), bills, and other monthly spending categories.
• Covenant progress, including any notes, and which spouse confirmed that the financial picture is complete.
• Which Frosty counsel topics have already been offered, so the same note is not raised twice.

A spouse invite stores the invited email address and a one-time link token until it is used. When that person joins, we store their name, email, a hashed password, and the time they confirmed they are 18 or older and agree to this policy and the Terms, on their own user record, tied to the same household.

We store the time of your last login. We do not set cookies. After signup or login the browser keeps a signed login token in local storage and sends it with requests. That token expires after 30 days. Campaign values from the first visit are also kept in local storage so signup can attach them to the account. The covenants page may cache text in session storage for that browser tab.

Ask Frosty sends your message, the recent messages still on that page, and a summary of the household's finances to generate a reply. Manna does not save the chat transcript. The page holds it in memory until you leave.

If paid plans are enabled, Manna stores a Stripe customer id and a billing status for the household (for example trialing, active, past due, canceled, or comped). Card numbers are entered on Stripe's pages, not on Manna. We also store Stripe event ids so a repeated webhook is not applied twice.

Why

We use this information to create your account, run the household budget and covenants, let a spouse join, remember where a signup came from, tell the operator that someone requested access, bill the household when paid plans are on, and answer questions you ask Frosty. Anonymous page hits are used to see which public pages and campaigns are being opened.

How it is shared

We do not sell your personal information. Household members can see the household's budget and covenant data. Outside the household, information goes only to the processors the application is built to use:

• Railway hosts the application and the PostgreSQL database that stores the account and household records.
• Twilio may send the operator a text when someone signs up. The text includes the name, spouse name, and email from the form, and the campaign source and campaign name when those were stored.
• Resend may email the operator the same signup notice: name, spouse name, and email. That mail goes to the operator, not to a list.
• Anthropic (Claude) receives the Frosty request: the household financial summary, your message, and the recent messages from that page.
• Stripe, if paid plans are enabled, processes the subscription. Checkout and the customer portal run on Stripe. Manna sends the household id as a client reference so the payment can be matched to the household.

Signup notices are skipped for email domains the operator lists as test domains. If Twilio or Resend is not configured, the notice is not sent, and the account is still created.

Retention and deletion

We keep account and household records while the account exists. There is no delete button in the app. Email michaelamcclanahan@gmail.com and ask, and we will delete the user accounts and the household data we store for that household, including budget lines, debts, bills, income, covenants, invitations, and the related records described above. Stripe may keep billing records it is required to keep. Anonymous landing hits are not tied to an account. Texts and emails already sent may remain in those message logs.

Security

Passwords are stored as hashes, not as the password you typed. Login tokens are signed and checked on each request. Stripe webhooks are accepted only when the signature matches the signing secret. Account and household records live in the PostgreSQL database hosted by Railway. No method of storage is perfect, and you should use a password you do not reuse.

Children

Manna is for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has signed up, email us and we will delete that account.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Governing law

This policy is governed by the laws of the State of North Carolina, USA.

Contact

The Forge, a brand operated by Michael McClanahan, Wilson, North Carolina, USA. Email michaelamcclanahan@gmail.com.