MultiMari Privacy Policy

Operated by Review International Ltd. Last updated 18 October 2026.

1. Introduction

Review International Ltd ("Review International", "we", "us", or "our") operates MultiMari, a personal finance application that helps users record, organise, and understand their financial information.

Review International Ltd is a company registered in England and Wales under company number 16987288, with its registered office at:
127A Alexandra Road
Poole
Dorset
BH14 9EW
United Kingdom

This Privacy Policy explains what personal data we collect, how we use it, who helps us operate MultiMari, how long we keep it, and the rights and choices available to you.

For the purposes of applicable data protection legislation, Review International Ltd is the Data Controller in relation to the personal data described in this Privacy Policy.

If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:
Email: support@multimari.com

This Privacy Policy should be read together with our Terms of Use and any other policies or notices published within MultiMari.

2. Who This Privacy Policy Applies To

This Privacy Policy applies to personal data processed by Review International in connection with:

• individuals who create or use a MultiMari account;
• individuals who use MultiMari's financial recording, budgeting, reporting, or planning features;
• individuals who use Ask MultiMari;
• individuals who use MultiMari's subscription services; and
• visitors who interact with MultiMari or its related services.

MultiMari is intended for individuals aged 18 years or over.

3. What Personal Data We Collect

3.1 Account Information

When you create and use a MultiMari account, we may collect:

• your email address;
• information about how you sign in, including Google Sign-In or email verification codes;
• the name you choose to provide; and
• information relating to your account and subscription.

3.2 Financial Information You Record

MultiMari allows you to record information about your finances.

Depending on how you use the app, this may include:

• accounts;
• balances;
• transactions;
• budgets;
• bills;
• savings;
• projects;
• investments;
• loans;
• financial goals; and
• people you add to your Circle.

This information is provided by you. MultiMari does not independently verify the accuracy of the financial information you record.

3.3 Settings and Preferences

We may collect settings and preferences necessary to provide MultiMari's features, including:

• currencies;
• the date on which your financial month starts;
• timezone;
• notification and email preferences; and
• other settings you choose within the app.

3.4 Ask MultiMari

When you use Ask MultiMari, we process:

• the questions you ask;
• information from your MultiMari records needed to understand and answer those questions;
• any answer you ask to have translated, and the language you choose; and
• any answer you report to us as incorrect or problematic, together with the relevant question.

Ask MultiMari uses this information to provide responses based on the financial information available within your account.

We do not keep your Ask MultiMari conversations on our servers. Your questions and answers are kept on your device for up to three months (the current calendar month and the two before it) so you can look back at them, and are deleted from your device when you clear the conversation or sign out. We keep a record of how many questions and translations you use each month, without their content, to apply your plan's monthly allowance. Only answers you report to us are kept, as described above.

3.5 Statement Imports

MultiMari may allow you to import bank statements as CSV or PDF files.

When you use this feature, the statement file is processed on your device. PDF statements are read by software that runs on your device; they are not sent to us or to any AI service. If a PDF has a password, the password is used on your device to open it and is not saved.

The statement file itself is not uploaded to our servers.

Only the transactions that you choose to keep are saved to MultiMari. Once saved, they are treated in the same way as transactions you entered manually.

MultiMari does not connect directly to your bank and does not request your bank login credentials.

3.6 Technical Information

We may process limited technical information necessary to operate, secure, and maintain MultiMari, including information associated with authentication, application operation, and security.

4. What We Do Not Collect or Do

MultiMari is designed to give you control over your financial information.

We do not:

• connect directly to your bank accounts;
• access your bank account through open banking;
• move, send, or receive money on your behalf;
• ask you for your bank login details;
• ask you for your card numbers;
• ask you for bank account numbers for the purpose of accessing your bank account;
• sell your personal data; or
• display advertising within MultiMari.

People you add to your Circle do not receive access to your MultiMari account or financial records.

5. How We Use Personal Data

We use personal data for the following purposes:

• Providing and operating MultiMari: Performance of a contract.
• Calculating balances and financial reports: Performance of a contract.
• Providing budgeting and financial organisation features: Performance of a contract.
• Providing Ask MultiMari: Performance of a contract.
• Sending sign-in codes: Performance of a contract.
• Sending welcome communications: Performance of a contract.
• Sending monthly financial check-ins: Performance of a contract (you can unsubscribe at any time).
• Sending weekly tips about using MultiMari: Legitimate Interests (you can unsubscribe at any time).
• Processing subscriptions: Performance of a contract.
• Maintaining account security: Legitimate Interests.
• Preventing misuse and protecting the Platform: Legitimate Interests.
• Maintaining and improving MultiMari: Legitimate Interests.
• Complying with legal obligations: Legal Obligation.
• Establishing, exercising, or defending legal claims: Legitimate Interests and Legal Obligation.

Our legitimate interests include maintaining the security, reliability, and proper operation of MultiMari, preventing misuse, and improving the service.

6. Monthly Check-In and Weekly Tip Emails

MultiMari may send a monthly financial check-in email.

The check-in may contain:

• your financial totals; and
• a short observation generated using information available within MultiMari.

The monthly check-in does not include:

• account names;
• bank account numbers; or
• transaction details.

You can stop the monthly check-in with the unsubscribe link in any check-in email.

MultiMari may also send a weekly tip about a MultiMari feature and how to use it. Tips never contain your financial information. We use whether you have used a feature (not your amounts or records) to avoid sending tips you don't need.

You can stop weekly tips with the unsubscribe link in any tip.

To start either email again after unsubscribing, contact support@multimari.com.

We may still send essential service communications, such as sign-in codes and important account notices.

7. Who Helps Us Run MultiMari

We use selected third-party service providers to provide and operate MultiMari.

7.1 Supabase

Supabase provides authentication and database infrastructure for MultiMari.

Your account information and financial records are stored using Supabase's services.

7.2 Anthropic

Anthropic provides the artificial intelligence technology used by Ask MultiMari and for the short observation included in the monthly check-in.

When you use these features, relevant information from your MultiMari records may be sent to Anthropic so that a response or observation can be generated.

Your MultiMari sign-in credentials are not provided to Anthropic for this purpose.

Where our applicable Anthropic service and contractual arrangements provide that API inputs and outputs are not used to train Anthropic's models, we use those services on that basis.

7.3 Resend

Resend provides email delivery services for MultiMari.

This includes delivering sign-in codes, welcome emails, monthly check-ins, and other necessary service communications.

7.4 Google Play

Google Play processes subscriptions purchased through the MultiMari Android application.

Payment card details and other payment information are handled by Google Play in accordance with Google's applicable terms and privacy practices.

Review International does not receive or store your full payment card details through MultiMari.

7.5 RevenueCat

RevenueCat helps us manage MultiMari subscriptions: it confirms with Google Play which plan you have and when it renews or ends.

RevenueCat receives a random MultiMari account identifier and your subscription and purchase details. It does not receive your financial records or your payment card details.

7.6 Sentry

Sentry (Functional Software, Inc., with data held in its EU region) receives a report when MultiMari crashes or hits an error, so that we can fix it.

A report contains the error and where in the app it happened, the screen, your phone model and operating system, and the app version. It does not contain your financial records, amounts, names, notes, anything you type, screenshots, or your email address.

7.7 Other Service Providers

We may use additional service providers where reasonably necessary to operate, secure, maintain, or improve MultiMari.

We require relevant service providers to maintain appropriate security measures and to process personal data in accordance with applicable data protection law and our contractual requirements.

8. Sharing Personal Data

We do not sell your personal data.

We may share personal data where necessary with:

• cloud hosting and infrastructure providers, including Supabase;
• authentication providers;
• artificial intelligence service providers, including Anthropic;
• email delivery providers, including Resend;
• subscription and payment providers, including Google Play and RevenueCat;
• professional advisers, where necessary;
• regulatory authorities, courts, law enforcement agencies, or other public authorities where required or permitted by law; and
• error reporting providers, including Sentry;
• service providers supporting the security, maintenance, development, or operation of MultiMari.

We do not provide your financial records to other MultiMari users.

9. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK to a country that is not subject to a UK adequacy decision, we will use an appropriate legal transfer mechanism and safeguards required by applicable data protection law.

These safeguards may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism recognised under UK data protection law.

Further information about international transfers and applicable safeguards is available on request.

10. Data Retention

We retain your personal data for as long as you maintain a MultiMari account, subject to the exceptions and retention requirements described below.

When you delete your account:

• your MultiMari data is deleted;
• your sign-in information is deleted; and
• the deleted information cannot be recovered through the app.

Database backups maintained by our database provider may continue to contain deleted information for a limited period. Such backups are overwritten within 7 days.

We may retain limited information for longer where necessary to comply with a legal obligation, resolve a dispute, prevent fraud, protect the security of MultiMari, or establish, exercise, or defend legal claims.

11. Your Rights

Under applicable data protection law, including the UK GDPR, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data where applicable;
• request restriction of processing in certain circumstances;
• object to processing based on our legitimate interests;
• request the transfer of your personal data to you or another organisation where the right to data portability applies; and
• withdraw consent where consent is the legal basis for processing.

You can manage much of your information directly within MultiMari.

You can:

• view your financial information;
• correct your records;
• export your information using Backup & Restore; and
• delete your account.

You can also exercise your rights by contacting:
support@multimari.com

We will normally respond to a valid data protection request within one month, although this period may be extended where permitted by applicable law.

You also have the right to complain to the Information Commissioner's Office (ICO) if you are dissatisfied with how we process your personal data.

12. Deleting Your Account

You can delete your MultiMari account from within the app:
More → Profile → Delete my account

Account deletion permanently removes your MultiMari account and associated data, subject to information that we are legally required or permitted to retain.

If you no longer have access to the app, you can request account deletion by emailing:
support@multimari.com

Where you make the request from the email address associated with your MultiMari account, we will normally delete your account within 30 days, subject to applicable legal requirements and reasonable verification of your identity.

13. Children's Privacy

MultiMari is intended for people aged 18 years or over.

Children may be referred to in financial records, such as when a user records money spent on or saved for a child. However, children should not create or maintain their own MultiMari accounts.

We do not knowingly provide MultiMari accounts to individuals under 18.

If we become aware that a person under 18 has created an account, we will take reasonable steps to delete the account and associated personal data, subject to applicable law.

14. Data Security

Review International implements appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration, or disclosure.

These measures include appropriate controls relating to:

• secure authentication;
• access controls;
• encryption of data in transit;
• secure database infrastructure;
• system monitoring;
• backups;
• protection against unauthorised access; and
• periodic review of security practices.

No internet service or electronic storage system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of your information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• MultiMari;
• the services we provide;
• the service providers we use;
• applicable law or regulatory requirements; or
• how we process personal data.

Where changes are material, we will provide reasonable notice before they take effect where required by applicable law.

The latest version of this Privacy Policy will be available through MultiMari and will include the date of its most recent revision.

16. Contact Us

If you have questions about this Privacy Policy, your personal data, or how Review International processes personal information, please contact us:

Review International Ltd

Registered Office:
127A Alexandra Road
Poole
Dorset
BH14 9EW
United Kingdom

Email: support@multimari.com

Company Registration Number: 16987288

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal data has been processed unlawfully.