1. A server comprising: a processor; and a memory storing instructions that, when executed by the processor, cause the processor to perform operations comprising: providing, to a mobile device associated with a user, a user interface for customizing a personal information database associated with the user, wherein the personal information database comprises a plurality of privacy layers, receiving, from the mobile device, via the user interface, a merchant name of a merchant and a first tag associated with the merchant name of the merchant, wherein the first tag indicates a first trust level associated with the merchant, receiving, from the mobile device, a transaction record generated as a result of a transaction involving at least one of a product or a service, and further receiving, from the mobile device, a second tag selected by the user, wherein the second tag is associated with the transaction, and wherein the transaction record comprises information about the at least one of the product or the service, determining, based at least in part on the information about the at least one of the product or the service and the second tag associated with the transaction, a privacy layer of the plurality of privacy layers of the personal information database for storing the transaction record, wherein the privacy layer is associated with a permission level, storing the transaction record in the privacy layer of the personal information database associated with the user, determining whether the first trust level associated with the merchant and indicated by the first tag associated with the merchant name of the merchant matches the permission level of the privacy layer determined based at least in part on the second tag associated with the transaction, and in response to determining that the first trust level associated with the merchant and indicated by the first tag associated with the merchant name of the merchant matches the permission level of the privacy layer determined based at least in part on the second tag associated with the transaction, allowing the merchant access to at least a portion of the transaction record, while denying other merchants associated with a second trust level access to the at least a portion of the transaction record.