Privacy Policy

1. Data We Collect

We collect the following categories of data:

1.1 Account Information

• Email address — used for account creation, authentication, and communication.
• Display name (optional) — provided at your discretion for personalization.
• Authentication identifiers — when signing in via Google or Apple, we receive a unique identifier and, if provided, your name and email from the OAuth provider.

1.2 Financial Data

• Account balances, transactions, assets, and liabilities — all financial data is entered manually by you. We do not connect to any bank, brokerage, or exchange APIs. We do not request your online banking or brokerage credentials.
• Financial goals — goals you create within the App.

1.3 Usage and Device Data

• Analytics events — with your opt-in consent, we collect usage analytics linked to your account ID (e.g., screen views, feature usage) through Firebase Analytics to improve the App experience. You can turn this off at any time in Settings → Privacy.
• Device information — device model, operating system version, and app version for diagnostics and compatibility.
• Push notification tokens — if you enable push notifications, we store a device token to deliver reminders and updates.
• Error reports — the App and backend send error reports to a self-hosted, Sentry-compatible error tracker (GlitchTip). Error reports are scrubbed of personal and financial data before storage.

1.4 Purchase Data

When you make in-app purchases (subscriptions or AI credits), transaction identifiers and receipt data are processed for purchase validation. We do not store your payment card information — all payment processing is handled by Apple (App Store) or Google (Google Play).

1.5 Website Attribution Cookie

The nummira.com website sets one first-party cookie, nm_attr (90 days), that stores the campaign parameters (UTM tags or a referral code) your visit arrived with. It contains no personal data and is used only to attribute app installs to marketing channels. Website analytics (Google Tag Manager) loads only after you explicitly consent via the cookie banner.

2. How We Use Your Data

• Provide the service: Store and synchronize your financial records across sessions and devices.
• Authentication: Verify your identity and protect your account.
• AI Features: Process your financial data through third-party AI providers to generate valuations, insights, digests and debt payoff plans (see Section 4).
• Purchase validation: Verify in-app purchases and manage subscription status.
• Communication: Send account-related emails (verification, password reset) and, if enabled, push notifications.
• Improvement: Analyze opt-in usage analytics linked to your account ID to improve the App.

3. Data Storage and Security

Your data is cached locally on your device for fast, responsive access, and synchronized with our backend servers over an encrypted connection whenever you are signed in and online.

• Sensitive credentials (access tokens) are stored using platform-native secure storage (iOS Keychain / Android Keystore via expo-secure-store).
• Data in transit is encrypted using TLS/HTTPS.
• Server-side data is stored in a PostgreSQL database with access controls.
• The App supports biometric authentication (Face ID / Touch ID) as an additional security layer.

4. AI Features and Third-Party Providers

Nummira uses third-party AI providers for features such as financial insights, asset valuation, digests, and debt planning. AI features run only after you give explicit consent in the App, and you can withdraw it at any time in Settings → Privacy → AI processing. Requests pass through our backend and are routed along a fallback chain: if one provider is unavailable, the next one answers.

What is sent: only the context needed for the request you started — portfolio figures (balances, currencies, cash flow), the attributes and notes of the asset being valued, and the text of your questions. Your name, e-mail address and postal address are never sent. For valuations that need current market prices, the provider may run a web search based on the asset description.

We use each provider through its paid business API. None of them uses this data to train its models. Current providers and how each one handles the data:

• Google Gemini (primary) — not used to improve Google products; prompts and responses are logged for a limited period solely to detect and prevent policy violations. Requests with Google Search grounding are stored for 30 days to produce grounded results and for debugging. Gemini API terms
• OpenAI (fallback, including web search for valuations) — not used for training; abuse-monitoring logs are kept for up to 30 days, and we instruct the API not to store responses. OpenAI API data controls
• Anthropic Claude (fallback) — not used for training; inputs and outputs are deleted within 30 days, except content flagged by automated safety systems, which may be kept for up to 2 years and reviewed for safety. Anthropic data retention

Human review: providers do not routinely read API traffic. Review can happen only when content is flagged for a possible violation of the provider’s usage policy, or when required by law. The set of providers may change; this section always lists the current one, and the in-app consent refers here.

AI-generated content is produced by these third-party services, and we do not control or guarantee its accuracy. All information in the App is informational only and provided without warranty — see the “Accuracy of Information” and “Limitation of Liability” sections of our Terms of Use.

5. Third-Party Services

In addition to AI providers, the App and our servers integrate with:

• Firebase Analytics (Google) — for opt-in usage analytics linked to your account ID (you can turn it off in Settings → Privacy) and diagnostics.
• Firebase Cloud Messaging (Google) — for push notifications.
• Apple Sign In / Google Sign In — for OAuth authentication.
• App Store / Google Play — for in-app purchase processing.
• GlitchTip (self-hosted, Sentry-compatible) — for error reports, scrubbed of personal and financial data.
• Resend — for delivering transactional e-mail (verification codes, password resets, account notices). Resend processes the recipient address, the subject line and delivery events (sent, delivered, bounced).
• Cloudflare — CDN, DNS and TLS termination for nummira.com and api.nummira.com. Cloudflare processes IP addresses and request metadata for security (attack and bot protection) and performance.
• Market data sources — CoinGecko (crypto prices), Frankfurter/ECB and currency-api (fiat exchange rates). Only currency codes and tickers are sent — never personal data.

Each third-party service operates under its own privacy policy. We do not sell your personal data to any third party.

6. Data Sharing

We do not sell, trade, or rent your personal data. We may share your data only in the following circumstances:

• With your consent: When you explicitly authorize sharing.
• Service providers: With third-party services that assist in operating the App (as described in Sections 4 and 5).
• Legal requirements: When required by law, regulation, or legal process.
• Safety: To protect the rights, property, or safety of Nummira Inc., our users, or the public.

7. Your Rights and Data Deletion

You have the following rights regarding your personal data:

• Access: You can view your data at any time within the App.
• Correction: You can update your profile and financial data within the App.
• Deletion: You can delete your account and all associated data directly from within the App (Settings → Profile → Delete Account). Upon account deletion, all your personal data, financial records, and AI request history will be permanently removed from our servers (see Section 10 for the limited anonymized records we keep). Local data stored on your device will also be cleared.
• Data portability: You can export your assets (CSV/JSON) from within the App at any time; Premium adds a full export of all your data, including transactions, as JSON.

You may also contact us at [email protected] to exercise any of these rights or to request information about your data.

8. Analytics and Tracking

In the App, we use Firebase Analytics to collect usage analytics linked to your account ID. Analytics are opt-in, and you can turn them off at any time in Settings → Privacy. We do not use advertising identifiers (IDFA) or track you across other apps and websites. We do not participate in advertising networks. On the website, analytics loads only after explicit consent (see Section 1.5); the nm_attr attribution cookie is a functional first-party cookie.

9. Children's Privacy

The App is not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

10. Data Retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, your data will be permanently removed from our servers. We may retain purchase records as required by law (e.g., tax and accounting obligations) and, for fraud prevention (abuse of welcome credits and free AI valuations), a hashed form of your e-mail address and device identifiers without an expiry date. When your account is deleted, e-mail delivery logs are anonymized: the recipient address is removed and only the delivery status is kept. Store transaction identifiers (Apple / Google) and the internal account identifier of granted bonus credits are kept indefinitely in an anti-abuse ledger that cannot be linked back to a name or e-mail address. Usage analytics collected by Firebase Analytics are subject to Google’s retention settings and are not deleted by us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Your continued use of the App after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at [email protected].