Privacy Policy

The short version

Noma is designed so we don't have your data. Your transactions, budgets, and savings stay on your device. We run no analytics tracking you and no advertising, and we have no accounts unless you set up sync with a partner to share a budget between two phones — in which case an encrypted copy of that shared budget, which we can't read, is stored on our server so it can sync, together with an anonymous account and a few technical details about each phone, described below.

If you uninstall Noma without exporting your data, your unpaired data is gone — we can't recover it, because we never had it.

What Noma stores

Noma stores the following on your device, using your browser or operating system's local storage:

• Transactions you enter (amount, currency, category, note, date)
• Budgets, savings goals, and accounts you create
• App preferences (base currency, theme, display options)

This data never leaves your device unless you explicitly export it (for example, by saving a CSV or backup file to somewhere you choose), or set up sync with a partner — which uploads the encrypted copy described above as soon as you create an invite, before your partner joins.

What sync stores on our server

Only if you set up sync with a partner, our server holds:

• An anonymous account: a random id, created when you create an invite or join one. No name, email, or phone number
• One encrypted copy of the shared budget per couple. Only your two phones can use its key, so we can't read it. A group you mark private stops syncing: what you add to it afterwards stays on your phone, while what had already synced stays in the shared copy
• For each paired phone: a random device id, its platform (iOS or Android), the app version and sync version it last reported, and when it was registered
• The phone's sign-in token and your account deletion code, kept only as hashes — we can't see the originals

What Noma does not collect

• No name, email, phone number, or password
• No bank login, banking connection, or financial institution data
• No location data
• No hardware device identifiers, advertising IDs, or fingerprinting — with sync, each phone gets a random id that means nothing outside Noma
• No usage analytics, crash reports, or telemetry
• No cookies used for tracking

Third-party services

Noma makes network requests to two public exchange rate providers to convert between currencies:

• Frankfurter — European Central Bank reference rates
• ExchangeRate-API — fallback rates

These requests ask only for the day's rates against the US dollar. None of your currencies, transactions, or identifiers are sent. Each provider may log your IP address as part of normal web server operation — see their privacy policies for details.

If you set up sync, the sync service and its encrypted nightly backups, which expire after 30 days, are hosted for us by Scaleway, a European cloud provider, in the Netherlands. Scaleway holds the same encrypted copy we do, and the keys stay on your two phones, so neither we nor Scaleway can read it. The service keeps no request logs. To stop abuse it holds the IP address of a request that creates an account, joins a couple, or files a deletion request in memory only, to count requests per address over a rolling hour. It is never written to disk and is dropped about an hour after the last such request.

The mobile app checks Expo's update service (u.expo.dev) for app updates when it starts. That request carries none of your budget data; Expo receives your IP address, the app's version and platform, and a random installation id its library generates.

Your data, your control

Because your data lives on your device, you fully control it:

• Export it any time from app settings
• Delete what is on the device by clearing app storage or uninstalling — a sync account is deleted separately, see below
• Move it to another device by importing an exported file

We cannot delete your local budget on request — because we never had a copy. You handle that deletion directly. If you paired with a partner, see deleting your account below.

Deleting your account

An account exists only if you set up sync with a partner — from the moment you create an invite or join one, even if your partner never joins. Delete it any time from Settings → Couple Sync → Sync → Delete account: your account id, your place in the couple and your deletion code are removed at once, and your phone's sign-in token stops working. No phone handy? Use the deletion code shown on that screen at getnoma.pro/delete; the account is deleted 7 days later unless you cancel in the app first. An account whose phone hasn't synced for about six months is deleted automatically, code or not — that also clears an account left behind by an invite you backed out of.

What deleting your account does not remove:

• The shared budget, while your partner still uses it. The encrypted copy stays on our server for them, including transactions you entered, and their phone keeps what it already synced. The server copy is deleted when the last member of the couple leaves or deletes their account
• Nightly encrypted backups, which expire after 30 days
• For a short while, a record of your phone (its random device id, platform and app version), and only while your partner's shared copy or an open invite still refers to it. It is deleted once nothing does — after your partner's next sync, or when the invite expires
• Your own budget, which stays on your device

Who is responsible, and your rights

Noma is built and operated by Dmitry Khorev, an independent developer based in Spain, who is the data controller for the sync service. The account, the device details and the encrypted copy are processed to provide the sync you asked for (GDPR Art. 6(1)(b)); the short-lived IP rate limit protects the service from abuse (legitimate interest, Art. 6(1)(f)). The data is held in the Netherlands: the account until you delete it or it goes unused for about six months, the encrypted copy until the last member of the couple leaves, and backups for 30 days.

You can ask for access to, correction or deletion of your data, object to its processing, and complain to your local data protection authority (in Spain, the AEPD). Because the account is anonymous we cannot look you up by name or email: the deletion code on the Sync screen is how you show an account is yours, so include it if you write to us.

Children

Noma is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect information from children, and Noma never asks for a name, an age, an email address or anything else that identifies a person.

Changes to this policy

If this policy changes, the updated date above will change and a notice will appear on the landing page. Material changes to how data is handled will be highlighted before taking effect.

Contact

Questions about privacy? Email me@dkhorev.pro.