Privacy Policy
What Nummo collects, why, who processes it, and how to delete it. No bank login, a read-only inbox, and no selling of your data, ever.
Last updated 29 October 2026. Nummo (operator details to be added before launch) ("we") runs Nummo. Questions: hello@getnummo.com.
The short version
- We never ask for your bank login or card details.
- If you connect your inbox, our access is read-only. We look for receipts, bills and renewals; we never send, change or delete your email.
- We don't sell your data, show ads, or use tracking or analytics SDKs in the app.
- You can disconnect your inbox at any time and ask us to delete everything.
What we collect and why
| Data | Why |
|---|---|
| Account: name, email, and your Apple or Google sign-in identifier | To sign you in and keep your data yours |
| Your plan: take-home pay, payday, currency, savings goal, budgets | To work out what you can spend |
| Spends, bills, subscriptions and goals you add or approve | To show your budget, Activity and Progress |
| From a connected inbox (read-only): receipts, bills and renewal emails, and the short extracts we use as evidence for each spend or subscription | To find bills and subscriptions so you don't type them |
| Bank texts (Android, only if you turn it on): messages from banks about money in or out | To log spends automatically. Texts that aren't from a bank never leave your phone |
| Receipt photos you take | To read the amount and items. We don't keep the photo after reading it |
| Voice entry | Turned into text by your phone's own speech recognition. We receive the words, never the audio |
| Questions you ask the Advisor and its answers (kept 30 days) | To answer, and to show your recent questions |
| Purchases (through Apple or Google, via RevenueCat) | To unlock Pro |
| Shared spaces: who you invite, and what you choose to share | So people in a space see what you share with it, and nothing else |
Who processes data for us
We use a small number of service providers, under contracts that limit them to providing the service:
- Supabase (database) and Fly.io (servers), in the United States.
- One (withone.ai): the secure, read-only connection to Gmail or Outlook.
- Anthropic: reads receipts, emails and typed or spoken spends to turn them into entries, and powers the Advisor. Anthropic does not train its models on this data.
- TypeSafe: classifies which messages are receipts, bills or bank texts.
- RevenueCat, Apple and Google: subscriptions and sign-in.
- Resend: sign-in codes and invite emails.
Google user data
Nummo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to find your bills, receipts and subscriptions and show them to you; we don't use it for ads, don't sell it, and people don't read it except with your permission, for security, or where the law requires.
How long we keep it
As long as your account is open. Advisor answers are kept 30 days. When you delete your account we delete your data within 30 days, apart from what the law requires us to keep (for example, records of purchases).
Your choices and rights
- Edit or remove anything you or your inbox added, in the app.
- Disconnect your inbox or bank texts at any time in Settings.
- Ask for a copy of your data, or for it to be deleted: delete your account.
- Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU and UK GDPR) you may have further rights, including to correct your data or complain to a regulator. Write to us and we'll help.
Children
Nummo is for adults managing their own money. It isn't meant for anyone under 18.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.