Privacy Policy

1. Introduction

Welcome to Nanufy ("we", "us", or "our"). We respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using Nanufy you agree to the practices described below.

2. Data We Collect

Nanufy is a local-first app. All financial data you enter — transactions, wallets, categories, budgets — is stored exclusively on your device using an encrypted local database (SQLite via Drizzle ORM). We do not transmit your financial data to any external server.

When you create an account, the following information is stored on our secure servers so you can sign in across devices:

• Name and email address — used for account identification and transactional emails (email verification, password reset).
• Hashed password (bcrypt) — your raw password is never stored.
• Account creation date and email verification status.
• App usage preferences and settings — stored locally on your device via MMKV encrypted storage.
• Crash reports and anonymous performance metrics — only if you opt in via device-level settings (e.g. iOS Analytics & Improvements). We do not run our own analytics SDK.

Your financial data (transactions, wallets, categories) remains on your device and is never sent to our servers.

3. Social Sign-In Data

If you sign in with Google or Apple, we receive a cryptographic token from that provider that confirms your identity. We use this token to look up or create your account.

• Google: we receive your Google account email and display name. We store the Google user ID (a numeric string) to link your account — we never store your Google password or access token.
• Apple: we receive your Apple-issued email (which may be a relay address) and, on first sign-in only, your name. We store the Apple user ID to link your account — we never store your Apple password or identity token.

We do not request access to your contacts, calendar, photos, or any data beyond basic identity. You can revoke Nanufy's access to your Google or Apple account at any time via your device or browser account settings — doing so will require you to use email/password sign-in.

4. Account Deletion

You have the right to permanently delete your Nanufy account and all associated data at any time.

• In-app deletion: go to Profile → Danger Zone → Delete Account. Your account and all server-side data (name, email, auth credentials) will be queued for permanent deletion.
• All server-side data is permanently deleted within 30 days of the deletion request.
• Your local financial data (transactions, wallets, categories) is removed immediately when you uninstall the app — it is stored only on your device and is not recoverable after uninstall.

Apple App Store and Google Play Store both mandate that apps with accounts provide an in-app account deletion mechanism — Nanufy complies with both requirements.

5. How We Use Your Data

We use your information to provide and improve the Nanufy experience:

• To authenticate you and maintain your session across devices.
• To send transactional emails you initiate — email verification and password reset.
• To display your financial summaries, reports, and charts (processed locally on your device).
• To remember your preferences (currency, theme, notification settings).
• To send you local push notifications you have explicitly enabled.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data Storage & Security

All data is stored on your personal device. We use industry-standard encryption for sensitive values.

• Local database: encrypted SQLite via Expo SQLite.
• Key-value storage: encrypted MMKV.
• Secure credentials: stored in the device Keychain / Keystore via Expo SecureStore.

Because your data never leaves your device, there is no server-side breach risk for your financial information. If you lose your device or uninstall the app, your local data is permanently deleted.

7. Third-Party Services

Nanufy uses the following third-party services that may process limited technical data:

• Expo (EAS Build & Updates) — for app distribution and over-the-air updates. Expo may collect anonymous crash and device telemetry per their own privacy policy (expo.dev).
• Apple App Store / Google Play Store — for app distribution. Each platform's standard telemetry applies.
• Google Sign-In — if you choose to sign in with Google, Google's OAuth service processes your identity per Google's Privacy Policy (policies.google.com/privacy).
• Apple Sign-In — if you choose to sign in with Apple, Apple's authentication service processes your identity per Apple's Privacy Policy (apple.com/legal/privacy).

We do not embed advertising SDKs, third-party analytics platforms, or social-media trackers.

8. Notifications

Nanufy may request permission to send you local push notifications (e.g. daily reminders to log expenses). These notifications are generated entirely on-device — no data is sent to a remote server to produce them.

You can enable or disable notifications at any time in the app Settings or in your device's system settings.

9. Children's Privacy

Nanufy is not directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Your Rights

You have the following rights over your personal data:

• Access: view your account details in the Profile screen; view all financial data within the app.
• Correction: edit your name and email via the Profile screen at any time.
• Deletion: delete your account (and all server-side data) via Profile → Danger Zone. Uninstall the app to remove all local device data.
• Portability: your financial data is stored in an SQLite database on your device — you can back it up directly.

If you are in the EEA or UK you have additional rights under GDPR/UK GDPR, including the right to object to processing and the right to lodge a complaint with a supervisory authority. For any enquiries contact us at the address below.

11. Data Retention

Server-side account data (name, email, hashed password, provider IDs) is retained as long as your account is active.

• After an account deletion request, all server-side data is permanently purged within 30 days.
• Anonymised, aggregated usage statistics (if any) that cannot be linked back to an individual may be retained indefinitely for product improvement.
• Backup copies may persist in encrypted, access-controlled storage for up to 90 days before being overwritten by retention policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the app.

Continued use of Nanufy after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us: