Privacy Policy

Nobuyo is a personal finance app that helps you track purchases you chose not to make, turning restraint into visible savings. References to "we", "us", or "Nobuyo" in this policy refer to the service and its operators.

For privacy-related enquiries, contact us at nobuyo@barelycoder.com.

We collect only what is necessary to provide the service:

• Email addressUsed to identify your account and deliver sign-in verification codes. We do not collect passwords.
• Financial habit dataThe amounts, descriptions, and dates of items you chose not to purchase — the core records you create inside the app.
• CategoriesOptional labels you create to organise your records (e.g. Coffee, Clothing, Electronics).
• Savings goalsGoal names, target amounts, deadlines, and progress you configure in the app.
• PreferencesUI settings such as language, currency, and colour theme.

We do not collect payment information, location data, device identifiers, or any data beyond what you explicitly enter.

Your data is used solely to operate Nobuyo:

• Authenticate you via email verification codes
• Display your records, goals, and progress within the app
• Calculate and present your savings statistics
• Remember your preferences across sessions

We do not use your data for advertising, profiling, or any purpose beyond providing the service you signed up for.

All data is stored on Amazon Web Services (AWS) infrastructure located in the EU (Stockholm) region. Data is encrypted in transit (TLS) and at rest.

Authentication is handled via short-lived verification codes sent by email. We do not store passwords. Session tokens are stored in encrypted, HTTP-only cookies.

We do not sell, rent, or share your personal data with third parties for their own purposes. Your data may be processed by the following sub-processors solely to operate the service:

• Amazon Web ServicesCloud infrastructure, database, and email delivery

Your data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently removed within 30 days.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your data in a portable format
• Withdraw consent at any time by deleting your account

To exercise any of these rights, email nobuyo@barelycoder.com. We will respond within 30 days.

Nobuyo uses a single session cookie (rn_session) to keep you signed in. This cookie is HTTP-only, encrypted, and expires after 30 days of inactivity. We do not use tracking cookies or third-party analytics cookies.

Nobuyo is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Nobuyo after changes constitutes acceptance of the revised policy.