The short version:

• We collect what you give us to track expenses and split them with your groups, and the little we need to run the app (sign-in details, crash reports, security logs).
• We don't sell your data, show ads, or use your data to train AI models.
• The AI Assistant is optional. It only runs after you agree to it, sends your expense data to Anthropic (Claude) in the United States to answer you, and keeps your conversations for 90 days.
• When you delete your account we erase your personal data. Expenses you shared in groups stay for the other members, with your name and photo removed.
• You can see and correct most of your data in the app, delete it, and ask us for a copy. Write to us any time.

Numora is operated by Hemendra Khatik in India ("Numora", "we", "us"). We decide how and why your personal data is used, which makes us the "data controller" (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for the Numora mobile app, the WhatsApp and Telegram assistants, and getnumora.com (together, the "Services").

For any privacy question, request or complaint, contact our Grievance Officer and privacy contact, Hemendra Khatik, at [email protected].

When you sign in with Google or Apple, we receive your name, email address (Apple may give us a private relay address instead) and profile picture. We also store your time zone, your device platform (iOS or Android), your preferred currency, your invite code and who invited you.

The expenses you add (amount, currency, category, title, notes, items, date, payment method), photos or files you attach to an expense, budgets, custom categories, recurring expenses, the groups you create or join, group members, how expenses are split, balances and settlements.

When you split expenses, Numora shows your group's members, their names and photos, and their shares to everyone in the group. Please only add people who expect to share expenses with you.

If you use it: your questions, the answers, any rating or reason you give, conversations you choose to share with us, a record of when you agreed to (or withdrew from) the assistant and which version of its notice you saw, and a daily count of questions asked. See section 4.

If you link them: your WhatsApp phone number, or your Telegram chat ID, name and username; the messages you send to the Numora assistant there; and the recent back-and-forth needed to understand them.

• A push-notification token and your device's name, so we can send notifications you've turned on.
• Crash reports (device model, operating system, app version and what the app was doing when it crashed), through Firebase Crashlytics.
• An app-integrity check (Firebase App Check), which uses Apple's App Attest or Google Play Integrity on your device to confirm requests come from the genuine app.
• Server logs our hosting provider keeps for security and troubleshooting, including IP addresses. We use the country your IP address is in only to decide whether the AI Assistant is available to you; we don't store it.

If you send feedback in the app, we store your name, email address and message. If you apply through our careers page, we store the link you submit.

We don't collect your precise location, your contacts, bank log-ins or card numbers, and we don't connect to your bank. The receipt scanner reads receipts on your device; the photo isn't uploaded unless you attach it to an expense. Our website doesn't use cookies, analytics or advertising trackers.

We use your information only for the purposes below. Where the law asks for a legal basis (for example in the EU, UK, Switzerland and Brazil), it's shown in brackets.

• To provide Numora: sign-in, storing and syncing your expenses, budgets and statistics, splitting with groups, settling up, recurring expenses, notifications you've turned on, and the WhatsApp and Telegram assistants once you link them. [Performance of our contract with you]
• To run the AI Assistant: answering your questions with your expense data, keeping your conversation history, and applying the daily question limit. [Your explicit consent, given in the app before first use, and performance of our contract]
• To improve answers from conversations you share: only the ones you choose to share, read by the Numora team. [Your consent]
• To understand how the AI Assistant performs: once the assistant is available to everyone, anonymous weekly totals across all users, such as how many questions were answered, how quickly, and how many answers were rated helpful. These hold no user IDs and no text, and can't be linked back to you. [Our legitimate interest in a working, improving service]
• To keep the Services secure and working: crash reports, app-integrity checks, abuse prevention, server logs, and reviewing finished WhatsApp and Telegram conversations to fix messages the assistants misread. [Legitimate interests; legal obligation where records must be kept]
• To answer you: replying to feedback, support and privacy requests. [Legitimate interests; legal obligation for rights requests]
• To comply with the law: responding to lawful requests and keeping records the law requires. [Legal obligation]

We don't use your data for advertising, we don't sell or rent it, and we don't use it to train AI models. If we ever want to use your data for a new purpose that needs your consent, we'll ask first, and only for data collected after you agree.

The AI Assistant answers questions about your spending and budgets. It's optional and only runs after you read what it does and agree in the app. You must be 18 or older to use it.

• Who answers: Claude, an AI model made by Anthropic, PBC, a company in the United States, which may process the data in the United States or other countries. Anthropic processes it on our behalf under its commercial terms and data processing addendum, doesn't train its models on it, and keeps it for up to 30 days (longer only if it's flagged for a safety review under Anthropic's usage policies).
• What's sent with each question: your question and the earlier messages in the conversation; your expenses (amounts, categories, titles and dates), including your share of group expenses and titles other members wrote; your budgets; your recurring payments (name, amount and schedule); your category and group names; your currency and time zone; and which screen you opened the assistant from. We don't add your account name, email address, phone number or internal IDs, but anything you or your group members typed, such as titles or group names, is sent as written.
• Sensitive details: expense titles can reveal sensitive information, such as health (a pharmacy, a clinic) or religion (a place of worship). The assistant uses it only to answer you, on the basis of your explicit consent.
• Answers are AI-generated: they can be wrong, and they are general budgeting information, not financial, investment, tax or legal advice. The assistant doesn't make decisions about you.
• Your history: conversations are kept for 90 days so you can return to them, then deleted automatically. You can delete one, or all, at any time.
• Ratings: you can rate an answer, and add a comment. The rating and comment are stored with that answer (and deleted with it) and the rating is counted in the anonymous totals.
• Sharing a conversation: after rating an answer as unhelpful you can choose to share that conversation to help us improve. It's off unless you tick it, every time. A shared copy (your questions and the answers up to that point, with email addresses, phone numbers, UPI IDs, card and Aadhaar numbers and other long account-like numbers removed; expense titles and group names stay) is kept for 12 months and read only by the Numora team. Sharing the same answer again replaces the earlier copy. You can stop sharing at any time, which deletes every shared copy.
• Turning it off: "Turn off the assistant" in your conversation history withdraws your consent and deletes all your conversations and shared copies.
• Where it's available: the assistant isn't offered where Anthropic doesn't provide its service (including mainland China, Hong Kong, Macau, Russia, Belarus, Iran, North Korea, Cuba, Syria, Venezuela, Myanmar and Afghanistan), and is currently also unavailable in Vietnam, Egypt and Turkey. We decide this from the country your connection comes from. From those countries you can still open your conversation history to delete it, stop sharing or turn the assistant off.

When you message Numora on WhatsApp or Telegram, an AI model reads your message to turn it into an expense for you to confirm. To do this we send your message, the recent conversation, your display name, your default currency, time zone and today's date, your categories, your group names, currencies and members' names, your existing recurring expenses (name, amount and schedule) and any expense waiting for your confirmation, to OpenRouter, Inc. (United States), which passes the request to a Google Gemini model. Our requests tell OpenRouter to use only providers that don't store or train on the data. Always check the expense before you confirm it. Your messages also pass through WhatsApp (Meta) or Telegram, whose own privacy policies apply to their apps.

We share personal data only as described here. The service providers below process it on our behalf, under contracts that limit them to providing their service to us.

• Google (Firebase): sign-in, database, file storage, crash reports and app-integrity checks (United States and other locations).
• Apple and Google: signing in with your Apple or Google account, and the app-integrity check (App Attest on iPhone, Play Integrity on Android).
• Vercel: hosts our servers and keeps short-term server logs (United States and other locations).
• Anthropic: AI Assistant answers (United States). See section 4.
• OpenRouter and Google (Gemini): reading WhatsApp and Telegram messages (United States). See section 4.
• Meta (WhatsApp) and Telegram: delivering messages between you and the Numora assistant when you link them.
• Expo, Apple and Google push services: delivering notifications, including the notification text.

Your groups: what you add to a group (expenses, splits, settlements, your name and photo) is visible to its members, including people who later leave the group. Invite links include the group's name, so share them only with people you mean to invite.

Legal and safety: we may disclose information if the law requires it, or to protect the rights, safety or property of our users, the public or Numora.

Business changes: if Numora is reorganised, merged or sold, your data may transfer to the new owner, who must keep this policy's protections or tell you first.

Numora is run from India, and our service providers process data in the United States and other countries. This means your data is transferred to, and stored in, countries other than your own, which may have different data protection laws.

Where the law requires a safeguard for these transfers (for example from the EU, UK, Switzerland or Brazil), we rely on the safeguards in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or the EU-U.S. Data Privacy Framework where a provider is certified. You can ask us for details at [email protected].

The main transfers, for the purposes and periods in sections 4 and 8: account, expense and group data to Google and Vercel (United States and other locations) whenever you use the app; AI Assistant data to Anthropic (United States) each time you ask a question; WhatsApp and Telegram messages to OpenRouter and Google (United States) each time you send one; notification text to Expo (United States) and Apple or Google whenever we send you a notification. You can avoid the AI transfers by not using those features, and you can withdraw from the AI Assistant at any time.

We protect your data with encryption in transit and at rest, access limited to people who need it, sign-in verification on every request to our servers, app-integrity checks on the AI Assistant, and database security rules that let you read only your own data and the groups you belong to. Photos attached to expenses are stored behind long, unguessable links: anyone who has a link can open that photo, so don't share them. No system is perfectly secure, but if a breach affects your personal data we'll tell you and the relevant authorities as the law requires.

• Account, profile, personal expenses, budgets, categories and personal recurring expenses: while your account exists; erased when you delete it.
• Group expenses and settlements: as long as the group's records exist for the other members. If you delete your account, your name and photo are removed from them (see section 9).
• Expense attachments: as long as the expense exists. Attachments on your personal expenses are erased when you delete your account.
• AI Assistant conversations: 90 days, or until you delete them.
• Conversations you share for review: 12 months, or until you stop sharing.
• AI Assistant consent records: until you delete your account. Daily question counts: 90 days.
• Anonymous AI Assistant statistics: kept indefinitely; they aren't personal data.
• WhatsApp and Telegram: finished conversations 90 days; unconfirmed expenses and conversation state up to 2 days; every message you send to the assistants (with your number, or your Telegram chat ID, name and username) 7 days, to avoid processing it twice and to retry failures.
• Feedback: 2 years. Job applications: the link you submit, 12 months (it isn't linked to your name, so we can't find it to delete sooner).
• Push-notification tokens: until you sign out or delete your account. A token that stops working (for example after you uninstall the app) is switched off and deleted with your account.
• Crash reports: 90 days (Firebase Crashlytics).
• Server logs: kept by our hosting provider for a short time (days) for security and troubleshooting. The record that an account was deleted: 1 year, as India's Digital Personal Data Protection Rules require; it holds no name or email.

Automatic deletion runs on a schedule, so data can remain for a short time (usually a few days) after its period ends.

You can delete your account in the app under Settings → Help & Support → Delete account, or by emailing [email protected]. Before you delete, the current app shows any money you still owe or are owed in your groups.

What we erase: your profile (name, email, photo), personal expenses, statistics, budgets, categories, personal recurring expenses, attachments on personal expenses, AI Assistant conversations, shared conversations and consent records, WhatsApp and Telegram links, conversations and queued messages, push tokens, feedback and invites, and your sign-in account. Recurring expenses you set up in groups are stopped, and your name is removed from them.

What stays, without your identity: expenses, splits and settlements you were part of in groups. They are also the other members' records, and deleting them would change their balances and history. Your name and photo are removed from them, and you're shown as "Deleted user". Text that you or others typed into those shared records, such as expense titles, stays as written.

What we keep for legal reasons: a record that the account was deleted and when (no name or email), for 1 year.

If a deletion is interrupted, tapping Delete account again finishes it.

Depending on where you live, you have some or all of these rights:

• Access: ask us for a copy of your personal data; we'll send it in a portable, machine-readable format (JSON).
• Correction: fix data that's wrong or incomplete (most of it you can edit in the app).
• Deletion: delete specific data, or your whole account (section 9).
• Withdraw consent: for the AI Assistant or shared conversations, at any time, as easily as you gave it. This doesn't affect what was done before.
• Object or restrict: object to processing based on our legitimate interests, or ask us to limit it.
• Nominate: in India, nominate someone to exercise your rights if you die or become incapacitated.
• Complain: to us first, and to your data protection authority (see section 11).

To use any of these rights, email [email protected] from the email address on your account (or tell us how to verify it's you). We'll reply within one month, or sooner where the law requires, and we won't treat you differently for using your rights. An authorised agent can make a request for you with your written permission.

We process your data under the Digital Personal Data Protection Act, 2023 and its Rules. Our Grievance Officer (section 1) will respond to grievances within the time the Rules set. If you aren't satisfied, you can complain to the Data Protection Board of India.

The legal bases for each use are listed in section 3. You can complain to the data protection authority where you live or work, or where you think a breach happened (in the UK, the Information Commissioner's Office; in Switzerland, the FDPIC). The AI Assistant tells you that you are interacting with an AI system.

We don't sell personal information or share it for cross-context behavioural advertising, and we haven't in the past 12 months. We don't use sensitive personal information to infer characteristics about you. Residents of California and other states with privacy laws can use the rights in section 10, and can appeal a decision by replying to it. The anonymous statistics in section 3 are de-identified: we keep them that way, don't try to re-identify anyone, and require the same of anyone we share them with.

We don't ask for health information. If an expense title you write reveals something about your health (for example, a pharmacy purchase), we use it only to provide the features you use, as described above. We don't sell it or use it for advertising, and you can delete it at any time.

You have the rights in Article 18 of the LGPD, including to confirm processing, access, correct, anonymise, port and delete your data, and to know who we share it with. You can also complain to the ANPD.

Your data is processed outside your province and Canada, as described in section 6. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

You can complain to the OAIC (Australia) or the Privacy Commissioner (New Zealand) if we don't resolve your complaint.

Section 6 sets out who receives your data abroad, in which country, when and how, for what purpose and for how long, and how to refuse (by not using, or withdrawing from, the feature concerned). The United States, where most of our providers are, doesn't have a single national privacy law equivalent to yours; our providers protect your data under their contracts with us.

Numora isn't meant for children under 13, and we don't knowingly collect their data. If you're under 18 (or under the age of digital consent where you live), you may use Numora only with your parent or guardian's permission. The AI Assistant is only for people aged 18 or over. If you believe a child has given us data without permission, contact us and we'll delete it.

We'll update this policy when our practices change, and change the date at the top. If a change is significant, we'll let you know before it takes effect (for example with a notification or a notice in the app). If it involves using your data in a new way that needs your consent, we'll ask for it, and the change will only apply to data collected after you agree.

For questions, requests or complaints about privacy, or to delete your account, email [email protected].