Terms & Privacy

Terms of Service

Welcome to Nummia. These Terms of Service (“Terms”) govern your access to and use of the Nummia mobile application and any related services, features and content (collectively, the “Service”) provided by Awesome Media SRL (“Nummia”, “we”, “us” or “our”).

By downloading, accessing or using the Service, you agree to be bound by these Terms. If you do not agree to these Terms, do not use the Service.

1. Eligibility

You must be at least 18 years old, or the age of legal majority in your jurisdiction, to use the Service. By using the Service you represent that you meet this requirement and have the legal capacity to enter into these Terms.

2. The Service

Nummia is a personal finance application that lets you record and organize financial information — accounts, transactions, budgets, categories and currency conversions — for your own tracking purposes.

Nummia is an informational and organizational tool only. We are not a bank, financial institution, broker, investment adviser, tax adviser or accountant. The Service does not provide financial, investment, tax, legal or accounting advice, and nothing in it should be relied upon as such. You are solely responsible for your financial decisions.

3. Your account

• To use the Service you must create an account and provide accurate, current and complete information, including your email address and country of residence.
• You are responsible for keeping your login credentials confidential and for all activity under your account.
• Notify us immediately of any unauthorized use of your account at support@awesomemedia.do.
• We may suspend or terminate accounts that violate these Terms or that we reasonably believe are being used fraudulently or unlawfully.

4. Your data and content

• You retain ownership of the financial data and other content you enter into the Service (“Your Content”).
• You grant us a limited, non-exclusive license to store, process and display Your Content solely as needed to operate and provide the Service to you.
• You are responsible for the accuracy of Your Content. Balances, budgets and currency conversions are calculated from the data and reference rates you enter or select; they are estimates and may not reflect actual amounts held at any institution.
• You are responsible for keeping your own backups of important information. We are not liable for any loss or corruption of Your Content.

5. Acceptable use

You agree not to:

• Use the Service for any unlawful, fraudulent or unauthorized purpose;
• Attempt to gain unauthorized access to the Service, to other users’ accounts, or to our systems or networks;
• Interfere with, disrupt or overload the Service or its infrastructure;
• Reverse engineer, decompile or attempt to extract the source code of the Service, except where such a restriction is prohibited by law;
• Upload malicious code, or use the Service to transmit unlawful, infringing or harmful content;
• Resell, sublicense or commercially exploit the Service without our written permission.

6. Privacy

Your use of the Service is also governed by our Privacy Policy, which explains what we collect, what we do not, and how your information is handled. By using the Service you consent to the practices described there.

7. Third-party services

The Service relies on third-party providers for cloud hosting, authentication and error monitoring in order to function. Those providers are named in the Privacy Policy. Your use of the Service may be subject to their terms. We are not responsible for the acts, omissions or content of third parties, and their availability is outside our control.

8. Fees

The Service is currently offered free of charge. If we introduce paid features or subscriptions we will disclose the applicable pricing and terms before you incur any charge. Purchases made through an app store are also subject to the terms of that store (Apple App Store or Google Play).

9. Intellectual property

The Service — including its software, design, text, graphics and logos, but excluding Your Content — is owned by Awesome Media SRL or its licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Service for your personal, non-commercial use, subject to these Terms.

10. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, error-free or secure, or that any calculation, balance or conversion will be accurate or complete. You use the Service at your own risk.

11. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AWESOME MEDIA SRL AND ITS OFFICERS, DIRECTORS, EMPLOYEES AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, DATA, GOODWILL OR OTHER INTANGIBLE LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OF — OR INABILITY TO USE — THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATING TO THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US, IF ANY, IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) FIFTY UNITED STATES DOLLARS (USD 50).

Some jurisdictions do not allow certain limitations, so some of the above may not apply to you.

12. Indemnification

You agree to indemnify and hold harmless Awesome Media SRL and its affiliates from any claims, damages, liabilities and expenses (including reasonable legal fees) arising out of your use of the Service, Your Content, or your violation of these Terms or applicable law.

13. Termination

You may stop using the Service and delete your account at any time, from Settings inside the app. We may suspend or terminate your access at any time, with or without notice, if you violate these Terms or if we discontinue the Service. Provisions that by their nature should survive termination — including sections 4, 9, 10, 11, 12 and 15 — will continue to apply.

14. Changes to the Service and these Terms

We may modify or discontinue the Service, or update these Terms, at any time. If we make material changes we will give reasonable notice, for example in the app or by email. Your continued use of the Service after the changes take effect constitutes acceptance of the revised Terms.

15. Governing law and disputes

These Terms are governed by the laws of the Dominican Republic, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of Santo Domingo, Dominican Republic, except where prohibited by applicable law.

16. Miscellaneous

• Entire agreement. These Terms, together with the Privacy Policy, constitute the entire agreement between you and Awesome Media SRL regarding the Service.
• Severability. If any provision is held unenforceable, the remaining provisions remain in full force.
• No waiver. Our failure to enforce a provision is not a waiver of our right to do so later.
• Assignment. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition or sale of assets.

Privacy Policy

Nummia holds a record of your money. We have tried to keep this policy specific enough that you can tell exactly what that means — what leaves your phone, what does not, and who else ever sees it.

1. Who is responsible

Awesome Media SRL, a company incorporated in the Dominican Republic, is the data controller for the information described here. You can reach us about anything on this page at privacy@awesomemedia.do.

2. What we collect from you

When you create an account and use Nummia, we hold:

• Account details — your email address, first and last name, an optional phone number, your country of residence and your device time zone. Your password is stored only as a salted hash by our authentication provider; we never see it. If you sign in with Apple or Google instead, we receive the name and email address that service shares with us — with Apple, that may be a private relay address it creates for you — and no password at all.
• Notification details — if you allow notifications, a push token that identifies the app on your device, and the notification settings you choose.
• The financial data you enter — accounts and balances, transactions, transfers, budgets, categories, tags, currencies, recurring rules, card statements, and any spreadsheet you choose to import. All of it is entered or imported by you.
• Bank alert emails you forward to us — only if you turn this on. You get a private address, and you set up a filter in your own email that forwards your bank’s transaction alerts to it. From each one we read the amount, currency, date, merchant, the last four digits of the card and the kind of transaction, and record it in your ledger. If you tell us which bank an email came from, we keep that too. The text of the email is kept for 7 days and then erased; what was read from it stays, as part of your ledger. See how forwarded emails are handled.
• Support messages — if you report an issue from inside the app, we receive your message together with your user ID, app version, platform and language, so we can reproduce the problem.
• Diagnostics — crash reports, performance traces and, for a sample of sessions, screen recordings. See section 5, which explains this in full, because it is the part of this policy most worth reading.

3. What we never collect

These are not cautious phrasings of a maybe. The app contains no code that does any of them:

• We never connect to your bank. Nummia has no bank-aggregation integration of any kind. We never ask for, receive or store online banking credentials, card numbers or any access to a financial institution. Every figure in the app is there because you typed it, imported it, or forwarded us your bank’s alert email. Forwarding is something you set up and can stop at any time; it gives us the email, never access to your bank.
• We never keep your receipt photos. Receipt scanning runs entirely on your device, using the text recognition built into iOS and Android. The image is read on the phone and discarded — it is never uploaded to us, never stored on our servers, and never sent to any third party.
• We never track your location. The app requests no location permission.
• We never advertise or sell data. There are no advertising SDKs, no advertising identifiers, no marketing or attribution trackers, and no data brokers. We do not sell or share your personal information, and we never have.

4. Why we process it, and on what legal basis

If you are in the European Economic Area or the United Kingdom, the GDPR requires us to name a legal basis for each purpose:

5. Who else processes your data

We use the service providers below. Each acts as a processor on our instructions, and none is permitted to use your data for its own purposes.

• Supabase — hosts our database and handles authentication. This is where your account and your financial data live. Access is enforced per-user at the database level, so one account cannot read another’s rows.
• Expo — delivers our push notifications. When we notify you, the notification’s text and your device’s push token pass through Expo’s push service on their way to Apple (iOS) or Google’s Firebase Cloud Messaging (Android), which put it on your screen. Some notifications name an amount, a merchant, a budget or an account, so that text can include financial details. You can turn each kind of notification off in the app, or all of them in your phone’s settings.
• Resend — sends our emails: the codes to confirm your address and to reset your password, the invitations you send when you share an account or a budget (it receives the address you invite and your name), and, when you report an issue from the app, a copy of your report to our support inbox with your email address so we can reply.
• Sentry — receives crash reports and performance data so we can find and fix defects. Two things here deserve to be stated plainly rather than buried:
  • Sentry events include your IP address and the user ID of the signed-in account, which lets us tie a crash to the report you send us about it.
  • Sentry also captures session replays — a reconstruction of what happened on screen — for roughly one in ten sessions, and for sessions in which an error occurs. Replays are captured with text and images masked, so the recording shows the shape of the screen and what you tapped rather than your actual figures. We use them only to understand the sequence of actions that produced a bug.
• Cloudflare — receives the bank alert emails you forward and hands them straight to our database. It does not store them, and our receiving code writes nothing about their content to its logs. Only involved if you use email forwarding.
• OpenAI — when an alert email comes from a bank whose format we do not yet read on our own, or from a sender we do not yet recognise as a bank, we send its text to OpenAI’s API to pick out the amount, date, merchant and card digits. Before it is sent we strip greeting lines, email addresses and links. To suggest a category we send only the merchant name and the names of your categories. OpenAI does not use API data to train its models, and we ask it not to store the requests; it keeps them for up to 30 days solely to detect abuse, and then deletes them. Only involved if you use email forwarding.

Apple and Google distribute the app and may collect their own data under their own policies when you download or update it. That is outside our control and is not covered by this policy.

Sign in with Apple and Sign in with Google are optional. If you use one, you sign in on that company’s own screen, under its own policy, and it tells us who you are; we never see your Apple or Google password. For Apple we also keep a token that lets us revoke Nummia’s access to your Apple ID when you delete your account, and we do revoke it then.

How forwarded emails are handled

• Only what you forward. We never read your inbox. We receive an email only because a filter you created sends it to your private Nummia address, and you can remove the filter, or replace the address with a new one in the app’s settings, at any time. An old address stops working the moment it is replaced.
• Recorded on its own only when we are sure. A transaction is recorded on its own only when the email comes from the verified address of a bank we already recognise, the card digits match exactly one of your accounts and the amount can be checked against the email itself. Anything else waits in the app for you to confirm or dismiss — including every alert from a sender we do not yet recognise as a bank, and every alert you forward by hand. Promotions, one-time codes and security notices are ignored.
• How we learn a new bank. When you confirm an alert from a sender we do not yet recognise, the app may ask which bank it came from. We look at those answers added up across households — how many confirmed alerts a sender has and which bank people say it is, never who said it — to decide by hand whether that sender is a bank. If it is, its future alerts can be recorded on their own; if it is not, we stop reading its emails. To read a new bank’s format without help, a person on our team may read some of its emails during the 7 days they exist. Any copy we keep to test that reading is anonymised first: names, account and card numbers, phone numbers and email addresses are replaced, and it identifies no one.
• 7 days for the email, your ledger for the rest. The subject and text of each email are erased 7 days after it arrives. The amount, date, merchant and card digits read from it stay with your ledger, like any transaction you enter yourself, until you delete them.
• A shared list of merchants. When at least five different households in the same country have filed the same merchant name under the same built-in category, that pair — a merchant name and a category, nothing else — is added to a list we use to suggest a category to everyone in that country. It contains no amounts, accounts, dates or anything that points to a person or a household.

6. Where your data is held

Your account and your financial data are stored in the United States, in Amazon Web Services’ US East (N. Virginia) region, where our database provider hosts our project. Our error monitoring, push notification and email providers process their data in the United States as well, as does OpenAI. Cloudflare receives forwarded emails at whichever of its data centres is nearest to the sending mail server.

If you use Nummia from the European Economic Area or the United Kingdom, this means your personal data leaves it. Depending on the provider, those transfers rely on the European Commission’s Standard Contractual Clauses or on the EU-U.S. Data Privacy Framework, as set out in each provider’s data processing terms with us.

7. What stays on your device

Nummia works offline, which means a copy of your data lives on your phone:

• Your session tokens are kept in the operating system’s secure storage — the iOS Keychain or the Android Keystore.
• A local cache holds your financial data and any changes made while offline, so they can be replayed when you reconnect, along with interface preferences such as your budget layout.

All of it is removed when you sign out or delete the app.

8. Device permissions

Each is optional, and the app remains usable if you decline.

9. How long we keep it

While your account is open, we keep your data for as long as you keep it. Deleting a transaction or an account inside the app marks it as deleted and hides it from your views, but retains the row so that balances stay derivable and the change can be undone or explained later. We do not currently run an automated purge of these rows.

The one exception is the text of a forwarded bank email: its subject and body are erased automatically 7 days after it arrives. What was read from it stays with your ledger. An anonymised copy kept to learn a bank’s format (see above) is no longer your data: nothing in it points to you.

Diagnostic data in Sentry is kept according to that provider’s retention schedule, which is substantially shorter than the life of your account.

10. Deleting your data

Two options, both in the app’s settings and both taking effect immediately:

• Reset your financial data — erases accounts, transactions and budgets while keeping your login. Erasing transactions also erases the bank alert emails you forwarded and everything read from them.
• Delete your account — erases your entire financial record, including your forwarding address and every forwarded email, and the login itself, in a single atomic operation. It cannot be undone, and we cannot recover it for you afterwards.

When you delete your account we offer an optional survey asking why you are leaving. If you answer it, that answer — the reason, anything you type, and your app version, platform and language — is kept after the rest of your data is gone. It carries no identifier that points back to you. Skipping the survey leaves nothing behind.

No longer have the app? Email privacy@awesomemedia.do from the address on your Nummia account and ask us to delete it. We will delete the account and all of its data, as above, within 30 days.

11. Security

Data is encrypted in transit and at rest by our hosting provider. Every database query runs under row-level access rules tied to the signed-in account, which is what keeps one user’s data out of another’s reach, and session tokens are held in your device’s hardware-backed secure storage. No system is perfectly secure, and we do not claim otherwise; if a breach ever affects your data we will notify you and the relevant authority as the law requires.

12. Your rights

Wherever you live, you can ask us to access, correct, export or delete your data, and we will respond within 30 days. Write to privacy@awesomemedia.do.

• Dominican Republic. Law 172-13 gives you rights of access, rectification, cancellation and objection over your personal data.
• EEA and UK. Under the GDPR you additionally have the right to restrict or object to processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your national supervisory authority.
• California. Under the CCPA and CPRA you have the right to know what we collect, to delete it, to correct it and to opt out of its sale or sharing — though as stated in section 3, we do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.

13. Children

Nummia is for adults. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will delete it.

14. Changes to this policy

If we change how we handle your data we will update this page and move the date at the top. When a change is material — a new processor, a new category of data — we will tell you in the app or by email before it takes effect, rather than relying on you to notice.

15. Contact

Awesome Media SRL
Privacy requests: privacy@awesomemedia.do
Support: support@awesomemedia.do
Rafael Augusto Sánchez 120, Evaristo Morales
Santo Domingo 10147, Dominican Republic