Privacy policy
In short: Nokki only stores what you enter to use the app. We don't access your bank account, we don't sell your data and we don't use it for advertising. You can delete your account and all your data at any time, right from the app.
1. Who we are
Nokki is a personal finance organization app operated by Bruno Emanuel da Silva, registered in Brazil under CNPJ 54.268.304/0001-63 ("Nokki", "we", "us"). We are the controller of the personal data processed in the app.
For any privacy matter, contact us at suporte@nokki.pro.
2. Data we collect
| Data | Examples | Why |
|---|---|---|
| Sign-up | Name, email and password (stored only as a cryptographic hash, never in plain text) | Create and protect your account, send verification and password reset codes |
| Profile (optional) | Photo and date of birth, if you provide them | Personalize your account |
| Financial data you enter | Accounts, cards, statements, transactions, categories, budgets, goals and recurring items | Provide the service: balances, reports, budgets and reminders |
| Preferences | Language, currency, theme and notification choices | Make the app work the way you set it up |
| Session and security | Device model, IP address and the date of each sign-in | Keep you signed in, let you end sessions and prevent unauthorized access |
| Subscription | Plan, expiration and the purchase identifier provided by Google Play | Unlock premium access and confirm renewals and cancellations |
What we don't collect
- Bank passwords, credentials or access to bank accounts. Nokki does not connect to banks.
- Payment card details. Subscription billing is handled entirely by Google Play.
- Location, contacts, camera or microphone.
- Advertising data. The app shows no ads and uses no third-party tracking tools.
Credit card due-date reminders are scheduled on your device and never go through our servers.
3. Legal bases
- Performance of a contract: to provide the service you signed up for.
- Legitimate interest: for account security and fraud prevention.
- Legal obligation: to keep records required by law, such as access and tax records.
4. Who we share data with
We do not sell or rent your personal information, and we do not "share" it for cross-context behavioral advertising. We only share what is necessary with service providers that help us run Nokki:
- Hosting: the provider of the server that runs the app and the database.
- Resend: sends verification and password reset emails (receives your name and email).
- Google Play: processes subscriptions and confirms purchases.
We may also disclose data when required by law or by a competent authority.
Some of these providers are located outside your country, including in the United States. For these international transfers we use appropriate safeguards, such as data protection clauses in our contracts.
5. How we protect it
All communication between the app and our servers is encrypted (HTTPS). Passwords are stored with bcrypt hashing, database access is restricted and sessions use tokens that expire. No system is 100% secure; if an incident could put you at risk, we will notify you as required by law.
6. How long we keep it
- While your account exists, we keep your data to provide the service.
- When you delete your account, we immediately and permanently erase your profile, financial data, preferences and sessions.
- Subscription purchase records are kept, no longer linked to the deleted account, for the period required by tax and consumer protection laws.
- Verification codes expire within minutes and are discarded.
See how to delete your account at nokki.pro/en/delete-account.
7. Your rights
At any time, you can:
- know whether we process your data and access it;
- correct incomplete or outdated data (most of it can be edited in the app);
- request a copy of your data in a portable format, or its deletion;
- know who we share your data with;
- object to processing and file a complaint with your local data protection authority.
We honor these rights for users in every country, including under Brazil's LGPD, the California Consumer Privacy Act (CCPA) and other U.S. state privacy laws, and Canada's PIPEDA. We will not discriminate against you for exercising them. To make a request, email suporte@nokki.pro from the address linked to your account. We respond within 15 days.
8. Children
Nokki is not directed to children under 13 and we do not knowingly collect data from children. If you learn that a child has created an account, let us know and we will delete it.
9. Changes to this policy
We may update this policy to reflect changes in the app or in the law. The date at the top shows the current version. If a change is significant, we will let you know in the app or by email.
10. Contact
Bruno Emanuel da Silva · Brazil CNPJ 54.268.304/0001-63
Email: suporte@nokki.pro