Privacy Policy

Who we are

Nuumey® is a personal budgeting application operated by Underdown Labs Ltd. Our registered address is in the United Kingdom. You can contact us at [email protected].

What data we collect

When you create an account and use Nuumey, we collect:

• Email address: used for account authentication and to contact you about your account.
• Display name: the name you choose during sign-up, shown in the app.
• Financial data you enter: your balance, salary, envelopes, bills, transactions, goals and settings. This data is entered by you and is used solely to power the app. We do not receive or access your bank account.
• Feedback and support messages: any messages you send us via the in-app feedback tool or by email.

If you join the App Store waitlist on our website, we collect your email address and when you joined. You don't need an account for this.

We do not collect any data about your real bank accounts. We have no access to your banking information.

How we use your data

• To provide and operate the Nuumey application.
• To authenticate your account and keep it secure.
• To respond to support requests and feedback. When our team replies to a support case you opened, we send you a short email with a link to read the reply in the app. The email never includes the reply itself. There's no setting to turn these off, because they're part of the support you asked for, but we only send one when there's a new reply waiting for you.
• To contact you about important changes to the service (such as pricing or policy updates).
• If you choose to, to email you Nuumey news about new features and updates. This is off unless you turn it on, at sign-up or in Account, and you can turn it off there at any time or use the unsubscribe link in any news email.
• If you join the App Store waitlist, to send you one email when Nuumey is on the App Store. We don't use your waitlist email for anything else. To be taken off the list, email us.

We do not use your data for advertising. We do not sell your data to third parties. We do not use your financial data for any purpose other than displaying it back to you in the app.

Where your data is stored

Your account and budgeting data is stored securely using Supabase, hosted in the UK (London). Supabase uses row-level security, meaning your data is only accessible to you. Even at the database level, no other user can access your records.

The marketing website (nuumey.co.uk) and the app install (app.nuumey.co.uk) are served from servers we operate in Europe. Those servers deliver pages and app files to your browser. They do not store your budgeting data.

Data retention

Your data is retained for as long as your account is active. You can clear all the data stored on your device at any time from Settings in the app.

You can also permanently delete your account and all your data in the app: open Account, then Delete my account. This removes your sign-in too. Joint budgets you share stay with the other members.

If we make material changes to how we store or process your data, we will give you clear notice before they take effect.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict our processing of your data.
• Data portability (you can export your data as JSON from Settings at any time).

To exercise any of these rights, contact us at [email protected].

Third-party services

We use a small number of trusted providers to run Nuumey. Each one only gets what it needs to do its job.

• Supabase stores your account and budgeting data and handles sign-in. Your data is held in its London data centre in the UK.
• Amazon Web Services sends our service emails from its London data centre in the UK. These are the email that confirms your address when you sign up, password reset emails, emails about your support cases, and the alert that tells us you have sent feedback.
• Brevo sends our Nuumey news emails, only if you turned Nuumey news on. It receives your email address, and it may record whether you open a news email or click its links. To stop, turn off Nuumey news in Account or use the unsubscribe link in any news email. Brevo is run by Brevo SAS in Paris, France, and stores your data in the EU, in data centres in France, Germany and Belgium.
• Microsoft 365 runs our business email, so it holds any email you send us or reply to. Microsoft keeps it in data centres in Europe.
• Sentry sends us crash and error reports from the Nuumey mobile apps, so we can find and fix problems. A report holds the error details, a short trail of recent app activity, and your device and app version. Where we can, we remove email addresses, amounts and quoted values from the error text, and we don't attach your name or email address to a report. Sentry stores the reports in its data centre in Germany, in the EU.
• Google Analytics helps us understand visits to this marketing website only, and only with your consent (see Cookies on this website).

Each provider has its own privacy policy and works under a data processing agreement with us. We don't share your personal data beyond what's needed to run the service.

Cookies on this website

This marketing website (nuumey.co.uk) does not set authentication cookies. The Nuumey app at app.nuumey.co.uk uses essential cookies for sign-in and session management only.

With your consent, we use Google Analytics on this marketing site to understand how visitors use nuumey.co.uk (for example which pages are viewed). Google may set cookies for this purpose. You can accept or reject analytics cookies when you first visit. You can change your choice anytime via Cookie preferences in the footer, or clear cookies in your browser.

We do not use advertising cookies on this site. We do not sell your data.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or via the app. The date at the top of this page shows when it was last updated.

Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at [email protected].