Privacy Policy

Introduction

Nosso ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Account Information

• Email address - For account creation and communication
• Display name - Your chosen name or nickname
• Profile photo - A default avatar or custom photo you upload

If You Sign In with Google or Apple

We receive your name and email address from your chosen provider. We do not access your contacts, calendar, or other data.

Content You Create

• Notes - Text content you create and share with your connections
• Connections - People you choose to connect with in the app
• Shared photos and images - Profile photos, picture frame images, drawings, and other media you upload in the app
• Shared expense records - User-entered amounts, currency, category, description, notes, payer, split, date, recurring rules, balance adjustments or settlements, and the change history associated with those records

App, Purchase, and Diagnostic Information

• App activity - App lifecycle and feature-interaction information used to understand and improve Nosso
• Diagnostics - Crash, performance, log, device, and sampled session-replay information used to diagnose problems
• Subscription information - Purchase and entitlement status used to provide and restore paid features

Onboarding Drafts and Your Space

Normal app use requires an account. You may prepare an optional note, shopping item, photo, or plan title before signing in. Draft content is separate from questionnaire answers. When you approve saving a contribution, it becomes linked to your account on our servers; it may first remain a private draft awaiting setup, upload recovery, or your review.

Content saved into your space can be seen by someone who joins that space. Joining another space keeps your original content separate unless you explicitly choose content to copy. A plan title remains a draft until you finish scheduling it. Older local content requires an ownership and destination review before importing.

Private text drafts remain until applied, discarded, or your account is deleted. Unattached photo uploads expire after seven days and are queued for cleanup with a grace period. Applying a photo transfers it to the shared picture frame. Discarding a private draft does not erase previously shared content. In-app account deletion purges these private setup drafts and queues their unattached media for deletion; shared content continues to follow the retention behavior described below.

How We Use Your Information

• Provide and maintain your account
• Enable sharing with your connections
• Sync your content across devices
• Store and retrieve uploaded photos, avatars, and shared picture frame images
• Sync shared expense records, calculate totals and contributions, apply recurring rules, and show expense history
• Generate temporary links so images can be securely loaded in the app
• Send push notifications about activity from your connections
• Send essential emails (verification, password reset)
• Maintain subscriptions, diagnose errors, secure the Service, and understand general product usage

About the Money Feature

Money is a manual shared record-keeping feature. Nosso does not connect to your bank or card accounts, request bank or card credentials, verify the accuracy of an entry, transfer funds, or settle a debt. Expense records are synced to Nosso's servers and linked to your account and active connection so the feature works across devices and for both people.

We send limited Money activity events to product analytics: opening Money, creating an expense, the selected fixed category and split mode, whether creation occurred online or offline, and creating a recurring rule. We do not send exact or bucketed amounts, currency, descriptions, notes, names, record or relationship identifiers, dates, or calculated balances as Money event properties. Diagnostic services may still receive technical context when a crash or performance problem occurs; do not enter highly sensitive information in free-text fields.

Information Visible to Your Connections

People you connect with can see:

• Your display name and profile photo
• Shared note content
• When you last opened the app
• Shared expense details, including the payer, split, date, category, description, notes, recurring rules, balance adjustments or settlements, and change history
• Shared Money settings, including the selected currency, split ratio, and history/display preferences

Only connect with someone you trust. Changes made by either person can affect the shared totals and history visible to both people.

Analytics and Diagnostics

Nosso uses PostHog for general product-usage analytics. In production, it may receive an account identifier, email, name, nickname, app lifecycle events, and product interactions. Nosso uses Sentry for crash reporting, performance monitoring, logs, technical diagnostics, and sampled session replay. Replay is configured to mask all text, images, and vector graphics. Sentry is configured to include default identifying context when available. Nosso does not use this information for cross-company advertising tracking.

Third-Party Services

We use the following services to operate the app:

• Apple Push Notification Service - Notifications on iOS
• Firebase Cloud Messaging - Notifications on Android
• Google Sign-In / Sign in with Apple - If you choose these login options
• Cloudflare R2 - Secure object storage for uploaded images and avatars in production
• PostHog - Product-usage analytics
• Sentry - Crash reporting, performance monitoring, diagnostics, logs, and sampled session replay
• RevenueCat - Subscription, purchase, entitlement, and purchase-restoration services using a pseudonymous customer identifier

These providers process information under their own terms and privacy commitments to provide services to Nosso. Push-notification text may include your connection's display name and a count of changed items, but Money notifications are designed not to include exact amounts, descriptions, or notes.

Data Security

We protect your data with HTTPS encryption for all transfers, secure password storage, encrypted local storage on your device, and access-controlled object storage for uploaded images. Temporary signed links are used so images can be fetched without making the storage bucket public.

Data Retention

We generally retain account and content data while your account is active and as needed to operate the Service. Some content uses soft deletion so that connected devices can synchronize changes and so shared records retain a reliable history.

Deleted expenses and recurring-expense records may remain stored with a deletion marker. Expense change history is retained with the shared record. If the connection enables the relevant history setting, deleted expense entries may remain visible in the app. Ending a connection removes access to its active shared space, but related records may remain stored.

When you use the in-app account deletion control, Nosso disables your account access, invalidates linked sign-in accounts, disables push tokens, removes pending invitations, and marks an existing connection to show that the partner account was deleted. Shared content and records, including Money records and audit history, may remain for the other participant, record integrity, security, fraud prevention, legal obligations, and operational recovery. Backups and operational copies may also persist. Some retained records do not currently have a fixed automatic deletion deadline.

To request deletion of additional data, use our contact page. We will assess the request and explain any information that must be retained for a legitimate reason.

Your Choices

• Delete your account or request data deletion - Use the control in app settings or send us a request through our contact page
• Manage notifications - Through your device settings or the app
• Update your profile - Change your name and photo anytime

Device Permissions

• Camera - To scan QR codes for connecting with others
• Photo Library - To upload a profile photo or shared picture frame image
• Notifications - To receive updates from your connections

All permissions are optional and can be changed in your device settings.

Children's Privacy

Nosso is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance.

Contact Us

Questions? Contact us at hello@nossoapp.com