Privacy Policy
Effective 19 October 2026
Nuvaro helps you track and understand your money. This policy explains what we collect, why, who processes it on our behalf, and the choices you have. Nuvaro is operated by Arshil, an individual based in India ("we", "us").
The short version
- We store the information you give Nuvaro so we can show it back to you, and nothing more.
- We never ask for your bank passwords, never connect to your bank, and never move money.
- We don't sell your data, show ads, or share it with advertisers.
- No other Nuvaro user can see your records.
- You can export your data or delete it at any time.
What we collect
- Account details: your email address and, if you sign in with Google, the name and profile picture Google shares.
- Profile and preferences: your name, optional occupation, phone number and picture, plus your country, time zone (taken from your browser), recording currency and whether you use Nuvaro for personal or business money.
- Financial records you add: accounts, balances, transactions, categories, subscriptions and loans, and any GST invoice details you enter.
- Imports: spreadsheets (CSV, Excel, Notion exports) are read in your browser; only column headers and a few sample rows are sent to our AI provider to work out which column means what. PDF bank statements are sent to our AI provider to extract transactions and are not stored as files. You review imported entries before they're saved.
- Voice entries: recordings are sent to our AI provider to turn what you said into a draft transaction. We don't keep the recording.
- Nuvaro AI conversations: your questions and the answers, saved so you can return to them. Delete a conversation to remove it.
- Plan and usage: your plan and how many AI questions, voice entries and statement imports you've used this month.
- Technical data: our hosting providers process standard request data such as IP address and browser type to deliver and secure the service.
How we use it
- To run Nuvaro: show your dashboard, calculate totals, generate statements and answer your Nuvaro AI questions from your own records.
- To apply plan limits, prevent abuse and keep accounts secure.
- To respond when you contact us for support.
We don't use your financial data for advertising, and we don't sell or rent it to anyone.
Who processes your data for us
We rely on a few providers to run Nuvaro. They process data only to provide their service to us:
- Supabase: database and sign-in. Your data is stored on Supabase servers in the United States.
- Cloudflare: hosting and delivery of the app.
- Google: "Continue with Google" sign-in.
- AI provider: Nuvaro AI, voice entries, and statement and spreadsheet imports are powered by a third-party AI provider that processes requests on our behalf. When you use these features, the relevant records, files or recordings are sent to it for processing under its terms. You can ask us which provider we use.
- open.er-api.com: public exchange rates. No personal or financial data is sent.
- Payment provider: when paid plans open, payments are handled by our payment provider (Dodo Payments). We never see or store your card details.
Who can see your data
Every record is tied to your account, and the database itself prevents other users from reading it. We, as the operator, can technically access stored data; we do so only when needed to provide support you ask for, fix a problem affecting your account, protect the service, or comply with the law.
How long we keep it
- We keep your data while your account is active.
- Clear all data (Settings → Data) deletes your financial records and AI conversations immediately.
- To delete your account entirely, email us from your account address; we'll delete it within 30 days.
- Provider backups may retain deleted data for a short period before they expire.
Your choices and rights
- Access and export: download your transactions as CSV any time (Settings → Data).
- Correct: edit your profile and records in the app.
- Delete: use Clear all data, or ask us to delete your account.
- Questions or complaints: email support.nuvaro@gmail.com.
Depending on where you live, laws such as India's Digital Personal Data Protection Act or the EU/UK GDPR may give you further rights. Contact us to exercise them.
Security
Data is encrypted in transit and at rest by our providers, sign-in checks passwords against known leaks, and each request can only reach the signed-in person's records. No system is perfectly secure; tell us right away if you think your account has been compromised.
Children
Nuvaro is for people aged 18 and over. We don't knowingly collect data from children.
Changes to this policy
If we change this policy, we'll update the date above and, for significant changes, let you know in the app or by email.
Questions? Email support.nuvaro@gmail.com.

