Privacy Policy

What We Collect

• Budget data you enter: income, bills, expenses, debts, and savings goals.
• Bank connection data via Plaid: encrypted access tokens, transaction data, and account balances. We never store raw account numbers or credentials.
• Profile data: name, email address, and language preference.
• Session data for authentication (encrypted cookies).

How We Store Your Data

All data is stored in our own PostgreSQL database on secure servers. We do not use shared cloud databases, your data is not co-mingled with other companies' data.

Plaid access tokens are encrypted with AES-256-GCM before storage.

What We Never Do

• We never sell your data to anyone, ever.
• We never share your financial data with advertisers.
• We never use your data for purposes other than providing your Nora experience.

Plaid

Bank connections are powered by Plaid Inc., a secure financial data platform.

When you connect a bank account, you are also subject to Plaid's End User Privacy Policy. We do not receive your bank username or password. Plaid handles that directly.

Plaid's End User Privacy Policy

Analytics

We use Umami, a privacy-first analytics tool we host ourselves on our own servers. It is cookieless and collects no personal data, only anonymous aggregate usage like which pages and features get used, so we can make Nora better. Nothing goes to third parties and nothing here can identify you, which is why there is no tracking consent banner to click through. If your browser sends a Do Not Track signal, we skip you entirely.

Coach Access

If you are a coached client, your coach sees only aggregate progress summaries (for example, "budget health 78%"), not your individual transactions.

The specific data your coach can see is shown clearly inside the app.

Your Rights

• You can request deletion of your account and all associated data at any time by emailing support@heynora.co.
• You can disconnect your bank account at any time from Settings.

Contact

support@heynora.co