Privacy Policy

Introduction

Welcome to Nobuki ("we", "our", or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

We are committed to protecting your privacy. This policy describes our practices regarding data collection and usage, including how we handle voice input and other sensitive features.

Information We Collect

1. Account Information

When you create an account, we collect:

• Email address - For account authentication and communication
• Display name (optional) - For personalization

2. Financial Data

All financial data you enter is:

• Stored locally on your device by default
• Encrypted before sync (for Pro subscribers with cloud sync enabled)
• Never shared with third parties

3. Voice Input (Microphone Access)

Nobuki includes a voice input feature for convenience when entering transactions.

How Voice Input Works:

• When you tap the microphone button, we request permission to access your device's microphone
• Your voice is processed on-device using your operating system's built-in speech recognition service (Google Speech Recognition on Android, Apple Speech on iOS)
• The audio is converted to text in real-time
• The audio recording is NOT stored, saved, or transmitted to our servers
• Only the resulting text is used to populate the input field

4. Usage Analytics

We collect anonymous usage analytics to improve the app:

• App crashes and errors (via Sentry)
• General usage patterns
• Device type and OS version

We do NOT collect:

• Your financial transaction details
• Personal identification information beyond email
• Location data
• Contacts or other personal data

How We Use Your Information

We use the information we collect to:

1. Provide the Service - Process your transactions, sync data (if enabled), and deliver app functionality
2. Improve the App - Analyze crashes and usage patterns to fix bugs and enhance features
3. Communicate - Send important account-related notifications
4. Support - Respond to your inquiries and provide customer support

Data Storage and Security

Local Storage

• All financial data is stored locally on your device using encrypted SQLite database
• Your data remains on your device unless you explicitly enable cloud sync

Cloud Sync (Pro Feature)

• If you enable cloud sync, your data is encrypted end-to-end
• Data is stored on secure servers
• Only you can access your synced data with your account credentials

Security Measures

• Industry-standard encryption for data in transit (HTTPS/TLS)
• Secure authentication (OAuth 2.0, OTP)
• Regular security audits

Third-Party Services

We use the following third-party services:

Service	Purpose	Data Shared
Google OAuth	Authentication	Email (for login)
Sentry	Error tracking	Crash logs (anonymized)
RevenueCat	Subscription management	Purchase receipts
Google AdMob	Advertising (Free tier)	Advertising ID
Google/Apple Speech	Voice recognition	Audio (on-device only)

Each third-party service has its own privacy policy governing the data they collect.

Permissions We Request

Microphone (RECORD_AUDIO)

• Purpose: Voice-to-text input for entering transactions
• Usage: Audio is processed on-device and immediately discarded
• Storage: We do NOT store, record, or transmit audio data
• Optional: You can use the app without granting this permission

Internet

• Purpose: Cloud sync, authentication, AI parsing
• Usage: Required for core functionality

Storage (Read/Write)

• Purpose: Import/export data, backups
• Usage: Only accessed when you initiate import/export

Your Rights

You have the right to:

1. Access - Request a copy of your data
2. Correction - Update or correct your information
3. Deletion - Delete your account and all associated data
4. Portability - Export your data in standard formats (JSON, CSV)
5. Opt-out - Disable analytics or cloud sync at any time

Account Deletion

You can delete your account and all associated data at any time through:

• In-App: Go to Settings → Account → Delete Account
• Web: Visit https://api.nobuki.forgent.id/users/delete-account

When you delete your account:

• All your financial data (transactions, accounts, categories) will be permanently deleted
• All your notes and parsed data will be permanently deleted
• Your user preferences and settings will be permanently deleted
• Your subscription information will be permanently deleted
• All synced data from cloud will be permanently deleted
• This action cannot be undone

Note: Local data on your device will remain until you uninstall the app or clear app data.

Partial Data Deletion

You can also delete specific data types without deleting your entire account:

• Delete all transactions
• Delete all notes
• Delete all accounts
• Delete all categories
• Delete all payees

This can be done through the app's Settings → Data Management section.

To exercise these rights, contact us at: hello@forgent.id

Data Retention

• Account data: Retained until you delete your account
• Local data: Stored on your device until you uninstall or clear data
• Cloud data: Retained until you delete your account or disable sync
• Analytics: Anonymized data retained for up to 90 days

Children's Privacy

Nobuki is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Forgent Labs
Email: hello@forgent.id
Website: https://forgent.id

Summary

Data Type	Collected	Stored Locally	Stored on Cloud	Shared
Email	✅	✅	✅	❌
Financial Data	✅	✅	✅ (if sync)	❌
Voice Audio	✅*	❌	❌	❌
Crash Logs	✅	❌	✅ (Sentry)	❌
Location	❌	❌	❌	❌
Contacts	❌	❌	❌	❌

*Voice audio is processed on-device in real-time and immediately discarded. Only the converted text is retained.