Privacy Policy

1. Information We Process

• Local data: Numio currently does not require an account. Assets, subscriptions, bills, reminders, notes, settings, and custom card faces are stored on your device by default and are not automatically uploaded to servers operated by Numio. Numio does not collect, review, publish, or host your custom card face images.
• Information you provide: We use email, issue descriptions, screenshots, or diagnostic details you send to handle support requests. If you claim a redeem code, we use your email and claim time to issue the code, prevent duplicates, and guard against abuse. When a campaign uses email delivery, the recipient email and redemption code are sent to Resend to deliver that transactional message.
• Market value updates: The app sends only the asset type, public instrument symbol or identifier, market, and quote unit. The request does not include holding quantities, purchase costs, account balances, notes, custom prices, the requesting device model, or other local asset records.
• Operations and security: The platform shares cached public quotes and records the technical logs needed to monitor endpoint outcomes and retries. Quote request logs do not contain instrument symbols, prices, request bodies, or holding information. During rate limiting, D1 stores only a purpose-scoped SHA-256 digest and counters, not the raw source IP.
• Infrastructure: Cloudflare, as the network and hosting provider, may process standard network information such as IP address, request time, and security events under its own policies.

2. Local Data, Backups, and Sync

• Numio is local-first. You may use system backups, exported files, or your chosen iCloud Documents / WebDAV service to keep synced copies and historical backups.
• When sync or backup is enabled, relevant data is written to the service you choose and handled by Apple or that WebDAV provider; Numio does not operate its own sync server.
• If Numio-owned accounts or sync services are introduced, we will explain the data scope, purposes, and controls before they are enabled and update this policy.

3. Permissions

• Notification permission is used for subscription renewals, bills, or reminders you configure.
• Local authentication helps protect sensitive content in the app. You can change these permissions in system settings.

4. Purchases and Third-Party Services

• Numio Pro purchases, restores, and subscription management are handled by Apple StoreKit and the App Store. We do not receive your full payment card information.
• Resend processes the recipient email, redemption code, and message content only when a campaign uses email delivery, so it can deliver that redemption-code message. Numio does not use this information for marketing email.
• System features and third-party services you choose may process relevant data under their own privacy policies.

5. Retention and Deletion

• You can delete records in the app or uninstall the app to remove local app data.
• Support emails are retained as needed to handle requests and maintain service quality. Redeem-code claim records and their email-delivery status are cleared within a reasonable period after a campaign ends.
• Shared quote cache entries not updated for 30 days are removed. Quote request-attempt logs are retained for up to 30 days.
• D1 rate-limit records containing IP digests are normally removed within about 3 hours.

This service data is not used for advertising, cross-app tracking, profiling, or business authentication.

6. Children

Numio is not directed to children for data services requiring independent consent. Children should use the app with guidance from a parent or guardian.

7. Updates

We may update this policy as features, laws, or operations change. The updated version will be posted on this page with a new update date.

8. Contact Us

For privacy questions, contact numio@oritx.com.