Privacy Policy

Our data commitments

Three things we want to be completely direct about, because they matter more than the rest of this page:

• We only collect what Nummi actually needs to work. Not more “just in case,” and not to build a profile of you for anything other than running the app itself.
• We never sell your data. Not to advertisers, not to data brokers, not to anyone — for any user, full stop.
• We never use your data to target ads at you. Nummi has no advertising infrastructure at all — no ad network, no targeting, no behavioral profiling.

Everything below is the honest, specific version of what that first commitment means in practice: exactly what we collect, and exactly why. We’re not going to claim we “don’t collect data” — Nummi is an account-based app with tools you type real entries into, so of course it stores some things. What we won’t do is collect more than that, or use it for anything other than running Nummi for you.

What we collect — and why

• Account info — your name, email address, and a securely hashed password. Nummi can’t save your progress between visits, or even log you in, without a persistent account.
• Date of birth — collected once at signup, solely to confirm you meet our minimum age requirement (13+). We don’t ask anyone who hasn’t created an account for this, and we don’t use it for anything else.
• Progress data — lessons completed, quiz answers and scores, XP, streaks, and unlocked achievements. This is the core of the product: without it, a lesson couldn’t pick up where you left off and none of the gamification would work.
• Financial entries you choose to type in — budget entries, net worth items, goals, and investing-simulator trades (including the crypto/“coins” category — still entirely simulated, see the Terms of Use). These tools are only useful if they remember what you put into them. Everything here is self-reported and virtual — none of it is linked to any real bank, brokerage, or crypto exchange account.
• Messages you send the Coach — so it can respond with relevant context, and so we can see where its automated responses fall short and improve them.
• Parent/guardian email — only if you’re under 18 and choose to provide one at signup. We use it once, to send a notice explaining Nummi and a link where they can request the account be deleted — see the “Your account” section of the Terms of Use. We don’t use it for anything else, and it’s never asked of adult signups.
• Referral tracking — if you sign up using a friend’s referral link, we record who referred you, purely so the right account can be credited. See “Referrals” in the Terms of Use.
• Usage analytics — aggregate stats like which pages get visited and how fast they load, via Vercel Analytics and Speed Insights. Not tied to your Nummi account or identity — see “Cookies and analytics” below.

Cookies and analytics

Nummi uses exactly one essential cookie: a login session cookie, so you stay signed in between page loads. That’s the entire cookie footprint — no tracking cookies, no third-party ad cookies, nothing else.

For analytics, we use Vercel Analytics and Speed Insights to see aggregate traffic and performance trends (like page views and load times). It’s cookieless and isn’t tied to your Nummi account — we use it to see whether the app is fast and working, not to identify or target you individually. Nummi doesn’t use third-party advertising cookies, tracking pixels, or fingerprinting.

What we don’t collect

Nummi never asks for real bank account numbers, credit/debit card numbers, government ID numbers, or brokerage/exchange credentials. If you ever see a field asking for that, it’s not supposed to be there — please report it. We also don’t knowingly collect personal information from anyone under 13 — our signup flow asks for a birthdate and blocks account creation if it indicates the person is under 13.

Extra protections for teen accounts

Nummi is built for teens and young adults, so beyond the commitments above — which apply to every user, not just minors — a couple of things are specific to younger accounts: social features (like the friends-based leaderboard) are opt-in and connection-based rather than a public directory, and if we launch push notifications for streaks or quests, our intent is that accounts registered as under 18 default out of nighttime sends (roughly 9pm–8am) rather than being opted into round-the-clock alerts — a design commitment we’re documenting now, ahead of that feature actually going live.

How it’s used

Your data is used to run the app: showing your progress, computing gamification (XP, streaks, leaderboard rank), crediting referral bonuses, and personalizing lesson recommendations and Coach responses. That’s the complete list of purposes — see “Our data commitments” above for what we explicitly don’t do with it.

Payments (Pro tier, not currently active)

Nummi doesn’t process any real payments today. If a paid Pro tier launches in the future, payment card details will be handled directly by our payment processor (Stripe), not stored by Nummi — we’d only keep a record of your subscription status.

Data retention and deletion

Your data is kept for as long as your account exists. You can permanently delete your account — and everything tied to it: progress, budget/goal/investing data, Coach conversation history, all of it — at any time from Profile → Account settings → Danger zone. Deletion is immediate: your account and everything tied to it is removed from our live database the moment you confirm, not just deactivated or hidden, and it can’t be undone. If a parent/guardian was notified per the Terms of Use, they can also trigger this same deletion using the link from that notice, without needing the account’s password.

As with most hosted services, routine database backups may retain a copy for a limited period after that — no more than 30 days — before cycling out. We don’t use backups to restore or access a deleted account.

Security

Passwords are hashed (never stored in plain text) before being saved. Password-reset links are single-use and expire after one hour.

Changes

If this policy changes materially, we’ll update the date at the top of this page.