Privacy Policy.

1. Data controller

Nuvlo is a service operated by ShireNode. For any questions regarding the processing of your personal data, you can contact us at soporte@nuvlo.app.

2. Data we collect

We collect only the data necessary to provide the service:

• Account data: name and email address.
• Financial data: information you voluntarily enter, such as income, expenses, categories, and debts.
• Usage data: basic technical information such as device type and in-app navigation events, collected in aggregate and anonymously via Vercel Analytics.

We do not collect payment data, card numbers, or direct banking information.

3. Purpose of processing

We use your data to:

• Create and manage your account.
• Provide the app's features (budget, debts, analysis).
• Send you service-related communications when necessary.
• Improve the app through aggregated usage analysis.

4. Legal basis for processing

The processing of your data is based on the performance of the service contract you accept upon registration. Usage data processing is based on our legitimate interest in improving the product.

5. Storage and security

Your data is stored in Supabase, a platform with encryption in transit (TLS) and at rest. Access to data is restricted to the Nuvlo team and only to the extent necessary for support and service maintenance.

No security system is foolproof. In the event of a security breach affecting your data, we will notify you as soon as possible.

6. Data sharing

We do not sell or commercialize your personal data. We may share information with third parties only in the following cases:

• Service providers: Supabase (storage) and Vercel (hosting and analytics), who act under confidentiality agreements.
• Legal requirement: if a competent authority requires it in accordance with applicable law.

7. Your rights

You have the right to:

• Access the data we hold about you.
• Rectify incorrect or incomplete data.
• Delete your account and all associated data. You can do this from the Profile section in the app, or by contacting us.
• Object to the processing of your data in specific cases.
• Portability: request a copy of your data in a readable format.

To exercise any of these rights, contact us at soporte@nuvlo.app.

8. Data retention

We retain your data while your account is active. When you delete your account, we delete your personal data within a maximum of 30 days, unless a legal obligation requires us to retain it for longer.

9. Cookies and similar technologies

We use strictly necessary session cookies to maintain your authentication. Vercel Analytics collects usage metrics anonymously, without tracking individual users or using cross-site tracking cookies.

10. Changes to this policy

We may update this policy at any time. We will notify you by email if the changes are significant. The last updated date will always be visible at the top of this document.

11. Contact

Any question, complaint, or request related to your privacy can be sent to soporte@nuvlo.app. We are committed to responding within 5 business days.