Privacy policy

Last updated 20 October 2026

Numa Shared records shared household expenses. It does not move money, connect to bank accounts, sell data, or use data for advertising.

Controller and contact

Arseny Ovsyannikov, Spain, is responsible for this service. Privacy requests: support@numaworth.com.

Data used

Sign in with Apple: the account identifier and relay email, when Apple provides it.
Sign in with Google: the account identifier and email address Google provides.
Household membership, display names, expense and repayment records, and free text entered by members.
Device push token, notification preference, and security/session records needed to operate sync.
Crash diagnostics only under the build and consent settings disclosed in the app.

In the web app, a household you keep on your device is stored only in that browser’s storage until you sign in and share it. On web screens that offer Google sign-in, Google’s sign-in script is loaded from accounts.google.com, even if you don’t use it.

Importing a Google Sheet: your device downloads the sheet once, through the link you paste, and builds the household from it. The sheet itself is not sent to Numa Shared; the household made from it is treated like any other.

Why and how long

Data is used only for account access, shared-household sync, invitations, notifications, support, security, and legal compliance. Identifiers, authored free text, and push tokens are removed or redacted through account deletion. Shared arithmetic may remain for other members as their legitimate shared record. A household with only one member is deleted.

Where data is stored, processors and transfers

Shared households are stored by Convex, which provides the hosted database and functions, on Amazon Web Services servers in the United States (US East, Virginia). If you use Numa Shared from the European Economic Area, the United Kingdom or Switzerland, your data is transferred there. Convex Cloud processes data under the Convex Data Processing Agreement with appropriate safeguards for international transfers. Google provides sign-in for people who choose it. Apple provides sign-in with Apple and delivers notifications through the Apple Push Notification service, which receives your device’s push token and the notification text. The controller keeps processor terms and transfer safeguards under review.

Your choices and rights

You can export your data, hide amounts on your device, mute a household, sign out, and delete your account in the app. Depending on where you live, you may also request access, correction, erasure, restriction, portability, or object to processing. Pending-member names supplied by another person can also be anonymized after a verified request.

Age and tracking

Accounts are for people aged 13 or older, subject to a higher local minimum where required. No advertising or cross-app tracking is used.