← Nona
➗Nona

Privacy Policy

Effective 2026-09-26

Nona records and settles trip expenses. There is no sign-up, and we never ask for your name, email or phone number. Records live on your device; records of shared trips pass through our server only after being encrypted on the device.

1. What we collect

  • We do not collect your name, email, phone number, contacts or location. There are no accounts, so we cannot identify you.
  • Trip records — trip name, dates and base currency, member names, expenses (amount, currency, payer, split, category, note), settlement status and app settings. By default they are stored only on this device.

2. Recording together (sync)

  • Only when you create an invite link for a trip are that trip's records stored on our sync server (nona-api.zuply.co.kr).
  • Records are encrypted on the device with AES-256-GCM before they are sent. The decryption key exists only inside the invite link and is never sent to the server, so neither the server operator nor the developer can read them. The server keeps a room identifier, a write-permission check value, the encrypted bytes and a sequence number.
  • Trips without an invite link never leave the device. Revoking the link blocks further joins, and rooms untouched for 180 days are deleted from the server.

3. Exchange rates

  • Rates are fetched once a day from open.er-api.com. The request carries no personal or trip data; as with any internet request, that service can see the connecting IP address.

4. Advertising and tracking

  • No ads, no advertising identifier, no tracking.
  • The app records usage events but they are stored only on the device and never transmitted. Amounts, member names, expense names and notes are never part of these records.

5. Deletion

  • Settings → Delete all data removes the records on this device. Deleting the app does the same.
  • For a shared trip, Delete room in the trip removes the encrypted records from the server immediately.

6. Children

  • Nona is not directed at children under 14, and we do not knowingly collect their information.

7. Changes

  • Any change is posted on this page with a new effective date.

8. Contact

  • divekimdev@gmail.com