Koodu Privacy Policy

Usage counts

Where monthly allowances apply, we retain usage counts and request identifiers for the current month and the preceding two months. These counters do not contain document contents or chat prompts. Allowances apply across your devices. Personal usage records are removed with the account.

Google Analytics

On the public Koodu website, Google Analytics loads only after you accept analytics. Google processes public page views, a pseudonymous browser identifier, and technical browser and device information to provide usage reports. This integration does not send finance or account data.

Use Cookie settings to reject analytics or withdraw consent. The Cookie Policy explains the cookies, stored choice, and controls. Google explains its processing at https://policies.google.com/privacy.

Controller and contact

Operator: NEST OF MANY LTD. Registered in Scotland, company number SC904393. Registered office: 48, Floor 2 West George Street, Glasgow, United Kingdom, G2 1BP. Contact: support@nestofmany.com.

Separate Nest of Many policies

Nest of Many social media content and the Nest of Many website have separate terms, privacy, and cookie information. This policy is for Koodu.

Account and identity information

• Name, email address, login identifiers, authentication provider details, profile settings, app mode, onboarding status, subscription status, and support identifiers.
• Information you provide when you contact us, request support, join a waitlist, submit feedback, or ask to be notified about launch updates.

Finance tracker information

• Accounts, balances, transactions, categories, budgets, subscriptions, bills, goals, notes, imported files, statement data, receipt data, and related metadata that you enter, import, or connect.
• Financial information is not normally special category data under UK GDPR, but we recognise that it can be highly sensitive and we treat it with care.

App, device, and technical information

• Device type, operating system, browser, app version, approximate region, language, theme, currency, logs, diagnostics, error reports, feature flags, and security events.
• Local browser or app storage such as localStorage, sessionStorage, IndexedDB, cache storage, or similar technologies used to keep Koodu working.

Payments and subscriptions

Paddle is the merchant of record for web subscriptions and processes payment and buyer information under its own privacy notice at https://www.paddle.com/legal/privacy. Koodu receives billing identifiers, plan and payment status, renewal information and limited billing metadata to provide access and support. We do not receive your full card number. Native companion apps do not process subscription purchases.

AI inputs and outputs

If AI-assisted features are enabled or requested, Koodu may process prompts, selected transaction or budget details, categories, summaries, files, and AI outputs to generate insights. We aim to minimise the information sent and avoid unnecessary identifiers where practical.

Service purposes

• To provide budgets, transaction tracking, subscription tracking, goals, dashboard insights, imports, exports, reminders, and app settings.
• To create and manage accounts, authentication, onboarding, subscriptions, payments, support, security, and user preferences.
• To generate AI-assisted explanations, summaries, and suggestions when requested or enabled.
• To maintain, troubleshoot, secure, test, and improve Koodu.
• To send service messages, account notices, subscription notices, launch updates you asked for, and legal updates.
• To comply with legal obligations, respond to lawful requests, enforce terms, and protect rights.

Lawful bases

We rely on contract to provide accounts, workspaces and subscriptions; consent for optional analytics and the optional AI processing you enable; legal obligations for required billing records and lawful requests; and legitimate interests for security, troubleshooting and support. Legitimate interests may include keeping Koodu secure, improving features, responding to support requests, preventing abuse, and protecting our rights, provided those interests are not overridden by your rights.

Where we rely on consent, such as for certain optional cookies, marketing, or optional AI processing where required, you may withdraw consent at any time.

Service providers

Our providers include Supabase for authentication and application data, Google Cloud for hosting and Vertex AI, Resend for service email, and Paddle for billing. Optional Google or Facebook sign-in involves the provider you choose. Optional website analytics and brand-logo requests are described separately below. Providers receive the information needed for their role; cloud storage of encrypted vault records does not give them the vault decryption key.

The websites currently load fonts from Google Fonts. Your browser contacts Google to retrieve the font files, which exposes technical connection information such as your IP address. This is separate from optional Google Analytics.

We do not sell your personal information.

Optional brand logos

Online brand logos load automatically where supported. Your device requests known or user-selected merchant and account-provider logos directly from Brandfetch. Brandfetch receives the requested brand domain, your IP address, browser information and the app web origin. We do not send transaction descriptions, amounts, balances, account names or account numbers in these requests.

The optional global brand picker sends only the company name you explicitly enter to Brandfetch, along with connection information. Search results are temporary; only the website you select is saved with your encrypted transaction. There is no separate logo switch. Brands without a matching website or available artwork use bundled icons, category icons or initials. Brandfetch handles connection data under its privacy policy at https://brandfetch.com/privacy. Online logos may be unavailable in some native environments.

AI providers

Optional receipt extraction, statement imports and Assistant requests send the selected document or relevant financial context and your question to Google Vertex AI for processing in the configured EU region, europe-west4 (Netherlands). The provider can read that content for the requested operation; this processing is separate from end-to-end encrypted vault storage. Account-specific AI permission can be withdrawn in Settings to stop future requests. Withdrawal does not undo processing already performed. EU model processing does not mean all account, support, billing or technical data stays in the EU.

Legal and safety reasons

We may disclose information where required by law, to respond to valid legal requests, to protect users, to prevent fraud or security issues, to enforce our terms, or in connection with a business transfer or restructuring.

Local-first and cloud storage

Koodu keeps an encrypted device copy and syncs encrypted financial record contents to your cloud workspace. Your passphrase and generated offline recovery key protect access; save the recovery key outside Koodu. A login password reset cannot decrypt the vault. Losing both vault credentials means we cannot recover encrypted records. Confirmed offline-key recovery replaces this device’s copy and deletes unsynced changes and old local recovery copies. Clearing browser storage can also lose unsynced data. Exported files and copies on other devices are not remotely erased.

Security

We use reasonable technical and organisational measures designed to protect personal information, including access controls, encrypted connections where appropriate, limited access, and security-minded development practices. No service can be guaranteed completely secure.

Retention

Optional setup analytics records coarse onboarding milestones, errors, platform and interface language after consent. A random journey identifier is linked to your account after sign-in to measure subscription conversion. We do not record form entries, passwords, verification codes, vault keys or financial records in these analytics. Journey records expire after 90 days and account-linked journeys are deleted with the account. You can stop future collection in Settings → Cookie settings; previously collected records follow this retention period.

Financial records remain while needed to provide your workspace or until deleted. Account deletion revokes access and starts server-managed erasure, including ordinary account-linked support messages unless a documented hold applies; local reset alone does not delete your cloud account. Requests sent without signing in or from another email address can be located by support. Application logs retain three calendar months; usage counters retain the current and preceding two months; resolved support messages retain twelve months; administrative audit and completed erasure records retain six months. Open requests, failures and documented legal holds can require longer retention. Encrypted backups expire under their configured retention schedule; deletion records are reapplied during restore. Necessary billing records may be retained separately for accounting, disputes or legal obligations. Contact support for applicable backup and billing retention details.

International transfers

Some providers may process information outside the UK or European Economic Area. International processing requires applicable transfer safeguards, such as adequacy decisions or approved contractual clauses. Contact support for details of the safeguards applying to your information.

Rights you may have

• Access a copy of personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete information in certain circumstances.
• Ask us to restrict processing in certain circumstances.
• Object to certain processing, including processing based on legitimate interests.
• Ask for data portability where this right applies.
• Withdraw consent where we rely on consent.

How to exercise rights

Use in-app controls where available or contact us through official Koodu support channels. We may need to verify your identity before responding. Some rights are limited, for example where we must keep records for legal, security, or dispute reasons.

If you are in the UK, you can complain to the Information Commissioner's Office. We would appreciate the chance to help first where possible.

Children

Koodu is not intended for children to create accounts or submit personal information without appropriate parental or guardian involvement. If you believe a child has provided personal information without permission, contact us so we can review it.

Changes to this policy

We may update this Privacy Policy as Koodu grows, adds features, changes providers, or legal requirements change. We will post the latest version on this page with a new updated date and bring significant changes to your attention where appropriate.

Contact

For privacy, account deletion or support enquiries, email support@nestofmany.com. Do not include passwords, vault keys or full payment-card details.