Version 2026-08-15
This explains what data NucleoOS stores, where it lives, who can see it, and how to take it out or delete it. Plainly, because there is sensitive information here: your spending and your bank documents. Last updated: 15 August 2026.
About your account: your email address and the date you accepted these documents. We do not store your password ourselves; our authentication provider handles it encrypted.
What you record: expenses, income, categories, tags, accounts, cards, debts, goals, habits, notes, practices and everything else you write in the app.
What you upload: photos of receipts, bank statements and any file you attach. These are the most sensitive data in the service and are treated as such.
If you connect your bank: the transactions and balances your bank provides through Plaid. NucleoOS never sees or stores your bank credentials: those are typed inside Plaid's own window and never pass through us.
Minimal technical data so the service works and to detect abuse: error logs and usage counters for the AI features.
On Supabase, which hosts the database and files on servers in the United States. The application is served from Vercel.
If you live outside the United States, this means your data is transferred and processed there. By using NucleoOS you accept that transfer.
Files you upload sit in private storage: they are not reachable through a public link and each user can only reach their own.
You, always. Other users, never: the database applies row level rules that make it impossible for one person to see another's data, even if they try.
And here is the part almost nobody writes down: whoever operates NucleoOS has technical access to the database and the storage, because they administer the infrastructure. That access exists to keep the service running, to back it up, and to solve a specific problem you report. It is not used to look at your data out of curiosity, it is not shared with anyone, and it is not used for commercial purposes.
If we ever need to enter your account to solve something you reported, we will ask you first.
Supabase: database, accounts and storage of your files.
Vercel: delivery of the application to your browser.
Plaid: connection to your bank, only if you turn it on. Plaid has its own privacy policy and its own relationship with you.
Google (Gemini): reads your receipt photos, your PDF statements and your meal photos to extract the data. What is sent is the image or the file and nothing else. Google does not use that content to train its models under the access tier we use.
Telegram: only if you connect the conversational coach. Messages you write to it pass through Telegram.
Resend: sending service emails, such as confirmations and notices.
None of them receive your data to sell it or to advertise.
While your account is open. When you close it, we delete your data and your files within 30 days.
Automatic database backups may keep copies for up to 30 additional days before they rotate out. After that nothing remains.
Access: see and download everything of yours, at any time and without asking, from Settings.
Rectification: correct what is wrong. You can edit any record from within the app.
Erasure: delete a single record, or your whole account with everything in it, from Settings.
Portability: take your data in a standard file you can open or load elsewhere. It is the same download button.
Objection: ask us to stop processing your data for something specific. Write to us and we will.
Ask what we hold about you and why. Write to hola@nucleoos.app and we answer within 30 days.
If you live in Canada and are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Chile, you can complain to the Personal Data Protection Agency created by Law 21.719. If you live in the European Union, you keep the rights your own law gives you.
Empirogy is the controller of your personal data and decides what it is used for and how.
To exercise any of your rights, to ask a question or to file a complaint, write to hola@nucleoos.app. Every request is answered within 30 days.
Everything travels encrypted. External service keys live on the server and never in your browser. The database's row level rules are the last line: even if someone obtained the app's public key, they could not read anyone's data.
No measure is perfect. If a breach ever affects your data, we will notify you and the relevant authority within 72 hours of detecting it, and tell you what happened, which data was affected and what we are doing about it.
The notice goes out even if we are not sure of the full scope yet. Waiting for the complete picture before telling you is waiting too long.
NucleoOS is not aimed at people under 16 and we do not knowingly collect their data.
If we change something important, we will show it inside the app before it keeps applying.