Nook Finances Privacy Policy

1. Introduction

Welcome to Nook Finances ("Nook," "we," "us," or "our"), a personal finance software-as-a-service platform operated by Nook Finances LLC, a Florida limited liability company. This Privacy Policy explains how we collect, use, store, protect, and share your personal and financial information when you use our website located at nookfinances.com and our related services (collectively, the "Platform").

By creating an account or using the Platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

This policy should be read together with our Terms of Service, which governs your use of the Platform.

2. Who This Policy Applies To

This Privacy Policy applies to all users of the Nook Finances Platform. Our Platform is intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, you may not create an account or use the Platform directly, including as an invited member of a Circle or Network Plan.

If we become aware that we have inadvertently collected personal information from a user under the age of 18, we will promptly delete that information from our records. If you believe we may have collected information from a minor, please contact us at security@nookfinances.com.

3. Information We Collect

3.1 Account Information

When you create a Nook account, we collect:

• Your full name
• Your email address
• A hashed and salted password (we never store your password in plain text)
• Account creation timestamp, last login information, and authentication events
• One-time passcode (OTP) verification records and trusted-device fingerprints (a hashed device identifier, browser/OS metadata, and the date you marked the device as trusted) used to secure logins
• On iOS, if you choose to share it through Apple's age-range feature, only the lower bound of your age range (for example, "18+"), used solely to confirm you meet our 18+ requirement — never your date of birth
• Your profile photo, if you add one

3.2 Financial Data via Plaid

Nook uses Plaid Technologies, Inc. ("Plaid") to connect your financial accounts. When you link a financial account through Plaid, Nook may receive and store the following categories of financial data:

• Account balances (checking, savings, investment, credit, loan)
• Transaction history (payee name, amount, date, merchant category, and Plaid-supplied enrichments)
• Investment holdings, investment transactions, securities metadata, and cost basis where provided by your institution
• Loan and credit-card details where provided (for example, balances, interest rates, minimum payments, and due dates)
• Account metadata (institution name, account type, last four digits of account number) and the account-holder name(s) returned by Plaid, which we use to confirm that the accounts you link belong to you
• A Plaid access token, which we store encrypted at rest and use solely to refresh your data on your behalf

Important: Nook is a read-only platform. We do not and cannot initiate, authorize, or modify any financial transactions on your behalf. Your financial credentials (e.g., bank username and password) are entered directly into Plaid's secure interface and are never transmitted to, seen by, or stored by Nook.

Your use of Plaid's services is also governed by Plaid's Privacy Policy. By connecting your financial accounts through Nook, you acknowledge and agree to Plaid's data practices in addition to ours.

3.3 Derived and Computed Data

From the data above, Nook computes and stores derived metrics — for example, monthly cashflow snapshots, monthly summaries of your cash flow, net worth and investments, net-worth history, recurring-transaction and bill detections, savings rate, debt categorization, spending plans and budgets you create, category rules, health scores, and goal progress. These derived metrics are treated with the same confidentiality as the underlying financial data.

3.4 Device and Technical Information

When you access the Platform, we automatically collect certain technical information, including:

• IP address (we do not derive your location from it)
• Browser type and version, operating system, and device type
• Pages visited, time spent on pages, and navigation patterns within the Platform
• Referring URLs and basic error/diagnostic logs
• Crash and error reports (the error message, the screen it happened on, app version and platform, and — if you are signed in — your account identifier), and security records such as rate-limit and sign-in events, which include your IP address

This information is used to operate and improve the Platform, diagnose technical issues, and ensure security. We do not use third-party behavioral-analytics or session-recording tools. On our public website pages that you visit before signing in, we use the Google Ads tag to measure our own advertising campaigns (see Section 9); it never loads on signed-in pages or in our mobile apps.

3.5 AI Features and Background Insights — Only With Your Consent

AI features (the AI chat, the Wealth Coach, written insights on the Trends page, the AI Insight notes on the Wealth page, AI-written health-score and Circle briefing text, and AI-composed spending insights) are optional and run only after you allow them on a consent screen that explains what is shared and with whom. You can turn AI features off at any time in Settings › AI features; from then on, no further data is sent to AI providers for you. You can use Nook without AI.

When AI features are on, Nook sends a minimum-necessary summary of the relevant financial data (for example, balances, transaction categories and totals, merchant names, investment holdings and their values, goals) and what you type to the AI model providers that generate the response: OpenAI (GPT models) and Google (Gemini models), both through our hosting provider's AI gateway, and Anthropic (Claude models, for background spending insights). Your permission covers only the providers named on the consent screen when you gave it: if we add a provider, we ask again before any of your data is sent to it. We keep a record of each choice you make on that screen (allowed, not now, or turned off) and when you made it. We never send your bank login or full account numbers. Nook does not use your data to train AI models. These providers handle the data they receive under their own terms, which we do not control, so we cannot promise how they use or retain it. Requests to OpenAI and Google pass through an AI gateway run by our hosting provider (see Section 5), which keeps a copy of each AI request and its response for up to 90 days so that failures can be diagnosed and the feature improved. Those copies contain the summary and the text described above; they expire on their own and are not removed earlier when you turn AI features off or delete your account. AI conversations are stored in your account so you can revisit them and are deleted when your account is deleted. Circle briefings are generated only if every member of the Circle has allowed AI features.

Separately from AI, Nook runs a background-insights worker on a recurring schedule that computes outputs such as anomaly detection, cashflow forecasts, Monte Carlo net-worth projections, internal-transfer detection, tax-loss-harvesting candidates, portfolio drift and concentration warnings, realized-gain summaries, and reference market data (e.g., S&P 500 history). It runs on cloud infrastructure we control (Google Cloud), processes the same minimum-necessary data, and writes its outputs back to your account, where they follow the same retention and deletion rules as the rest of your data. Only its AI-composed insights involve an AI provider, and only with your consent.

3.6 Subscription and Billing Information

If you subscribe to a paid tier on our website, our payment processor (currently Stripe, Inc.) collects and processes your payment method on our behalf; subscriptions bought in our mobile apps are handled by Apple or Google (see Section 3.9). Nook does not store your full card number or other sensitive payment credentials. We retain a Stripe customer reference, your subscription tier, billing status, trial eligibility, and renewal/cancellation timestamps for the purposes of providing the service and complying with tax and accounting obligations.

3.7 Circle / Circle or Network Plan Data

If you create or join a Circle or Network Plan, we additionally process: Circle membership records, invitation tokens (valid for 48 hours), the sharing choices you make for each member and for Circle totals (and their history), messages and media you send in Flow (Section 5.4a), comments or decisions you post within the Circle, and any data your fellow members have explicitly chosen to share with you. See Section 11 for how Circle data is governed.

3.8 Information You Provide Directly

We may collect additional information you voluntarily provide, such as support messages (your name, email address, and message, sent to our support inbox through the support form or by email), feedback submissions, profile preferences, savings goals, custom categorizations, Pulse poll and trivia answers, or correspondence with our team via email.

3.9 Mobile Applications (iOS and Android)

Our native iOS and Android applications run on the same platform and follow the data practices described throughout this Policy, with these differences: the mobile apps show no ads or sponsored content of any kind, and they load no advertising or analytics tags. Face ID / Touch ID is handled entirely by your device — Nook never receives biometric data, only whether the check succeeded. The camera, microphone, and photo library are used only when you choose to add a profile photo or send a photo or video in Flow. In connection with mobile use we additionally process the following limited categories of data:

• Subscription state via RevenueCat. RevenueCat, Inc. acts as our subscription-management service provider and receives your Supabase user identifier (a random UUID) as an anonymous app-user ID, the active subscription tier, and purchase and renewal events derived from the Apple or Google receipt. RevenueCat does not receive your financial account data, balances, transactions, or holdings.
• Merchant of record. On iOS and Android, the actual transaction is processed by Apple Inc. (App Store) or Google LLC (Google Play) as the merchant of record under their own terms and privacy policies. Nook does not see, receive, or store your payment card, Apple ID, Google account credentials, or other billing details for mobile purchases.
• App Tracking Transparency. Nook does not track you across third-party apps or websites for advertising purposes, does not use third-party advertising SDKs, and does not present the iOS App Tracking Transparency prompt.

3.10 Sign in with Apple and Google

If you choose to sign in using Apple or Google, we receive from the provider only the email address and, where you have agreed to share it, your display name. Apple's private-relay ("Hide My Email") address is fully supported; if you choose it, we treat the relay address as your email of record for all account communications. Identity-provider tokens are not retained beyond the duration required to complete the sign-in handshake; only the linkage between your Nook account and the provider identity is stored so subsequent logins succeed. Before deleting an account that uses Apple or Google sign-in, we ask the provider to confirm it is you; when you delete an account that uses Sign in with Apple, we also revoke Nook's authorization with Apple.

3.11 Tax Module Data

The optional Tax page within the Platform derives an illustrative federal estimate from Plaid-supplied income, dividend, interest, and cost-basis data already present in your account. Cost basis and income classification are best-effort and may be incorrect, missing, or stale; the Tax page does not transmit anything you view or generate to the Internal Revenue Service, any state tax authority, or any third-party tax-preparation service. See Section 8.5 of the Terms of Service for the full disclaimer that governs your use of the Tax page.

3.12 Paper Trading and Simulated Features Data

If you use the paper-trading simulator, we store your simulated portfolio (practice cash balance, simulated positions, orders, and trade history) and your watchlist. This data is entirely synthetic — it involves no real money and is stored separately from, and never linked to, your real financial data. Market quotations shown in simulated features are cached, shared reference data supplied by third-party market-data sources and are not personal to you. Lottery-simulator tickets you choose to save (your picked numbers and the draw they are for) are stored in your account so you can check them later; nothing in the lottery simulator involves real money or a real lottery entry.

3.13 Financial Institution and Card Identifiers

When you link an account, Plaid provides identifying details we store to present your accounts back to you: the institution name, the account or card product name, the account type and subtype, and the last four digits (mask) of the account or card number. We use these details only to label and organize your own accounts within your view. We never store or have access to your full account or card number, PIN, expiration date, or security code. Any color or design the Platform applies to a card is our own generic styling for recognition and is not an official card image. See Section 7.5 of our Terms of Service for how we handle third-party names and marks.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Platform and its features
• To authenticate your identity, deliver login one-time passcodes, manage trusted devices, and maintain the security of your account
• To display your linked financial account data, balances, transaction history, holdings, and derived metrics
• To generate AI-assisted insights, summaries, reports, and answers — only when you have allowed AI features — and to run Playground simulations at your request
• To compute optional anonymized benchmark percentiles for users who opt in
• To process subscriptions, trials, billing, and refunds
• To facilitate Circle or Network Plan invitations, consent records, and Circle visibility according to each member's chosen sharing scopes
• To improve, personalize, and expand the Platform and user experience
• To communicate with you about your account, service updates, security alerts, and support requests, and to answer messages you send through the support form
• On our website only, to show contextual sponsored content to Free tier users (never in our mobile apps)
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues
• To comply with applicable legal and regulatory obligations
• To enforce our Terms of Service and other applicable policies

We do not use your financial data to make lending decisions, sell financial products, generate credit scores, target behavioral advertising, or engage in any activity that would require registration as a financial advisor, broker-dealer, or investment adviser under applicable law.

5. How We Share Your Information

We respect your privacy. We do not sell, rent, or trade your personal information, and we do not share it with data brokers or behavioral-advertising networks. We may share your information in the following limited circumstances:

5.1 Plaid Technologies, Inc.

We share account-linking information with Plaid to enable the connection between your financial institutions and the Platform. Plaid acts as a data processor on our behalf and is contractually bound to handle your data in accordance with applicable law.

5.2 Service Providers

We share information with trusted service providers who operate parts of the Platform for us, each only as needed for its function and under contract to protect it:

• Hosting, database, sign-in, and server functions: Supabase, provided through Lovable Cloud (Lovable Labs)
• Background-insights worker hosting: Google Cloud
• Transactional email (sign-in codes, invitations, support messages): Lovable's email service and its delivery providers
• AI models (only if you allow AI features): OpenAI (GPT) and Google (Gemini), both via Lovable's AI gateway, and Anthropic (Claude)
• Payments and subscriptions: Stripe (website), RevenueCat (subscription management), and Apple and Google (merchants of record for in-app purchases)
• Bot protection on the support form: Cloudflare Turnstile
• Sign-in providers you choose: Apple and Google
• Market data for the Playground (such as Finnhub and Yahoo Finance) — these receive no personal data

All such providers are contractually obligated to use your information only to provide their services to us and to protect it appropriately.

5.3 Sponsored Content (Website, Free Tier Only)

Our iOS and Android apps show no ads or sponsored content to anyone. On our website, users on the Free tier may see sponsored placements. These placements are contextual only — they are not personalized based on your financial data, transactions, balances, or behavior. We do not share your personal information with sponsors or advertising networks for targeting, retargeting, profiling, or measurement. Some sponsored content is served directly by Nook from its own inventory and matched only to the general topic of the page you are viewing (for example, an investing page); no third party receives your information in order to show it to you. If you choose to tap a placement, you leave Nook and open the sponsor's own site in your browser.

5.4 Other Members of Your Circle or Network Plan

If you join or create a Circle or Network Plan, the data you have explicitly consented to share — and only that data — becomes visible to other members of your Circle according to the consent scopes you select. You may revoke any scope at any time from Settings, with effect as described in Section 11.

5.4a Circle Messaging ("Flow")

The Circle or Network Plan includes Flow, a private messaging feature between members of the same circle. Messages, photos, and videos you send through Flow are stored on our infrastructure, are visible only to you and the member you send them to, and are protected by the same row-level security as your financial data. Photos are re-encoded on your device before upload, which removes embedded metadata such as location (EXIF/GPS). When a member leaves or is removed from a circle, that member's entire message history in the circle — including media — is permanently deleted for all participants; rejoining starts a new, empty conversation. Do not share account credentials, card numbers, or other sensitive authentication data through Flow. Nook does not review message content; to report abuse, contact support. Messages are not end-to-end encrypted; they are encrypted in transit and at rest.

5.5 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of Nook, our users, or the public; or (c) detect, prevent, or address fraud or security issues.

5.6 Business Transfers

If Nook Finances LLC is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will notify you by email and/or a prominent notice on the Platform of any such change in ownership or control of your personal information, and you will have the opportunity to delete your account prior to any such transfer.

5.7 Third-Party AI Assistants You Authorize

The Platform may allow you to connect Nook to a third-party AI assistant or application of your choosing so that it can read your Nook data to answer your questions (for example, a general-purpose AI assistant that you ask about your finances). This connection is optional, is initiated only by you through an explicit authorization (consent) screen, and is limited to read-only access — a connected assistant can never move money, place trades, change your settings, or write to your account. You may revoke a connection at any time.

When you authorize such a connection, the data you request is shared with that third party at your direction. Once your data reaches a third-party assistant, that third party's own privacy policy and practices govern how it handles the data; Nook does not control, and is not responsible for, the third party's use of information you direct us to share with it. Only connect assistants you trust.

5.8 No Sale of Personal Information

Nook does not sell personal information. This applies to all users, including residents of California under the CCPA/CPRA and residents of other jurisdictions with similar protections. Sharing your data with a third-party AI assistant that you yourself authorize (Section 5.7) is a disclosure at your direction, not a sale.

6. Data Storage and Security

6.1 Storage

Your account information and financial data are stored on secured infrastructure operated by our cloud hosting provider. We implement industry-standard technical and organizational security measures, including encryption in transit (TLS), encryption at rest, application-level encryption of Plaid access tokens (AES-256-GCM), row-level access controls, audit logging, and regular security reviews.

6.2 Authentication Safeguards

We require email-based one-time passcode (OTP) verification at login by default and offer an optional 7-day "trusted device" bypass that you can revoke at any time. The Platform also enforces a 5-minute idle Privacy Lock that obscures financial data until you re-authenticate.

6.3 Security Limitations

While we take data security seriously and implement reasonable safeguards, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law, including the Florida Information Protection Act (FIPA) and any other applicable breach notification requirements.

6.4 Your Responsibility

You are responsible for maintaining the confidentiality of your account credentials, the security of your email account (which receives login OTPs and account-deletion confirmations), and the trusted-device list associated with your account. Notify us immediately at security@nookfinances.com if you suspect unauthorized access.

7. Data Retention and Deletion

7.1 Retention

We retain your personal and financial data for as long as your account is active or as needed to provide the Platform's services. We also retain data as necessary to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. If you use AI features, our hosting provider's AI gateway keeps its own copy of each AI request and response for up to 90 days (Section 3.5).

7.2 Account Deletion — Permanent and Immediate

You may delete your account and all associated personal data at any time from Settings › Delete account, in our apps or on our website. The flow requires you to type a confirmation word; accounts that use Apple or Google sign-in also confirm with that provider (this only confirms it is you — it never signs you in or creates an account). It completes only after the deletion has fully finished server-side; a brief on-screen countdown then returns you to the sign-in screen. No email round-trip is required.

Upon a successful deletion request, Nook will permanently and irreversibly delete your personal data, financial data, AI conversations, Playground scenarios, paper-trading portfolios, watchlists and simulated orders, Circle memberships, sharing choices, AI consent, and account information from our active databases. Plaid item access is revoked at the same time, and for accounts that use Sign in with Apple we revoke Nook's authorization with Apple. There is no soft-delete and no recovery.

The only record that remains following a deletion is a minimal audit log entry confirming that a deletion event occurred. This entry does not retain any of the deleted personal or financial data itself and is maintained for security and legal compliance purposes only. Subscription and billing records may also be retained by our payment processor as required by tax and accounting law.

We cannot delete data that has already been shared with Plaid, your financial institutions, or other third parties prior to your deletion request. You should contact those parties directly to request deletion of any data they may hold independently. This includes the copies of AI requests kept by our hosting provider's AI gateway, which expire on their own after up to 90 days (Section 3.5).

7.3 Data Portability — In-App Export

You may export a complete, portable copy of your Nook data at any time from Settings or the Reports page, in PDF, CSV, and/or JSON formats. The export covers your accounts, transactions, holdings, snapshots, goals, budgets, recurring charges, forecasts, insights, custom charts, notifications, and paper-trading data. Bank credentials, one-time codes, and security logs are never included in exports.

8. Your Privacy Rights

8.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your personal information (see Section 7.2)
• Opt out of any future marketing communications from us
• Withdraw your consent to AI features at any time in Settings › AI features

8.2 California Residents — CCPA/CPRA

If you are a California resident, you have the following additional rights:

• The right to know what personal information we collect, use, and disclose
• The right to delete personal information we have collected from you, subject to certain exceptions
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (Nook does not sell or share for cross-context behavioral advertising)
• The right to limit the use of sensitive personal information
• The right to non-discrimination for exercising your rights

To exercise these rights, contact us at security@nookfinances.com. We will respond within 45 days as required by law.

8.3 European Union / EEA / UK Residents — GDPR

If you are located in the EU, EEA, or UK, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Our lawful bases are: (a) performance of a contract; (b) legitimate interests (security, fraud prevention, Platform improvement); (c) legal obligation; and (d) consent for optional features such as benchmarks and AI features.

As Nook Finances LLC is based in the United States, your data may be transferred to and processed in the United States with appropriate safeguards. To exercise any of your GDPR/UK GDPR rights, contact us at security@nookfinances.com.

8.4 Florida Residents — FIPA

Nook Finances LLC is a Florida-based company and complies with the Florida Information Protection Act (Fla. Stat. § 501.171), including breach-notification requirements.

8.5 Financial Privacy — GLBA

To the extent the Gramm-Leach-Bliley Act applies to our collection and use of your financial information, we comply with its privacy and safeguards provisions. We do not share your nonpublic personal financial information with nonaffiliated third parties for marketing purposes.

9. Cookies, Local Storage, and Mobile Secure Storage

Nook uses cookies and similar technologies (such as browser local storage) to maintain your session, remember your preferences (including trusted devices, Privacy Lock state, appearance theme, your net-worth goal, and any manual adjustments you make on the Tax page — the latter live only on your device and are never written back to your financial records), and ensure the security and functionality of your account. On public website pages you visit before signing in, the Google Ads tag may set cookies so we can measure our own advertising campaigns; it does not load once you are signed in, and never in our mobile apps. We do not use cross-site behavioral tracking of signed-in users, and our mobile apps use no advertising or tracking technologies.

You may configure your browser to refuse cookies, but doing so may affect your ability to use certain features of the Platform, including staying logged in.

On our native iOS and Android applications, the same categories of data (session tokens, trusted-device records, Privacy Lock state, and user preferences) are stored using platform-native secure storage — the iOS Keychain and Android EncryptedSharedPreferences, accessed through the Capacitor Preferences API — rather than browser cookies. You can clear this data at any time by signing out, removing the trusted device from Settings, or uninstalling the application.

10. Links to Third-Party Sites

The Platform may contain links to third-party websites, including Plaid's interface, your linked financial institutions, and (on our website) sponsors shown to Free tier users. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of any third-party services you access.

11. Circle or Network Plan — Member-Controlled Sharing

A Circle Plan has up to 5 members and a Network Plan up to 10. Sharing in either is controlled by each member, person by person:

• Each member must individually link their own financial accounts via Plaid. No member, including the Circle host, can connect accounts on another member's behalf.
• Sharing with each person. For every other member separately, you choose which of these they may see: bank balances, debts, net worth history, investments, cash flow totals, transactions, savings goals, and health score — and whether they see your account names. Nothing is shared with a person until you turn it on for them, and you can change it at any time.
• Circle totals. Separately, you choose which of your figures count toward the Circle's combined totals. Others see only the combined numbers, not your individual figures, unless you have also shared them with that person.
• A member's login credentials, individual settings, trusted devices, AI conversations, and Plaid access tokens are never visible to other members under any circumstance.
• Turning a share off or leaving the Circle removes the affected data from other members' views right away. A history of sharing choices is kept for audit and legal compliance.

12. Anonymized Benchmarks

Nook offers an optional "Progress & Benchmarks" feature that computes anonymized percentile comparisons across opted-in users. If you choose to participate:

• Your financial metrics are included in aggregate statistical computations only
• No individual user's data is ever displayed to another user — only percentile buckets
• Benchmarks require a minimum cohort size to prevent re-identification
• You can opt out at any time via Settings, which immediately excludes your data from future computations
• Achievement badges and milestones are private to your account

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this dialog. For material changes, we will notify you by email and/or by a prominent notice within the Platform at least 30 days before the change becomes effective. Your continued use of the Platform after the effective date constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Nook Finances LLC
Security & Privacy Inquiries: security@nookfinances.com
Website: nookfinances.com
Mailing Address: 7901 4th St N, Ste 300, St. Petersburg, FL 33702