Privacy Policy

NUMIO INC. is responsible for personal information under its control that is handled through the Numio websites, applications, household budgeting workspace, optional connected services, and related features. We use service providers to help authenticate users, store and process data, operate analytics, and support optional connected or AI-assisted features.

Questions, access requests, correction requests, deletion requests, export requests, and privacy complaints can be sent to legal@numio.ca or mailed to Toronto, Ontario, Canada.

The information we collect depends on how you use the Service and which features you enable.

• Account and identity data, such as your name, email address, authentication identifiers, and profile details.
• Household workspace data, such as household name, invite status, member role, settings, and tier-related information.
• Financial workspace data, such as manually entered accounts, balances, budgets, goals, categories, transactions, recurring items, and insight or review states.
• Connected-bank data, such as institution name, connection identifiers, account details, balances, and transaction data received through Flinks when connected banking is enabled.
• Device and usage data, such as IP address, browser or device details, log data, and product usage or performance data collected through our analytics and infrastructure providers.
• Communications data, such as support requests, feedback, and our responses.

We collect personal information directly from you when you sign up, complete onboarding, create or join a household workspace, enter data, connect services, request support, or otherwise interact with the Service.

We may also receive information from your household collaborators, Clerk for authentication and session handling, Flinks and participating financial institutions when you choose connected banking, and analytics or infrastructure providers that help us operate the Service.

We use personal information to operate, secure, and improve the Service and to provide the features you request.

If we send promotional messages, we will do so in accordance with applicable law and provide unsubscribe options where required.

• Authenticate users, maintain sessions, and protect accounts and the Service.
• Create, administer, and support household workspaces, invites, onboarding, and settings.
• Store, sync, calculate, and display budgets, accounts, balances, transactions, goals, and related planning data.
• Operate AI-assisted categorization, suggestions, summaries, and insight features.
• Respond to support requests and send service-related notices.
• Monitor reliability, prevent misuse, investigate incidents, and improve product performance.
• Comply with legal obligations and enforce our terms and policies.

We disclose personal information to service providers and subprocessors that perform services on our behalf, such as Clerk for authentication, Convex for application data and backend operations, Vercel for hosting and analytics, Flinks for connected-bank linking when enabled, and AI infrastructure providers used to generate or route AI-assisted features.

We may also disclose information when you direct us to do so, within your household workspace, in connection with a merger, financing, or sale of assets, or when required or permitted by law, including to protect rights, safety, or the Service.

AI-assisted features use selected financial workspace context to categorize transactions, summarize trends, and generate suggestions or insight text. Depending on the feature, this may include merchant names, transaction amounts, categories, dates, household budget context, and related planning signals needed for the request.

AI output is generated statistically, may be inaccurate, and should be reviewed by a human before you rely on it. We do not use AI output as a substitute for professional advice.

If you enable connected banking, Numio may receive account, institution, balance, and transaction information from Flinks and participating financial institutions. Connected banking is optional and may not be available to every user, institution, plan, region, or environment.

We use connected-bank data to populate and update your workspace, support sync and status messaging, and power related categorization, review, and insight features.

The Service uses authentication cookies or similar browser technologies provided by Clerk to sign you in, maintain session security, and complete identity-related flows.

We also use functional browser storage, including local storage, to remember settings such as theme preference and to help complete invite or onboarding handoffs. Vercel Analytics collects limited usage and performance information so we can understand product activity and reliability.

We retain personal information for as long as reasonably necessary to provide the Service, maintain the household workspace, comply with legal obligations, resolve disputes, enforce agreements, and protect the Service.

Retention periods vary depending on the type of information and our operational needs. When personal information is no longer required, we will delete it, de-identify it, or securely isolate it in backups until deletion is feasible.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including authenticated access controls, provider security features, and reasonable restrictions on internal access.

Because we use service providers, personal information may be processed or stored outside your province or outside Canada, including in the United States or other jurisdictions where our providers operate. Personal information in those jurisdictions may be accessible to courts, law enforcement, or regulators under local law.

Subject to applicable law, you may request access to, correction of, deletion of, or export of personal information we hold about you, or withdraw consent where consent is the legal basis and withdrawal is available.

At this time, these requests must be made through legal@numio.ca; self-serve privacy tooling may not be available in the product. We may need to verify your identity and may decline or limit a request where permitted by law, including when information must be retained for security, legal, or operational reasons.

Residents of Quebec and other Canadian jurisdictions may have additional rights under applicable law. If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.

The Service is not directed to children and is intended for people who have reached the age of majority in their place of residence.

If you believe a minor has provided personal information in violation of these rules, contact us so we can investigate and take appropriate steps.

We may update this Privacy Policy from time to time. When we do, we will post the updated version, change the effective date, and, if the changes are material, provide additional notice where reasonably appropriate.

If you have questions about this Privacy Policy, contact legal@numio.ca or write to NUMIO INC. at Toronto, Ontario, Canada.