In short
- We only store what you type yourself: email, name, and your money notes.
- We never ask for bank account access, bank passwords, or contacts. Location is only requested if you want to buy a plan (see below).
- Your notes can only be seen by members of your space, for wallets you made shared. A private wallet is yours alone.
- Lock-screen notifications never show amounts.
- Your data is not merchandise. Not sold, not used for ads.
What you give us
Used to sign in, without a password. Each time you sign in we email you a one-time code. The same email is used for space invitations and, if you turn it on, the monthly summary.
Display name
The name you type yourself. This is what your partner sees in the app, for example in "by Sarah".
The content of your notes
Wallets, transactions, transfers, budgets, savings goals, bills, categories, and space settings. All typed by you. If you use receipt scanning, the photo is sent to a third-party AI service (via OpenRouter) only to read its contents. We do not store the photo, and you check the result before it is saved.
Notifications
If you allow it, we store your device address to send push notifications. You can switch off each type at any time in settings.
What we never ask for
- Access to bank accounts, e-wallets, or cards. There is no bank-connect feature, on purpose.
- Bank passwords or secret codes from your bank. If anyone asks for these in NotoArta's name, it is not us.
- Your contact list or anything else on your phone.
Location
Location is only requested if you want to buy a plan, and it is optional. It is used to work out your payment country. If you allow it, your coordinates and IP address are sent to BigDataCloud to check the country. We only store your payment region, not the coordinates.
Who can see your notes
- Members of your space can see shared wallets, transactions in those wallets, shared budgets, shared goals, and shared bills.
- A private wallet is visible only to you. If you move money from a private wallet to a shared one, only the category shows, never the contents of your private wallet.
- We do not read your notes. If you ask for help and we need to look at something, we tell you first.
Notifications and amounts
A lock-screen push only names the event, such as "Arif logged a new transaction" or "The Food & Drink budget is nearly used up". The amount appears once the app is open. The monthly summary by email does contain amounts, and is only sent if you turn it on yourself.
Where the data lives
On a third-party database service (Supabase) that we rent. They store it, we control who may see what. The feedback board on the Feedback page uses a separate service (Featurebase), so what you post there is stored with that service.
Visit statistics for this site
The notoarta.com website (not the app) uses Vercel Web Analytics to count visits: which pages are opened, from which country, on a phone or a laptop, and from which link. No cookies, and the data is not used to identify you. If you arrived through a tagged link (such as a social post), the tags are passed to the app when you sign up, so we know which post brought you. Nothing from your notes in the app is ever included.
Statistics inside the app
The app uses PostHog to see which features are used and where things go wrong, so we know what to fix. Only general events are recorded, such as "created a transaction" or "opened the budget page", linked to your account. Amounts, the content of your notes, wallet or category names, and anything you type are not included.
Your rights over your data
Under Indonesia's Personal Data Protection Law, you may ask for a copy of your data and ask for your account and its contents to be deleted. You can also leave a shared space: notes you already wrote in shared wallets stay for the other members, because they are household records, not personal ones.
Send your request to workwithwilyan@gmail.com from the email you use to sign in.
If something changes
If the way we store or use data changes, we update this page and change the date. Important changes are announced in the app.