Privacy policy
NOMIA is an app that reads fiscal receipts and helps you understand your spending. This policy explains what data we collect, why, who processes it and what control you have.
01Who we are
NOMIA is operated by Aldo Bardulla, sole trader, NUIS M31605510F, Durrës, Albania. For any question about your data, write to abardulla002@gmail.com.
02What we collect
Only what the service needs:
- Account data: email address, name and password (stored as a hash), or your identity from a third-party sign-in provider if you choose one.
- Receipts: the photo of the receipt and the information read from it — merchant, date, items, VAT, total and fiscal identifiers.
- Your entries: manual expenses, recurring expenses, goals, currency and language.
- In-app assistant: the questions you ask and the answers you receive.
03Why we process it
To read receipts, organise them into categories, compute summaries and give you suggestions. The legal basis is the contract between you and NOMIA (providing the service) and, for AI-assisted features, the consent you give when creating your account.
We do not use your data for advertising and we do not sell it.
04Who processes your data
NOMIA uses a small number of service providers, each receiving only what its task requires:
- optical character recognition (reading text from receipt photos);
- AI language models (structuring receipt text and answering assistant questions);
- cloud storage (receipt photos);
- transactional email (password resets and account notices);
- third-party sign-in, only if you choose it.
Providers are bound by data-processing agreements. The current list of providers is available on request at abardulla002@gmail.com.
05How long we keep it
For as long as your account exists. When you request deletion, the account is deactivated immediately and permanently deleted after 30 days, during which you can cancel the request.
06Your rights
Under Albanian Law no. 124/2024 on personal data protection and, where applicable, the GDPR, you have the right to:
- access and export your data from the app;
- correct inaccurate data;
- request deletion of your account and data;
- withdraw consent to AI-assisted processing by closing your account;
- lodge a complaint with the Commissioner for the Right to Information and Personal Data Protection (idp.al).
07Security
Passwords are stored only as hashes. Sign-in uses short-lived tokens. Receipt photos are served through temporary links. No system is completely secure; if an incident affects your data, we will notify you as required by law.
08Changes and contact
If this policy changes, the date above changes and the new version is published here. Questions: abardulla002@gmail.com.