The short version
- Neslet stores your account details and the money entries you and your family type in. That's it.
- We don't connect to your bank, show ads, use analytics or sell your data.
- Your entries are shared only with the members of your own household.
- You can export your data and delete your account from inside the app at any time.
1. Who we are
Neslet is a family budgeting app made in Bangladesh. In this policy, "Neslet", "we" and "us" mean the Neslet team, who are responsible for the personal information described here. You can reach us at muminulhoqchy@gmail.com.
2. What we collect
We only collect information you give us in the app, plus the minimum technical information needed to run it.
Information you give us
| Information | What it includes |
|---|---|
| Account | Your email address, your name, and a password. Passwords are handled by our sign-in provider and are never stored in readable form. |
| Household | Your household's name and currency, who its members are, each member's role (admin or member), and whether each member may see the household's total income. |
| Invite codes | 8-character codes an admin creates to invite people. We record who created a code and who used it. |
| Money entries | Expenses (amount, date, category and an optional note), income (amount, date and an optional note), money given between members, savings deposits and withdrawals, and the household savings goal. |
| Budgets and categories | Monthly family and personal budgets, and your household's expense categories. |
| Alerts | Budget alerts the app creates for you when spending reaches 80% or 100% of a budget, and whether you've read them. |
Information collected automatically
- Push notification token. If you allow notifications, your phone gets a notification token from Google's push service through Expo. We store this token, the platform (Android) and the time it was last updated, so we can send you budget alerts. It's removed when you log out or delete your account.
- Technical and security logs. Like most online services, our hosting and sign-in provider (Supabase) keeps technical logs of requests to our servers, such as IP address, time and request type. Its sign-in system also records account events, such as sign-ups, sign-ins and password resets, together with the email address and IP address involved. These logs are used for security and troubleshooting.
Stored only on your phone
- Your sign-in session, encrypted with AES-256. The encryption key is kept in Android's secure storage.
- Your app lock setting. If you turn on app lock, Android checks your fingerprint, face or screen lock. Neslet never receives your fingerprint, face data or PIN.
3. What we don't collect
- We don't connect to your bank, card or any financial account. Everything in Neslet is typed in by you.
- We don't collect your location, contacts, photos, files, or advertising ID.
- The app contains no advertising, analytics or crash-reporting tools.
- We don't sell your personal information, and we don't share it with advertisers or data brokers.
4. How we use your information
- To provide the app: to create your account, sign you in, store your entries and show your household its totals, budgets and savings.
- To send account emails: for example a password reset link you ask for.
- To send budget alerts: in the app, and as push notifications if you allow them.
- To keep Neslet secure and fix problems.
We use your information only for these purposes. Where a law such as the GDPR applies, our legal basis is that we need the information to provide the service you signed up for (performance of a contract), and our legitimate interest in keeping it secure. Push notifications are based on your consent, which you can withdraw at any time in your phone's settings.
5. Who can see your data
Neslet is built for sharing within a household of up to three people. Our database enforces these rules for every request:
- Household members can see the household's expenses, savings goal and savings entries, family budgets and categories, and each other's names.
- Income is private by default. You always see your own. The admin sees everyone's, and can allow a member to see the household's total income.
- Money given between members is recorded by the person who receives it, and is visible to that person and the admin.
- Personal budgets are visible only to the member who set them.
- Alerts are only visible to the person they're for.
- You can only edit or delete entries you added yourself.
- People outside your household cannot see any of your household's data.
If an admin removes a member from the household, the entries that member already added stay in the household's records. A member can remove all their own data by deleting their account.
We do not look at your entries except when needed to keep the service running or secure, when you ask us for help, or when the law requires it.
6. Service providers
We use a small number of trusted providers to run Neslet. They process data only on our behalf, to provide their service to us:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Database, sign-in and server hosting | All account, household and money data described above |
| Brevo | Sends account emails, such as password reset links | Your email address and the email content |
| Expo (650 Industries) | Relays push notifications and delivers app updates | Push token, and the alert's title and text |
| Google (Firebase Cloud Messaging) | Delivers push notifications to Android phones | Push token and the alert's title and text |
| Cloudflare | Hosts this website | Technical request data when you visit neslet.app |
These providers may process data on servers outside your country. We may also disclose information if the law requires it, or to protect the safety of our users or the public.
7. How we protect your data
- All communication between the app and our servers is encrypted (HTTPS).
- Access rules in our database make sure each person can only read and change what they're allowed to, as described in section 5.
- Your sign-in session on your phone is encrypted.
- You can turn on app lock to require your fingerprint, face or screen lock to open Neslet.
No system is perfectly secure, but we work to protect your information and will act quickly if we learn of a problem.
8. How long we keep your data
- We keep your information for as long as your account exists.
- When you delete your account, your account and entries are deleted from our live database straight away. See Delete your account for exactly what is removed.
- Invite codes stop working after 7 days. The invite record stays with the household until the household is deleted.
- Your push token is removed when you log out or delete your account.
- Backups: our current database plan doesn't include automatic backups. If we turn on backups in the future, deleted data could remain in a backup until that backup expires (for example, 7 days on Supabase's Pro plan). We would only use a backup to recover from a failure, and we will update this policy if this changes.
- Logs: technical and security logs (see section 2) are not deleted when you delete your account. They are kept by Supabase for limited periods under its own retention settings, and are used only for security and troubleshooting.
- Our providers' records: Brevo, Expo and Google may keep their own records of emails and notifications they delivered, under their own policies.
- Exports: spreadsheet files exported from the app are saved on the phone that exported them. We can't delete those copies.
9. Your choices and rights
- See and export your data: in the app, go to Settings. Members can tap Export my data; admins can tap Export backup for the whole household. You get a spreadsheet (CSV) file.
- Correct your data: edit your name in Settings, and edit or delete any entry you added.
- Delete your data: delete your account in the app, or ask us by email. See Delete your account.
- Notifications: turn push notifications on or off in your phone's settings.
Depending on where you live, you may also have the right to object to or restrict how we use your data, and to complain to your local data protection authority. To use any of these rights, email us at muminulhoqchy@gmail.com from the email address on your account. We'll reply within 30 days.
10. Children
Neslet is intended for adults and is not directed at children. You must be at least 18 to create an account. If you believe a child has given us personal information, contact us and we will delete it.
11. This website
neslet.app does not use cookies, analytics or tracking. Our website host, Cloudflare, processes basic technical data (such as your IP address) to deliver the site and protect it from abuse.
12. Changes to this policy
If we change this policy, we'll update the effective date at the top. If the changes are important, we'll also let you know by email before they take effect.
13. Contact us
Questions about privacy? Email muminulhoqchy@gmail.com.