This Privacy Notice explains how Nebota Ismael Owamba ("we", "us") collects, uses, and protects personal data when you use SOPHIS Ledger (the "Service"). We are the data controller for the personal data described below. For questions or requests, contact us at nebotaismaelowamba@gmail.com.
1. Personal data we collect
- Account data: name, email address, hashed password or OAuth identifier.
- Household data: household name, membership, invitations, and roles.
- Financial data you enter: accounts, transactions, categories, budgets, bills, goals, debts, allowances, and notes.
- Support data: messages you send us and their content.
- Usage & device data: pages viewed, actions taken, IP address, browser, device identifiers, timestamps, and diagnostic logs.
- Cookies & local storage: session tokens and preferences necessary to run the Service.
Payment data (card number, billing address, tax IDs) is collected and processed by our merchant of record, Paddle, not by us. We only receive limited data about your subscription (plan, status, renewal date, and a customer identifier).
2. How we use personal data
- To create and administer your account and household — legal basis: contract performance.
- To provide the Service, including syncing data between household members — contract performance.
- To process subscriptions and payments through Paddle — contract performance.
- To keep the Service secure, prevent fraud, and diagnose faults — legitimate interests.
- To improve the Service (aggregated, non-identifying analytics) — legitimate interests.
- To respond to support requests — contract performance / legitimate interests.
- To send service-related emails (security, billing, product changes) — contract performance.
- To comply with legal obligations — legal obligation.
3. Who we share personal data with
- Other household members: data added to a household account is visible to other members of that household.
- Merchant of Record — Paddle: for subscription management, payments, tax compliance, and invoicing. See Paddle's Privacy Notice.
- Infrastructure & subprocessors: our hosting, database, authentication, email, and analytics providers, acting under written data-processing terms.
- Professional advisers: lawyers, accountants, and auditors where necessary.
- Authorities: where we are required by law or to protect our rights.
We do not sell your personal data.
4. International transfers
Our subprocessors may process data outside your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect personal data during transfer.
5. Data retention
We keep personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. When we no longer need personal data we will delete or anonymise it.
6. Your rights
Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or port your personal data, object to certain processing, and withdraw consent where processing is based on consent. UK/EEA residents also have the right to complain to their local supervisory authority. To exercise any of these rights, email nebotaismaelowamba@gmail.com. We aim to respond within one month.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege administration. No system is 100% secure — please help us by choosing a strong password and keeping it confidential.
8. Cookies
We use essential cookies and local-storage entries to keep you signed in and remember preferences. We do not use advertising cookies. If we add analytics or non-essential cookies in the future, we will present a cookie notice and let you manage preferences.
9. Children
The Service is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this Notice
We may update this Privacy Notice from time to time. Material changes will be highlighted in-app or by email. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact
Nebota Ismael Owamba — nebotaismaelowamba@gmail.com. See also our Terms and Refund Policy.