Northpurse privacy policy
Last updated: 2026-11-13
Northpurse is a personal-finance app for tracking accounts, transactions, budgets and planned payments, alone or with the people in your household. This page explains what we collect, why, who can see it and how to delete it.
What we collect
- Account data: your email address, a salted hash of your password (never the password itself), whether you confirmed your email, and your sign-in sessions (stored as hashes, valid for 30 days).
- Financial data you enter: accounts and balances, transactions (amounts, dates, categories, payees, comments), budgets, planned payments, and your household's name and currency.
- Household data: the members of a household, their roles, and the invite codes used to join (stored as hashes).
- Attempt counters: to slow down password guessing and spam we count attempts per email address and per IP address. They are stored only as keyed hashes and deleted after 15 minutes.
We do not collect advertising or analytics identifiers, location, contacts, photos or your SMS and notifications, and we use no analytics or crash-reporting service. Our server logs record ids and counts, never amounts, payees, comments, passwords, tokens or email text. The Android app asks for network access and, on Android 13 and newer, for permission to show the payment reminders you switch on.
Why we use it
To run your account, keep your finances in sync between your devices and household members, send the account emails below, and protect the service from abuse. We do not sell your data, use it for advertising or profile you.
Storage and retention
Your data is kept on our server, hosted by OVH GmbH (OVHcloud) in Germany, and as a working copy on your device. A daily database backup is kept for seven days on the server, and an off-server copy for 30 days. The app keeps its sign-in tokens in encrypted storage and keeps its data out of Android cloud backup and device transfer. We keep your data until you delete it or your account. Items you delete in the app are marked as deleted so your other devices learn of it, and they are removed completely when the account or household is deleted.
Sharing
What you enter in a shared household is visible to its members, who can also see each other's email address. Accounts you mark private, and every transaction touching them, are never shown to other members. Our hosting and email providers process data on our behalf. The server also downloads public currency exchange rates; those requests contain nothing about you. We disclose data to authorities only where the law requires it.
We email you only to confirm your address, reset your password, or send a household invite when you ask us to. We send no marketing email.
Export and deletion
- Export: in the app, Settings, Export your data, as JSON (everything) or CSV (transactions).
- Deletion: in the app, Settings, Delete account, or without the app on the account deletion page. It is permanent and immediate. It removes your sign-in details and sessions, households where you are the only member with all their data, and, in households you share, your private accounts and every transaction touching them. Shared households stay with their other members, and shared accounts you created are handed to the household owner.
Children
Northpurse is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
Changes
When what we do changes we update this page and its date, and tell signed-in users about material changes.
Contact
Northpurse is run by Akbarkhon Amirkhonov. For privacy questions, data requests or help with deleting your data, write to [email protected].