Privacy Policy

This Privacy Policy describes how Nobleway (nobleway.app), operated by Stansa Labs LLC ("we", "us", or "our"), collects, uses, and handles information when you use our household financial tracking service during the public beta.

Nobleway is designed for you to enter and manage your own financial records. We do not offer bank account synchronization.

The public website is nobleway.app. Sign-in and sign-up are on that site. The authenticated household ledger is at dashboard.nobleway.app. Product documentation is at docs.nobleway.app.

Account and identity information. Nobleway uses first-party authentication. New accounts are created on nobleway.app with an email address you verify (email one-time code), a password you choose, and optional profile details such as a display name. We store your email address, a password hash (not your plaintext password), and may store phone numbers used for SMS one-time codes when that option is enabled. You may also link a sign-in provider such as Google. Optional authenticator (TOTP) setup stores a secret used only to verify codes you enter, plus one-time backup codes if you generate them.

Existing accounts and migration. If you previously signed in through a third-party identity provider used during earlier beta periods, you can continue into Nobleway by verifying your email (for example with an email code) and completing first-party sign-in or password setup. During that transition we may still process the prior provider's user identifier long enough to reconnect your household ledger to your Nobleway session. New sign-ups do not create accounts on that prior provider.

Financial and household data you provide. This includes transactions, accounts, categories, people, imports, exports, and related metadata you create or upload in your workspace. This data is stored in our application database as your ledger.

You can export active transaction history as CSV or Excel. An export is not every household setting or every financial record. It does not include separate account, people, holding, or opening-balance records, private person aliases, or removed transactions.

AI-assisted features. When you use Ask Nobleway to record activity or ask questions about your history, the text you submit and account, person, and category names from your workspace may be sent to the configured AI provider. Optional explanations may also be requested. The AI suggests structured interpretations. It does not directly write to your ledger. You confirm before capture results are saved.

Voice in Ask Nobleway. When you use the microphone, speech-to-text uses your browser's speech features (where supported). Your browser or device vendor may process that audio for recognition. Nobleway does not collect, upload, or store audio recordings, and does not send audio to the AI provider. Only the text that appears in the message box is processed if you choose to send it, the same as typed text.

Receipt images. If you upload a receipt or similar image on Import or in Ask Nobleway, that image is stored in your household workspace as capture evidence and is sent to the configured AI provider (platform default or your BYOK provider) for structured extraction. You review every field before anything is written to the ledger. Images are retained with related evidence and removed when the household is deleted (including account closure cleanup).

Bank statement files. If you upload a statement PDF or image on Import or in Ask Nobleway, that file is stored in your household workspace with the import record. Digital PDFs with a readable text layer are parsed on our servers without sending that content to an AI provider. Scanned pages and images may be sent to the configured AI provider for multi-row extraction. You preview and confirm before any transactions are written. Files are retained with related import records and removed when the household is deleted (including account closure cleanup).

Unusual-spend notices. When enabled for your household, we may create in-app notices (and optional email) when spending looks unusual relative to your own ledger history. These notices are computed from your ledger with no AI involved.

Bring-your-own-key (BYOK) credentials. Bring-your-own-key is available when the product setting for your account or household is enabled. If you save a Gemini, OpenAI, Anthropic, or OpenRouter key, we store that key encrypted. OpenRouter is available only as a bring-your-own-key option and may forward requests to another model provider. The product does not display the full key. A key saved for your account is used for that account. A key saved for the household can be used for AI features in that household.

Support and operational data. If you contact us, we receive the information you choose to send (for example, your message, User ID, or Workspace ID). Server logs may include request metadata such as timestamps, paths, and request IDs. We configure logging not to include authentication tokens, secrets, or full financial payloads.

Household members share saved transactions and exports. Ask Nobleway chat history stays private to each member's account within that household. An account balance is hidden when the viewer is not linked to that account. Hiding the balance does not make that account's transactions private.

We use the information above to provide, maintain, and improve Nobleway, to authenticate you, to store your ledger, to run AI-assisted features you request, to send transactional email such as workspace invitations, optional due-recurring reminders, and optional unusual-spend notices, to respond to support requests, and to protect the service from abuse.

We do not sell your personal information or ledger data.

Nobleway's ledger calculations and writes are authoritative. AI is used in Ask Nobleway to help interpret messages you send to record activity or ask about your history, optionally extract fields from receipt images or statement files you upload on Import or in chat, and optionally generate explanations. AI output is a draft or suggestion until you review and confirm (for capture and statement import) or until results are shown from your existing ledger data (for questions).

For Ask Nobleway messages, a request can include the text you enter and the account, person, and category names in your workspace. Receipt or statement images you attach for AI extraction are also sent to the provider for that request. Chat history is stored in your household workspace and is private to your account within that household. Voice input does not send audio to Nobleway or to the AI provider; only text you send after reviewing it may be processed.

When AI features run, requests may be sent to the platform AI provider the operator has configured for the service (for example Gemini, OpenAI, or Anthropic). That platform choice can change over time. If bring-your-own-key is enabled, you can instead use your own Gemini, OpenAI, Anthropic, or OpenRouter key. OpenRouter is not used as the platform provider. We have not verified provider retention or training terms.

Nobleway does not currently use advertising or marketing analytics cookies, and the application does not currently operate a separate analytics product.

Authentication sessions. Nobleway sets an httpOnly session cookie (for example, nw_session) on nobleway.app hosts (including dashboard.nobleway.app) so you stay signed in across the public site and the household ledger. Those session cookies are separate from the first-party preference cookies described below. They are essential for using the authenticated product. During a limited migration period, a prior identity provider may still set its own cookies for accounts that have not finished moving to first-party sign-in.

Bot protection. Sign-in, sign-up, and related auth forms may use Cloudflare Turnstile (or a similar challenge) to reduce automated abuse. That provider may process a short-lived challenge token and related request metadata. It is not used for advertising.

Application preferences (first-party). Separately, we set first-party cookies and use local storage for product functionality, including:

• Theme preference (light, dark, or system). On production nobleway.app hosts, this preference cookie is shared with dashboard.nobleway.app and docs.nobleway.app so the appearance you choose can follow you between the public site and documentation.
• Desktop sidebar collapsed state (chrome toggle)
• Date and time display format
• Active workspace selection
• Draft Ask Nobleway input stored locally per workspace until submitted or cleared

These first-party mechanisms are used to remember your choices and improve your experience. They are not used for cross-site advertising.

Optional error monitoring. If configured by the operator, Sentry may receive error reports. Our integration is designed not to send request bodies, authentication headers, or financial form contents.

You can clear cookies and local storage in your browser at any time. Doing so may sign you out or reset local preferences and drafts.

Depending on how the service is deployed, information may be processed by:

• Authentication - first-party Nobleway account and session systems. Optional Google sign-in when enabled. A prior third-party identity provider may still process identifiers for accounts that have not finished migrating.
• Cloudflare Turnstile - optional bot protection on authentication forms
• Twilio - optional SMS delivery for phone one-time codes when phone sign-in is enabled by the operator
• Hosting and database providers - to run the application and store your ledger
• AI providers - the platform AI provider configured for the service (for example Gemini, OpenAI, or Anthropic), which may change over time, and Gemini, OpenAI, Anthropic, or OpenRouter when you supply BYOK keys. OpenRouter is BYOK-only and may forward requests to another model provider.
• Resend - transactional email for verification and sign-in codes, password reset messages, workspace invitations, due-recurring reminders, and unusual-spend notices when enabled by the operator
• Sentry - optional error monitoring when configured

These providers may process information needed to run authentication, hosting, monitoring, email, SMS, bot protection, or AI features. BYOK AI providers are used at your direction when you configure your own provider credentials.

We retain your ledger and account-related data while your account and workspace remain active and as needed to provide the service.

You can close your account from Settings. Closing your account schedules deletion in 30 days. You can restore the account before that deadline. After the deadline, the account and any households you solely own are removed from the application. Local sessions, password credentials, authenticator secrets, backup codes, and linked sign-in providers for that account are revoked or removed. If a prior third-party identity record is still associated with the account during migration, we request deletion of that authentication record as well when the provider integration remains available. If you still own a household with other members, transfer ownership first. You can also delete a household you own from Workspace settings.

Operator backups may still contain copies after that removal. The application does not set a retention period for those backups.

AI usage records may remain after a household is removed. Those records can include the provider, model, and whether the request succeeded. They do not include prompts, keys, or financial text.

For help, contact privacy@nobleway.app or support@nobleway.app with your User ID and Workspace ID.

We use technical and organizational measures appropriate for a beta financial tracking application, including authenticated access, encrypted connections, and encryption for stored bring-your-own-key credentials. No method of transmission or storage is completely secure.

Household text you enter or upload, such as names of people, accounts, and categories, merchants, recipients, notes, assistant chats, receipts, statements, and import files, is encrypted at rest in our database with keys we manage and keep separate from database backups. Amounts, dates, and record identifiers are stored unencrypted so balances and reports can be calculated. Because we manage these keys, Nobleway can decrypt this data to run the service, and this is not end-to-end encryption.

Nobleway is not directed at children under 13, and we do not knowingly collect information from children.

We may update this Privacy Policy as the product evolves. We will post the updated version on this page and adjust the "Last updated" date.

Questions about this policy or your data: privacy@nobleway.app or support@nobleway.app. See also our Terms of Service.