Privacy Policy

• Numero only accesses sources you explicitly connect: Gmail or Outlook, with read-only permission, and bank transaction SMS on your phone if you turn on SMS tracking.
• Bank transaction SMS are read and parsed on your phone. Only structured facts are uploaded; message text, sender IDs, phone numbers, OTPs, and full account numbers never leave your phone, and SMS content is never sent to OpenAI.
• Numero never sends, deletes, labels, or otherwise modifies anything in a connected account.
• To recognize financial activity, Numero transmits qualifying email content (subject, sender, recipients, body text, and attachment text) to OpenAI, our AI extraction sub-processor, for the sole purpose of extracting structured facts. OpenAI does not use this content to train models, per its API Data Usage Policy.
• Numero persists only structured facts — merchant, amount, date, category, document type — never the raw email body, subject, sender address, attachment content, or SMS text.
• Numero never sells your data or uses it for third-party advertising.
• You can export or delete your data, and disconnect a source, at any time from Settings.

Numero's use and transfer of information received from Google APIs (including Gmail) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Numero only requests the gmail.readonly scope — the narrowest scope that allows reading messages. Numero never requests permission to send, modify, or delete email, and never requests access to Google Drive, Calendar, or Contacts.
• Numero uses Gmail data solely to recognize financial activity and surface it back to you inside Numero. It is never used for advertising, never sold, and never used to train generalized AI or ML models.
• Numero does not permit humans to read your Gmail data except (a) with your explicit consent for a specific support request, (b) as necessary for security investigations, or (c) to comply with applicable law.
• Gmail content transferred to Numero's AI extraction sub-processor (OpenAI) is bound by the same restrictions through Numero's Data Processing Addendum with OpenAI and OpenAI's own public data-handling policies.

When you sign in, Numero collects the basic profile information Google provides:

• Your name
• Your email address
• Your profile photo

When you connect an email source (Gmail or Outlook), Numero processes messages in memory to recognize financial activity, and persists only structured facts, such as:

• Merchant or sender name
• Transaction amount and currency, when detected
• Transaction, invoice, or event date
• Category and document type (for example: purchase, subscription, refund, bill, warranty, insurance)
• Confidence and provenance information (how sure Numero is, and which source it came from)
• Optional profile details you choose to add yourself, such as a date of birth (used only to improve future document understanding, and never required)

SMS tracking is optional, and off until you turn it on in Settings → Sources and allow SMS access on your phone. Numero requests permission only to read messages already on your phone (READ_SMS). It never requests permission to receive, send, or delete SMS. Numero uses SMS solely to recognize your financial transactions and show them back to you inside Numero, for example in your spending history, categories, budgets, and Financial Moments.

How it works on your phone:

• Numero reads only messages from business sender IDs, such as bank and card alert headers. Messages from personal phone numbers are filtered out on the phone and never parsed; only the number of skipped messages is counted.
• Each business message is parsed on your phone. Messages that are not transaction alerts, such as OTPs and promotions, are discarded on the phone.
• Message text exists only in your phone's memory while it is being parsed.
• New messages are read when you open the app. When you import history (30, 90, or 180 days, your choice), the import may continue in the background until it finishes. Numero does not run a background SMS listener.

What is uploaded for each recognized transaction:

• Amount, currency, and date and time
• Whether money went out, came in, or moved between accounts, plus a transaction type and category
• The merchant or payee name when the alert states one, and the bank name. Numero's servers discard any value that looks like a phone, account, or reference number.
• Payment method (for example UPI or card) and payment or refund status
• The last four digits of the account or card, as shown in the alert
• Transaction, reference, and UPI reference numbers, used to match the same payment across SMS and email, and stored encrypted
• A one-way hash of the message's identity on your phone, so the same message is never imported twice

For each phone, Numero also records a one-way hash identifying the app installation, the consent version you agreed to, permission and sync status, and counts from each scan (for example, how many messages were scanned, kept, or skipped and why). These counts contain no message content.

Never uploaded or stored:

• SMS message text
• Sender IDs and phone numbers
• Personal (person-to-person) messages
• OTPs and other one-time codes
• Full account or card numbers
• Your phone's internal message identifiers

SMS content is never sent to OpenAI or any other AI provider. The structured facts above become part of your financial activity and, like activity recognized from email, may be included in the aggregated summaries described in Section 4.

You can stop SMS tracking or remove a phone at any time in Settings → Sources, or turn off SMS access in your phone's settings. Removing a phone stops all future reading and clears Numero's SMS state on that phone. Transactions already added stay in your Financial Memory until you delete them or your account (Section 7).

By design, the following are processed only in memory and by our AI extraction sub-processor (see Section 4), and are never written to Numero's persistent storage:

• Email body content
• Email subject lines
• Email attachments or their contents (including PDFs)
• Full sender or recipient email addresses beyond the merchant domain that appears in the structured facts
• SMS message text, sender IDs, and phone numbers (see Section 2a)
• Any content of a connected source beyond the structured facts described above

“Never stored” means never written to Numero's database or long-term storage. Content is still transmitted, in memory, to OpenAI during a single extraction request as described in Section 4.

Numero uses the information above solely to operate and improve the product for you:

• Building and maintaining your financial timeline
• Recognizing patterns (such as recurring subscriptions) and detecting Financial Moments that may deserve your attention
• Letting you search, browse, and review your own recognized activity
• Diagnosing and fixing problems with recognition accuracy

Sub-processor: OpenAI, LLC

To recognize financial activity, Numero transmits qualifying email content to OpenAI, LLC (San Francisco, California, USA) acting as a service provider under a Data Processing Addendum executed with Numero.

• What is sent: the email subject, sender address, plain-text body, and text extracted from PDF attachments — only for messages that Numero's own classification identifies as likely financial activity, and only for one extraction request at a time. Recipient addresses are not sent.
• Purpose: extracting structured fields (amount, currency, merchant, date, category, direction, reference numbers) that Numero displays back to you in your Financial Memory. No other purpose.
• Retention by OpenAI: OpenAI does not use API inputs or outputs to train models by default, per OpenAI's public API Data Usage Policy. API content is retained by OpenAI for up to 30 days for abuse monitoring, then permanently deleted, per OpenAI's Enterprise Privacy Commitments. Numero additionally sends `store=false` on every request, which instructs OpenAI not to persist the request beyond the immediate response.
• No human review: OpenAI does not conduct human review of API traffic except for security or abuse investigations. Numero does not send email content to OpenAI for human review under any circumstances.
• No training: neither Numero nor OpenAI uses your email content to train generalized AI or ML models.
• No advertising: neither Numero nor OpenAI uses your email content for advertising, personalization outside Numero, or resale.

You can review OpenAI's own commitments here: API Data Usage Policy, Enterprise Privacy Commitments, and the Data Processing Addendum Numero has executed with OpenAI.

A smaller category of aggregated summaries (merchant names, amounts, category totals — never raw email content) is also sent to OpenAI in a separate request to generate your Financial Moments and to answer questions in the in-product AI Search feature. The same data-handling terms above apply to that request.

• Data is encrypted in transit (TLS) and at rest.
• Access follows least privilege: Numero requests only the permission scopes it needs, and nothing more.
• Source connections are revocable at any time, independent of any other permission.

Numero does not sell your personal information, and does not use it for third-party advertising. We share information only with the following categories of recipients, each bound by contractual confidentiality obligations and used only for the purpose stated:

• OpenAI, LLC — AI extraction sub-processor. Purpose and scope described in Section 4.
• Cloud infrastructure providers (Cloudflare, our managed Postgres and Redis providers) — hosting, delivery, and backup of Numero's systems.
• Razorpay Software Private Limited (India) and Paddle.com Market Ltd (other countries) — payment processing, when and if you choose to subscribe to a paid plan. Only the billing information you provide at checkout is transmitted; no email or financial-activity data is ever sent to a payment provider.
• Google LLC — Google Analytics 4 for anonymous product analytics (feature usage, screen visits). IP addresses are anonymized, ad personalization signals are disabled, and financial content, email content, and account identifiers are excluded from analytics events.
• Microsoft Corporation — Microsoft Clarity on public website pages for aggregated interaction analytics such as clicks, scrolling, and page navigation. Clarity is not loaded inside authenticated application routes, sensitive input content is masked, and Numero initializes it in no-consent mode without analytics or advertising cookies.
• Authorities, only where required by law.

A current list of Numero's sub-processors is available on request from support@hellonumero.com.

From Settings, at any time, you can:

• Export your recognized financial data as CSV or JSON
• Delete all recognized data while keeping a source connected (you can rescan afterward)
• Disconnect a source, which immediately revokes Numero's access to it
• Stop SMS tracking or remove a phone, which stops all future reading of SMS on that phone
• Delete your account entirely, which removes your data, connections, and profile

Depending on where you live, you may have additional rights — for example, to access, correct, or restrict processing of your information under regulations such as the GDPR or CCPA. Contact us at support@hellonumero.com to exercise these rights.

Numero retains your recognized financial data for as long as your account is active, or until you delete it or your account. If you delete your account, we delete your data within a reasonable operational window, except where retention is required by law.

Numero is not directed to, and does not knowingly collect information from, children under 18.

We may update this policy as Numero adds sources or features. We will update the “Last updated” date above, and material changes will be communicated within the product.

Questions about this policy or your data? Reach us at support@hellonumero.com.