Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains what information NurvPoint Technologies LLC, the company that owns and operates Talverra ("Talverra", "we", "us"), collects from you, how we use it, and the rights you have over it. It applies to the Talverra app on iOS, Android and the web, and to the talverra.app website (together, the "Service").

Short version: Talverra stores the bills, accounts, transactions, budgets, goals, debts, investments and plans you set up — and, only if you choose to link a bank, the account and transaction data your bank shares through Plaid — so the app works across your devices and survives reinstalls. We don't sell your data, we don't use it for advertising, we don't run advertising or analytics trackers, and you can delete everything yourself from inside the app.

1. What we collect

1.1 Account information

When you create an account, we collect:

• Your email address — to sign you in and to contact you about your account.
• A display name — only if you choose to enter one.
• If you sign in with Apple or Google (where offered), a stable user identifier from that provider. We never receive your Apple or Google password.

1.2 Financial information you enter

Talverra is a personal-finance organizer. Most of what we store is information you type in so the app can track and project your finances over time:

• Bills — name, amount, due date, how often it repeats, payment history (including partial payments and skipped periods), changes to the amount over time, any notes, and whether you marked a bill as tax-deductible or a business expense.
• Accounts and transactions you enter by hand — account name and type, balances, transactions with dates, amounts, and the categories you assign (including how you split a single transaction across categories).
• Bill matching — which transactions you confirmed as payments of which bills, the matching rules the app learns from your confirmations, and which suggested recurring charges you told the app to stop suggesting.
• Budgets — your monthly spending limits per category.
• Goals — target amount, target date, which account funds them, and the deposits you record toward them.
• Debts — the debts you enter (type, balance, rate, minimum payment, due day) for the payoff planner.
• Income — sources, amounts and how often you're paid, used for the cash-flow forecast.
• Investments — holdings you enter by hand (ticker symbol, quantity, cost).
• Credit score — score readings you type in yourself, with the date and where you got them. Talverra does not pull your credit report.
• Net worth and health-score history — a snapshot of your overall position, recorded when you open the Net worth section, and a monthly snapshot of your financial health score, so the trend charts show your real progress over time.
• Retirement plan inputs — birth year, planned retirement age, contributions, target spending and return assumptions.
• Preferences — your display currency, reminder settings and time zone, appearance choices (theme, accent, look, dark or light mode), which accounts count toward "Safe to spend", and the order of cards on your home screen.

This information is stored in your own private partition of our backend. Server-side security rules mean no other user can read it. Talverra's operator can reach the database through the cloud provider's console for support and operations, but does not read individual users' financial data in the ordinary course of running the Service. An administrative console used by Talverra staff shows an account's email address, plan and trial status, and referral totals — not your bills, accounts or transactions.

1.3 Connected bank accounts (optional)

Talverra does not connect to your bank unless you choose to link one. Linking a bank is optional — everything in the app also works with information you enter by hand (§1.2). Bank linking is available on the Plus and Premium plans (up to three bank logins on Plus).

If you link a bank account, that connection runs through Plaid, an intermediary between your bank and Talverra. With your consent inside Plaid's flow, Plaid sends us the institution's name and logo, each account's name, type, masked identifier (typically the last four digits) and current balance, and your transaction history (date, amount, merchant name, category, pending status, and where Plaid has one, the merchant's logo and website). We never receive your bank username or password — Plaid handles sign-in with your bank directly — and the access token that authorizes ongoing reads is held only by our servers, never by the app on your device. Merchant and bank logo images are loaded by your device directly from Plaid's servers when they are shown.

You can disconnect a bank at any time from the Accounts screen; we then stop reading from it and delete the access token. Plaid's own handling of your data is described in Plaid's End User Privacy Policy at plaid.com/legal.

1.4 Paying bills through Talverra (not available in the current version)

The current version does not move money or connect to billers. If we add bill payment through a provider such as Method Financial, we will update this policy first and ask for your consent inside that feature.

1.5 Subscription, trial and promotional-code state

When subscriptions are on sale, and if you subscribe to Talverra Plus or Premium, we store your subscription status (active, expired, cancelled), the product you bought and its renewal date, as reported to us by the app stores through RevenueCat. Billing runs through Apple or Google — we never see your card number.

If you start the free trial, we record when it started and when it ends, so it can be honored and so it can only be used once per account. If you redeem a promotional code, we record the code and when you redeemed it.

1.6 Referral program

Every account has a referral code. If you share it, we record how many accounts joined with your code, how many of those have paid for a plan, and the free time you have banked as a result. If you join with someone else's code, we record whose code you used, by an internal account identifier. We never show a referrer the name or email address of the people who used their code, and we never show you the name or email address of the person who referred you.

1.7 Diagnostic information

The current version of Talverra does not include a crash reporter or an analytics tracker. Our backend keeps ordinary operational logs (for example, that a request was received and whether it succeeded) so we can keep the Service running and investigate problems. The talverra.app website is served through Cloudflare, which keeps standard web-server logs (such as IP addresses) for security and performance. If we add crash reporting in a future version, we will say so here.

2. What we do NOT collect

• Your bank login credentials — if you link a bank account, Plaid handles that sign-in directly and never shares your username or password with us.
• Your biller login credentials — the current version does not connect to billers or pay bills on your behalf.
• Your credit report — any credit score in Talverra is a number you typed in.
• Your card numbers — subscription payments run through Apple or Google.
• Location data — we don't ask for it and don't use it.
• Your contacts, photos, or microphone — the app doesn't request these permissions.
• Advertising identifiers — we don't track you across other apps and we show no ads.

3. What stays on your device

• Screen lock. If you set a PIN, only a salted, one-way hash of it is stored in the device's secure storage; the PIN itself never leaves your device and is never sent to us. Face ID, Touch ID and fingerprint unlock are performed by your device's operating system; we never receive your biometric data.
• Reminders. Bill reminders are scheduled locally on your device. The current version sends no push notifications from our servers.
• Feedback and ratings. "Send Feedback" opens your own email app with a pre-filled message; nothing is sent until you send it. "Rate Talverra" hands you to the App Store or Google Play rating prompt, which Apple or Google operate.

4. How we use your information

• To run the Service — show your bills and accounts, calculate your projections, and schedule the reminders you've configured.
• To keep linked bank data current — if you linked a bank, our servers ask Plaid for new transactions and balances when you sync and when Plaid tells us there is something new.
• To convert currencies — when you use more than one currency, the app converts figures using published European Central Bank reference rates that our server fetches daily from a public rate service. No information about you is sent to obtain them.
• To value your investments — when you enter a holding, our server asks a market-data provider (Finnhub) for the price of that ticker symbol. Only the symbol is sent, never your identity or how much you hold; prices are cached for everyone, not per person.
• To run the referral program — to credit free time to the right accounts and to prevent abuse of it.
• To contact you — for important notices about your account or the Service.
• To enforce our Terms of Service and prevent abuse.

We do not sell your information, share it with advertisers, use it for ad targeting, or use it to train AI models.

5. Where your data lives

Your data is stored in Google Cloud Firestore in the United States (a multi-region location within the United States), and sign-in is handled by Firebase Authentication. Both are operated by Google LLC; their security and privacy practices are described at cloud.google.com/security and policies.google.com/privacy. The talverra.app website is delivered by Cloudflare.

If you live outside the United States, your data is transferred to and processed in the United States. By using Talverra, you consent to that transfer.

6. Third parties we share data with

We share information only with the service providers needed to run the Service:

• Google (Firebase / Google Cloud) — database, sign-in, server functions, and the secure storage of the keys our servers use to talk to other providers.
• Apple / Google — when you sign in with them (where offered) or subscribe through their stores.
• RevenueCat — subscription state, once subscriptions are on sale. Purchase events flow from Apple or Google to RevenueCat to our server.
• Plaid — only if you choose to link a bank account. Plaid provides the institution, account, balance, transaction and logo data described in §1.3, and receives from us only what its flow needs to connect your bank.
• Finnhub — market prices for ticker symbols you enter. No personal data is sent.
• A public exchange-rate service (Frankfurter, publishing European Central Bank reference rates) — no personal data is sent.
• Cloudflare — hosts the talverra.app website and keeps standard web-server logs.
• Method Financial — only if and when we enable bill payment, and only if you choose to use it. Not part of the current version.

We do not sell or rent your personal information to anyone.

7. Your rights and choices

7.1 Delete your account

You can delete your account directly in the app: open Settings, tap "Delete account" (also reachable from Security & Privacy), review what you are about to lose, then type DELETE to confirm. Deletion happens immediately and cannot be undone — it permanently removes your account and every record we hold about you: bills, accounts and transactions, budgets, goals, debts and your retirement plan, investments, credit-score entries, net-worth and health-score history, your referral record, your subscription or trial (cancelled, with no refund), and any connected bank accounts (the access tokens we stored for them are deleted).

If you would rather not use the in-app control, email support@talverra.app from the address tied to your account and we will delete your account and everything listed above within 30 days.

7.2 Get a copy of your data

If you are a Premium subscriber, you can export your data as a CSV file directly in the app: open Settings, tap "Export All Bills (CSV)," choose Bills, Business expenses, or Tax summary and a date range, and the file downloads in your browser (web) or opens your device's share sheet so you can save or send it (iOS/Android).

If you are not on Premium, or you want a copy of information the CSV export does not cover, email support@talverra.app and we will provide a copy of the information we hold about you in a common machine-readable format within 30 days.

7.3 California residents (CCPA)

If you are a California resident, you have the right to know what categories of personal information we have collected about you, to request its deletion, to opt out of the "sale" of your personal information (we do not sell it, so there is nothing to opt out of, but you have the right regardless), and not to be discriminated against for exercising these rights. Email support@talverra.app from the address tied to your account.

7.4 EU / UK residents (GDPR)

If you are in the European Union, the United Kingdom or Switzerland, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection. Email support@talverra.app and we will respond within 30 days. We process your data on the basis of your consent (you signed up) and to perform our contract with you (you are using the Service).

7.5 Reminders, screen lock and bank connections

You can turn bill reminders on or off in Settings → Reminders, turn the screen lock on or off in Settings → Screen lock, and disconnect a linked bank from the Accounts screen at any time.

8. Children

Talverra is not directed at children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email support@talverra.app and we will delete the account.

9. Security

Server-side security rules ensure one user can never read or write another user's data, and are enforced on every request. Communication between the app and our backend is encrypted in transit (TLS). Data at rest is encrypted by Google Cloud. Bank access tokens live only on our servers, and the keys our servers use to talk to Plaid and our market-data provider are held in Google Secret Manager — none of them are ever shipped inside the app.

No system is perfectly secure. If you suspect your account has been compromised, change your password immediately and email support@talverra.app.

10. How long we keep your data

• While your account is active — we keep everything described in Section 1 for as long as you use the Service.
• After you delete your account — the in-app control removes the categories listed in Section 7.1 immediately; requests by email are completed within 30 days.
• Subscription records — subscription metadata (store purchase events, not your financial data) is kept as long as required for tax and refund purposes.
• Backups — a backup copy of the database is taken once a day and kept for 7 days, so deleted data leaves our backups within 7 days.

11. Changes to this policy

We will update this page if we change how we handle your data. If the change is material, we will tell you in the app or by email at the address on your account before it takes effect. The "Last updated" date at the top of this page is the source of truth for the current version.

12. Contact us

NurvPoint Technologies LLC (operator of Talverra)

Email: support@talverra.app

For feedback or feature requests: feedback@talverra.app