Privacy Policy

Effective October 14, 2026

This policy explains what the Nornas app handles, where it is kept, who sees it, and your choices. It describes the app as it is today.

1. The short version

• Your bills, paydays, plans and settings stay on your iPhone and in your own private iCloud. We cannot read them.
• Data reaches our servers only when you share with someone or connect a bank. Both need Sign in with Apple.
• Apple Wallet data (Apple Card, Apple Cash, Apple Savings) is read on your iPhone and never leaves it.
• We do not sell or rent your data, do not share it for advertising, and have no ads and no third-party analytics.
• Nornas cannot move money. It only reads.

2. On your iPhone

Nornas stores on your iPhone: the bills, paydays, cards and plans you enter (names, amounts, dates, repeats, categories, notes, paid status); your profile name and photo; your settings; and the date you agreed to the Terms and which version. Your iPhone's backups may include them, under your Apple settings.

3. In your own iCloud

If your iPhone uses iCloud, Nornas keeps a copy of your bills, paydays, plans and payment history in your private iCloud database (Apple CloudKit). Your profile name, photo and settings stay on the iPhone. The copy belongs to your Apple Account; we cannot access it. You control it in your iPhone's Settings, under your name, then iCloud.

4. iPhone features you allow

Each one is off until you allow it, and you can turn it off in Settings.

• Calendar and Reminders. Nornas reads upcoming events and reminders to suggest bills. It never changes them.
• Notifications. Bill, payday and plan reminders are scheduled on your iPhone. Our servers do not send push notifications.
• Microphone and speech. Turned into text on your iPhone only. Audio is never sent anywhere.
• Photos. A bill's picture is read on your iPhone and not uploaded.
• Location. Used only while a plan's map is open, to center it near you. Not stored.
• Apple Intelligence. Only a bill's name is given to Apple's on-device model, to pick a category.
• Siri, Shortcuts and widgets. They read what is already on your iPhone.

5. Apple Wallet (FinanceKit)

You can add Apple Card, Apple Cash and Apple Savings for free.

• You choose the accounts, and how far back, in Apple's own screen.
• Nornas reads balances, transactions (amount, date, description, merchant, category, status) and, for Apple Card, the limit, due date, minimum and any overdue amount.
• This data stays on your iPhone, in memory. Nornas does not save it to disk, to iCloud, to its widgets or to our servers. It only remembers that you turned Wallet on.
• You can stop sharing at any time in your iPhone's Settings.

6. When you share

• Sign in with Apple gives us an account ID and the name and email (or Apple's private relay address) you chose to share.
• What you share (a bill or plan's name, amounts, dates, who is invited, who paid what, and Settle Up records) is stored on Google Firebase so the people you invited can see it.
• They see everything you share with them. Things you do not share stay on your iPhone and in your iCloud.

7. Bank connections

Optional. Nothing here applies until you connect a bank.

How it works. Connections run through Plaid. You pick your bank and agree inside Plaid's screen, after our screen explains what is read. Plaid's End User Privacy Policy covers what Plaid does. You can see and remove connections made through Plaid at my.plaid.com.

What Nornas reads.

• the bank's name and the connection's status;
• each account's name, type, last digits, currency and balances;
• transactions: account, date, amount, currency, category, pending status, the merchant's name, the bank's description of the transaction, and the merchant's logo link and website, from up to 180 days before you connect;
• recurring payments and deposits Plaid finds: description, merchant, amount, frequency, category, account and next date;
• credit cards: name, last digits, balances, limit, minimum payment, due date, last statement, interest rate, overdue status;
• loans (mortgages, student loans): balance, payments, interest rate, overdue status, and for a mortgage the property address the lender reports;
• investments, if you share them: each holding's name, type, value and cost.

What Nornas never gets. Your bank username, password or security answers. Those go only to Plaid and your bank.

Security. Plaid's access token stays on our servers, encrypted with a key in Google Cloud Key Management Service that only our server code can use. No person can read it.

What we keep and why. The data above, plus one balance reading a day and monthly spending totals, stored under your account so only your signed-in app can read it. We use it to show your accounts, what is left until payday, spending, debts and investments, and to suggest bills.

Delays. Banks report through Plaid, sometimes a day late. Your bank's figures are the official ones.

8. Plans and payments

• Apple sells and bills the plans. We never see your card or payment details.
• We receive Apple's signed record of your purchase and Apple's notices about renewals, cancellations, refunds and billing problems. We use them to know which plan you have, to keep or remove bank access, and to keep a record that you agreed to the plan.
• We keep that record while your plan lasts and for 3 years after it ends, as subscription laws ask.

9. Agreeing to the Terms

When you tap Agree and Continue (or Agree), Nornas saves the date and the Terms version on your iPhone. If you are signed in, it also saves them under your account on our servers, so we can show what you agreed to and when. We keep that record while your account exists.

10. How we use data

Only to:

• show your bills, paydays, plans, accounts and reminders, and the estimates built from them;
• suggest bills from your Calendar, Reminders and banks, for you to confirm;
• let people you invite see what you share;
• run your plan and give support;
• keep a record of what you agreed to;
• keep Nornas secure, stop abuse and fix failures;
• follow the law and enforce our Terms.

We do not sell or rent personal data. We do not share it for targeted advertising. We do not build profiles about you for anyone else.

11. Who else handles data

• Apple: Sign in with Apple, iCloud, App Store purchases, FinanceKit, on-device speech, text and language models, Maps, notifications.
• Google Cloud and Firebase: sign-in, database, server code, App Check, and the encryption key for bank tokens. Google acts for us under its data processing terms.
• Plaid: the bank connection, under its own End User Privacy Policy.

Your email app sends any letter Nornas drafts for you; Nornas does not see what you send. When you open a company's cancel page from Nornas, that company's own privacy policy applies; Nornas does not see what you type there.

We may also share data if the law requires it, to protect people's safety or rights, or if Davfalcon's business is sold or merged (the new owner must follow this policy).

12. Keeping and deleting data

• iPhone and iCloud: until you delete it, use Erase All Data, or remove Nornas's iCloud data.
• Export: without iCloud, Nornas offers a file you keep.
• Shared items: while they exist; deleted ones leave a marker for up to 14 days so others are told.
• Bank data: transactions and monthly totals for the current month and the 12 before it; daily balances for up to 400 days.
• Bank data is deleted when you disconnect, when your bank revokes access, when you delete your account, and two days after your plan ends.
• Apple Wallet: never stored (Section 5).
• Your account: Delete Account (Settings > Profile) revokes Sign in with Apple, removes your banks, deletes what you shared and deletes your account.
• Purchase records: as in Section 8.
• Crash reports: Apple may send us crash logs under its terms. They contain no bill or bank data.

13. Security

Data travels encrypted and is stored encrypted by our providers. Access is limited by per-user rules and App Check, bank tokens are encrypted with a key only our servers can use, and Plaid's notices are checked by signature. We follow a written information security program. No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

14. Financial privacy (GLBA)

Because Nornas reads financial account data, we may be treated as a "financial institution" under the federal Gramm-Leach-Bliley Act. Either way, we follow its rules on sharing: we do not share nonpublic personal information with companies outside Davfalcon except the service providers in Section 11 that work for us, or as the law allows or requires. Because we do not share it in other ways, there is nothing to opt out of.

15. Your choices and rights

You can see, correct, export and delete most of your data yourself in the app. For data on our servers, write to support@nornas.app. We will verify the request comes from you, usually by your signed-in account, and answer within 45 days.

Depending on your state (for example California, Colorado, Connecticut, Texas, Virginia and others), you may have the right to know, access, correct, delete or get a copy of your data, and to opt out of its sale, targeted advertising or profiling. We do none of those three. If we refuse a request, you can appeal by replying to our answer; we will answer the appeal within 60 days. We will not treat you differently for using these rights.

16. Children

Nornas is for people 18 and older. It is not directed to children, and we do not knowingly collect data from anyone under 18. If we learn we have, we delete it. If you think a child is using Nornas, write to support@nornas.app.

17. Do Not Track

Nornas does not track you across other apps or websites, so it does not respond differently to Do Not Track or similar signals.

18. Changes

We update this policy when Nornas changes. For a material change, we tell you in the app and update the date above.

19. Contact

Davfalcon Company LLC
640 W 53rd Terrace, Hialeah, FL 33012, United States
support@nornas.app

Apple, iPhone, iCloud, Apple Card, Apple Cash, Apple Wallet, Siri, Sign in with Apple and TestFlight are trademarks of Apple Inc., registered in the U.S. and other countries and regions. App Store is a service mark of Apple Inc. Nornas is made by Davfalcon Company LLC and is not affiliated with, sponsored or endorsed by Apple Inc.