Privacy
Your invoices are your books, so it is worth knowing exactly where they are. This is not a translated legal notice: it is what the app does, told in the same language you use it in.
First the summary at a glance, then the detail: where your data lives, how subscriptions are paid, and what happens when you use AI.
- Your data
- Isolated in your workspace
- Backups
- Yours, one click away
- Payments
- Stripe handles them
- AI
- Only if you use it
Where your data lives
When you create an account, your data and attachments are stored on our servers. Each workspace is isolated by row-level access rules, so only your session can read or write your data.
The database and attachments are on servers in the European Union, in Ireland.
You sign in with Google or a magic email link. The session is kept in first-party cookies, not third-party ones.
And they leave whenever you want: from Data you download the full JSON backup, with or without an active subscription.
Payments
Stripe handles the subscription. Your card details are entered in Stripe and never pass through Nyrut or get stored here.
AI assistant (optional)
The AI features (reading a receipt, suggesting a category or explaining the year) send the content of that specific request — including the photo or PDF of the receipt — to Anthropic, our AI provider, which processes it and returns the result. If you don't use them, nothing is sent, and it is never used to train models.
What we don't do
- We don't sell or share your data with anyone.
- There are no advertising or tracking cookies. We count visits in aggregate and without cookies (Vercel Web Analytics); an invoice link never reaches those statistics.
- We don't read your invoices for anything other than providing the service.
Who helps us
To provide the service we work with these providers, each with only what it needs for its part:
- Supabase: database, attachments and sign-in.
- Vercel: application hosting and cookieless visit statistics.
- Stripe: subscription billing.
- Resend: sign-in emails and the invoices you send by email.
- Anthropic: the AI assistant, only when you use it.
- Google: only if you choose to sign in with your Google account.
Some are based in the United States; those transfers rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
Who's responsible
Nyrut is a service of Nafs Signal, SLU, the controller of your data. For anything about it, write to us at h@nafs.one or through the contact form.
Your rights
You can download everything of yours or delete it completely from Data, whenever you like and without asking. For any question about your data, write to us through the contact form.
If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).