Caleio Privacy Policy

Last updated: 3 September 2026

1. Who we are

NoorLyfe is the data controller for Caleio. We follow the EU GDPR, the Danish Data Protection Act, and other applicable privacy laws including CCPA/CPRA, PIPEDA, LGPD, and the Australian Privacy Act 1988.

2. Data controller

3. What we collect

3.1 On your device only, never sent to us: daily logs, transactions, goals, debt, categories, and settings.

3.2 Processed by RevenueCat for subscriptions only: anonymised Apple transaction identifiers, subscription status, and device identifiers needed to validate a purchase. RevenueCat does not receive your financial entries. See revenuecat.com/privacy.

3.3 We do not collect your name or email for advertising, bank details, location, contacts, photos, behavioural analytics, or advertising IDs.

4. Legal basis (EEA/UK)

Subscription data is processed because it is necessary to perform the contract (GDPR Article 6(1)(b)).

5. Your rights

Depending on where you live, you may access, correct, erase, restrict, or port your data, and object to processing. Export a CSV from Profile at any time, including on the free tier. You can also delete all local data in Profile. To exercise other rights, email contact@noorlyfe.com. We respond within 30 days.

• EU/EEA: you may complain to Datatilsynet (datatilsynet.dk) or your local authority.
• UK: ICO (ico.org.uk).
• Australia: OAIC (oaic.gov.au).

6. California (CCPA/CPRA)

We do not sell or share personal information for cross context advertising. Contact contact@noorlyfe.com to exercise California rights.

7. Canada (PIPEDA)

We collect only what is needed for the App and subscriptions. You may withdraw consent by contacting us, subject to legal limits.

8. Brazil (LGPD)

You may confirm processing, access, correct, anonymise or delete data, and ask which third parties receive data. Contact contact@noorlyfe.com.

9. Australia

You may request access or correction via contact@noorlyfe.com.

10. Retention

App data stays on your device until you delete it or uninstall the App. RevenueCat keeps subscription records under its own policy.

11. Sharing

We do not sell or rent your data. We may disclose information only to meet a legal duty, protect rights or safety, or in a business transfer with notice.

12. Children

The App is not for children under 13. If you believe a child under 13 used it, contact us and we will help remove data.

13. Security

Everything you enter in the App stays on your device. Security depends on your iPhone passcode and encryption. We take reasonable steps to protect subscription data handled by RevenueCat.

14. International transfers

RevenueCat may process subscription data outside your country, using GDPR standard contractual clauses where required.

15. Changes

We may update this policy. Material changes will be announced in the App. The date above is the latest version.

16. Contact

Additional privacy rights by country and US state

United States

If you live in a US state with a comprehensive privacy law, including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, Tennessee, New Hampshire, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others as they take effect, you may have the right to know, access, correct, delete, and port personal information, to opt out of sale or sharing, and to appeal a refusal. We do not sell or share personal information as those laws define those terms. We do not use it for cross context or targeted advertising. We will not deny the App or give a worse price because you exercise a right. Most requests are done in the App: export CSV or delete all data in Profile. For anything else, email contact@noorlyfe.com. California residents may also use contact@noorlyfe.com. We do not have a “Do Not Sell or Share” link because we do not sell or share.

United Kingdom

UK GDPR and the Data Protection Act 2018 apply. You may complain to the ICO (ico.org.uk).

Ireland and the rest of the EEA

GDPR applies. You may complain to Datatilsynet in Denmark (lead authority for NoorLyfe) or your local authority, for example the DPC in Ireland (dataprotection.ie).

Canada

PIPEDA and applicable provincial laws, including Quebec Law