Compliance and Privacy
Privacy Policy
Information on secure data processing, local storage, and your rights on the Onombongo platform.
Last updated: September 22, 2026
1. Data controller
The Onombongo platform (https://www.onombongo.com) is a system dedicated to personal budget management and financial planning.
The person responsible for processing personal data and governing platform privacy is:
Data Controller and Privacy Officer:
- Name: Nicolau Alfredo
- Website: https://nicolaualfredo.com/
- Direct contact: Official Contact Page
2. Personal and Financial Data Collected
We exclusively collect information strictly necessary to deliver our financial management services:
- Account and registration details: when creating an account, we collect your Full Name, Email Address, and Encrypted Password (stored as an irreversible cryptographic hash).
- Budget management data: financial accounts, categories, budgets, and income or expense transactions that you freely register within the system.
- Session and interface preferences: temporary authentication credentials and language or visual theme selections are saved in your browser via
localStorage(onombongo_token), without third-party tracking. - Operational security logs: servers log anonymized IP addresses and technical request telemetry solely to prevent intrusion and maintain platform integrity.
3. How We Use Your Data
We use the indicated information solely for legitimate and transparent operational purposes:
| Purpose | Data | Legal Basis |
|---|---|---|
| Account authentication and management | Name, email, and encrypted credentials | Contract execution and service delivery |
| Budget tracking and reports | Accounts, budgets, categories, and transactions | Contract execution requested by the user |
| Security and fraud prevention | Technical access logs and IP address | Legitimate interest in safeguarding infrastructure |
| Essential service notices | Email address | Compliance with security requirements and support |
4. Security, Local Storage, and Zero Advertising
We maintain a strict privacy stance: Onombongo does not sell or transfer your financial data to advertisers or marketing networks.
- Essential storage: we use local web storage exclusively to manage your active session and retain interface preferences.
- Zero advertising: the platform does not integrate advertising networks (such as Google AdSense or similar) nor does it load third-party trackers in your private area.
- Transit encryption: all traffic between your browser and our APIs is protected by secure TLS/HTTPS, ensuring strict confidentiality for financial operations.
- Isolation and access control: each user strictly accesses their own records under rigorous RBAC (Role-Based Access Control) rules, preventing unauthorized or cross-user exposure.
5. Data Sharing
Your personal and financial data is never sold, rented, or commercialized. We share information solely with services essential to technical operations:
- Server and hosting infrastructure: cloud computing and database systems featuring at-rest encryption and strictly restricted access.
- Essential communication services: technical platforms required to transmit transactional emails (such as account activation and password recovery).
- Legal obligations: disclosure of data only when formally and bindingly mandated by competent judicial or regulatory authorities.
6. Retention Periods and Protection
We keep your account details and financial records active only for as long as your subscription or account remains open on the platform.
Upon requesting account closure, your personal details and financial transactions are permanently purged from active servers or irreversibly anonymized.
7. Your Data Subject Rights
As a data subject and platform user, you may exercise the following rights guaranteed by law at any time:
- Access and Confirmation: inspect all registered personal data and archived financial transactions.
- Rectification: promptly update or correct inaccurate personal details or financial entries.
- Erasure and Right to Be Forgotten: request complete account termination and destruction of all associated data.
- Portability: export your financial records in structured and machine-readable formats.
- Objection and Revocation: challenge data processing grounded in legitimate interest and revoke previous consents.
8. Data Protection Officer and Contact
To exercise your rights or clarify any aspect of this policy, you may directly reach the responsible officer:
Nicolau Alfredo
Data Controller and Privacy Lead at Onombongo Platform