1. Who we are and what this covers
NexGen PC Logic LLC ("Contamos," "we," "us") makes the Contamos iPhone app (the "App") and runs getcontamos.com (the "Site"). This Privacy Policy explains how we collect, use, share and protect personal information when you use the App, the Site and related services (the "Service"), and the choices you have. It's part of our Terms of Service.
For data protection laws that use the term, we are the "controller" (or "business") for the personal information described here.
2. Information we collect
Information you give us
- Account details: your name, email address and password (stored only as a secure hash by our authentication provider).
- Household details: the households you create or join, your role, who invited you, and join requests and approvals.
- Things you enter: manual accounts and transactions, categories, budgets, bills, goals, notes, card nicknames and due dates, retirement inputs and similar planning information.
- Images you choose to add, such as a profile picture, a household icon, or a picture for an account or goal. See how images are stored.
- Messages to us, such as support emails and beta feedback.
Information from your financial institutions, through Plaid
When you link an account, Plaid collects information from your bank and passes some of it to us, including account and institution names, account type and subtype, the last few digits of the account number, current and available balances, credit limits, and transaction details (date, amount, merchant name, category and pending status). We also store the identifiers and access credentials Plaid issues for the connection, on our servers only. We don't receive or store your bank username or password.
Information collected automatically
- Device and app information: device type, iOS and App version, and a push notification token if you allow notifications.
- Security and service logs: IP address, request times and error details that our hosting and database providers record when the App talks to our servers. We use these to keep the Service secure and working.
The App does not include advertising SDKs or third-party analytics or tracking SDKs, and it does not track you across other companies' apps and websites.
Information that stays on your iPhone
- Card photos: if you add a photo of a card, it's kept only on your iPhone and never uploaded, because a card photo can show the full card number.
- Preferences: display and notification settings are saved on your device.
The Site
The Site doesn't use cookies, analytics, advertising pixels or third-party fonts or scripts. Our hosting provider records standard request logs (IP address, browser user agent, page requested and time) for security and reliability, kept for up to 30 days.
3. How we use information
- To provide the Service: show your accounts, sync transactions, calculate budgets, forecasts and plans, and share household data with your household's members.
- To send notifications you ask for, such as bill reminders and balance alerts.
- To keep the Service secure: authenticate you, control who can access each household, detect and prevent fraud and abuse, and investigate incidents.
- To support you and respond to your messages.
- To maintain and improve the Service, including fixing bugs and understanding which features work, using our own service logs and the feedback you send.
- To bill you for any Paid Plans (Apple processes the payment; we receive confirmation of your subscription status, not your card details).
- To comply with law and enforce our Terms.
We don't use your financial data to advertise to you, we don't build advertising profiles, and we don't make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. Plaid
We use Plaid Inc. to connect your financial accounts. When you link an account, you provide your bank login directly to Plaid, and Plaid's collection and use of your information is governed by the Plaid End User Privacy Policy. You can see and manage the connections Plaid has on your behalf at my.plaid.com.
When an institution is disconnected in the App, we tell Plaid to remove the connection, delete the access credential we hold for it, and delete the accounts from that connection along with their imported transactions. If the person who linked it has already left the household, the household keeps the history it already has; only the connection is removed.
6. Summary by category
This table summarizes the categories of personal information we've collected in the past 12 months, using the categories in California law.
| Category | Examples | Source | Disclosed to |
|---|---|---|---|
| Identifiers | Name, email, account ID, IP address, push token | You, your device | Household members (name), service providers |
| Financial information | Account names, last digits, balances, transactions | Your bank via Plaid; you | Household members, service providers |
| Commercial information | Subscription status for Paid Plans | Apple | Service providers |
| Internet or network activity | Request and error logs | Your device | Service providers |
| Audio or visual information | Images you choose to upload | You | Household members, service providers |
| Sensitive personal information | Account login (email and password); financial account data in combination with access credentials Plaid issues | You; Plaid | Service providers |
We use sensitive personal information only to provide the Service you request, keep it secure and meet legal obligations, and not to infer characteristics about you.
7. How long we keep information
- Account and household data is kept while your account is active.
- When you delete something in the App (a transaction, a manual account, a photo), it's removed from our active database.
- When a bank is disconnected, the Plaid access credential is deleted right away, along with the accounts from that connection and their transactions (except as described in Plaid for someone who has left the household).
- When you delete your account, we delete or de-identify your personal information within 30 days, except as described below. Any copies left in backups are deleted as those backups expire, within 30 days.
- Shared household data: if you leave or delete your account while others remain in a household, entries you added by hand to the household's shared accounts, budgets, bills and goals may stay with the household. Bank connections you linked are disconnected, and the accounts they brought in are removed. Your name is removed from the member list. If you're the last member, the household is deleted.
- Service logs are kept for up to 30 days unless we need them longer to investigate a security incident.
We may keep limited information longer when the law requires it, to resolve disputes, or to enforce our agreements.
8. How we protect information
We use administrative, technical and physical safeguards designed to protect personal information, including TLS encryption for data in transit, encryption at rest for our database and file storage, database row-level security policies that limit each household's data to its members, server-side-only storage of bank connection credentials, card photos that never leave your device, and least-privilege access for our team. You can read more on our Security page.
No system is perfectly secure. If we learn of a security breach that affects your personal information, we'll notify you and regulators as the law requires.
9. How images are stored
Profile pictures, household icons and account and goal pictures are stored in our cloud storage and served by web address so the App can load them quickly. The addresses are long and hard to guess, and the folders can't be browsed or listed, but anyone who has an image's exact address can open it. Please don't upload images that contain sensitive information. Card photos are different: they stay on your iPhone.
10. Your choices
- Notifications: turn them off in the App or in iOS Settings.
- Bank connections: disconnect any institution in the App's settings.
- Household sharing: leave a household, or, as an owner, remove members.
- Photos and entries: edit or delete them in the App.
- Your account: ask us to delete it. See Delete your account.
11. Your privacy rights
Depending on where you live, including California, Colorado, Connecticut, Virginia and other U.S. states with consumer privacy laws, you may have the right to:
- know what personal information we've collected about you and how we use and disclose it, and get a copy in a portable format;
- correct inaccurate personal information;
- delete personal information we've collected from you;
- opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we don't do these);
- limit the use of sensitive personal information (we already use it only as permitted without that request); and
- not be treated differently for exercising your rights.
We offer these rights to all users, wherever they live. To make a request, email privacy@getcontamos.com from the address on your account, or tell us which account it's about. We'll verify your request by confirming control of that email address, and may ask for more information if needed. You can use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm your identity. We'll respond within 45 days, or tell you if we need more time as the law allows. If we deny your request, you can appeal by replying to our decision, and we'll respond to the appeal within the time the law requires.
Our Site honors Global Privacy Control signals, though because we don't sell or share personal information, there's nothing further to opt out of.
If you're outside the United States
The Service is intended for U.S. users and our servers are in the United States. If you use it from elsewhere, including the European Economic Area or the United Kingdom, your information will be processed in the U.S. Where those laws apply, we process your information to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to meet legal obligations, and with your consent where required (for example, for notifications). You have rights to access, correct, delete, restrict or object to processing, and to data portability, and you may complain to your local data protection authority.
12. Children
The Service is for adults 18 and older. It isn't directed to children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we'll delete it.
13. Changes to this policy
We'll update this Policy as the Service changes. If we make a material change, we'll tell you in the App or by email before it takes effect. The date at the top shows when it was last updated.
14. Contact us
Questions or requests about privacy: privacy@getcontamos.com
NexGen PC Logic LLC
8244 Patterson Woods Dr, Apt 6108
Orlando, FL 32821