Privacy policy

Last updated: 21 September 2026. The Portuguese version prevails.

1. Controller

NINO, LDA, company no. (NIPC) 519478509, Rua Igreja, 20, Ouca, Vagos, 3840-302 Aveiro, Portugal. Contact: suporte@nino.pt.

2. Data we collect

• Account: email address (passwordless login with a code sent by email), name, trade and tax/VAT number if you provide them.
• Business data: the customers, quotes, pro formas, appointments and reminders you create in the app. They belong to you; NINO, LDA acts as processor (art. 28 GDPR).
• Leads: the email you leave on our website to ask for information.
• Analytics: Cloudflare Web Analytics, cookie-free, no visitor identification.

3. Where data is stored

App data — your customers, quotes, pro formas and appointments — is hosted on Supabase in the European Union (Frankfurt, Germany). The website is served by Cloudflare.

One clear exception: if you accept marketing cookies, website browsing data (not your business data) is sent to Meta and Google in the United States. Only with your consent, which you can withdraw at any time; it never covers your account content. See the cookie policy.

4. Who we share it with

• Supabase (database and authentication, EU).
• Cloudflare (website hosting, email routing, cookie-free analytics).
• Resend (transactional emails, such as your login code).
• Paddle (website payments, as Merchant of Record — processes payment data and issues the subscription invoice; NINO, LDA never sees card numbers). Paddle operates from the UK and the US, so payment data is transferred outside the EU.
• Apple / Google (in-app purchases in the mobile app).
• Meta and Google (advertising, consent only), with a transfer to the United States under the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.
• SMS/WhatsApp providers, when you enable reminders for your customers (the recipient's number is passed on to deliver the message).

We do not sell personal data.

5. Purposes and legal bases

We process data to provide the service (performance of contract), send account and product communications (legitimate interest / consent) and comply with legal and tax obligations. Marketing cookies rely solely on your consent (GDPR art. 6(1)(a)), which you can withdraw via "Cookie preferences" at the bottom of every page.

6. Retention

Account data is kept while your account exists. After closure it is deleted or anonymised within a reasonable period, unless the law requires us to keep it.

7. Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to suporte@nino.pt. You can also complain to the Portuguese supervisory authority, CNPD (www.cnpd.pt), or to your own: in the UK the ICO (ico.org.uk), in Ireland the Data Protection Commission (dataprotection.ie).

8. Mobile app

The NINO mobile app (iOS and Android) processes the same data as the web version, with the same safeguards. In-app purchases are processed by Apple or Google. The app does not access your device's contacts, photos or location.