Privacy Policy

1Who we are

NoCap is a money-tracking app and website operated by Plannook ("we", "us"). This policy explains what personal data we collect when you use the NoCap app or website, why we collect it, and the choices you have. It applies to users in Malaysia, Singapore, Australia and anywhere else NoCap is offered.

We aim to comply with the Personal Data Protection Act 2010 (Malaysia), the Personal Data Protection Act 2012 (Singapore) and the Privacy Act 1988 with the Australian Privacy Principles (Australia).

2What we collect

Information you give us

Account details: your email address, display name, password (stored only as a secure hash by our authentication provider) and the country you choose.
Money records you enter: accounts and their balances, expenses, income, transfers, categories, notes, recurring bills, credit card dates, cashback rules and splits.
People you add: the name you give a debt account (for example "Ali") and the email address of anyone you invite to a shared book.
Messages you send us, such as support requests.

Information collected automatically

Device and app information: device model, operating system, app version, language and time zone.
Usage and diagnostics: which screens are opened, crashes and errors, so we can fix problems and improve the app.
A push notification token, if you allow notifications, so we can send reminders such as card due dates.

What we do not collect

We never ask for or store your online banking, e-wallet or card login details.
NoCap does not connect to your bank. Everything in the app is what you enter yourself, unless you later turn on an optional feature that clearly says otherwise.
We do not collect your precise location.

3Why we use it

To provide the app: store your records, sync them between your devices and with members of a shared book, and work out figures such as balances, expected month-end and survival months.
To send reminders and notifications you have turned on.
To keep the service secure, prevent abuse and fix errors.
To understand how NoCap is used, in aggregate, and improve it.
To show anonymous comparisons, only if you turn on "Compare with other users" in Settings (it is off until you do). Then, at most once a day, the app sends us three things: your survival months for the current month, rounded to one decimal place and capped at 12, the currency code of your personal book (for example MYR), and the month. No amounts, balances, records, account names or categories ever leave your phone for this. We only ever show you your own rank among people with the same currency in the same month, and only when at least 30 people are in that group; nobody can see your number. Turning the setting off deletes what was sent.
To show your recording rank on your profile. Each day you add at least one record, the app sends us that date (for example 2026-11-01), linked to your account. Nothing else is sent for this: no amounts, records, books or currencies. We use the dates only to count your recording days and show you your own place among everyone using NoCap; nobody else can see your count or your place. The dates are deleted when you delete your account.
To process subscriptions and answer your questions.
To meet legal obligations.

We do not sell your personal data, and we do not use your money records for advertising.

4Who can see your data

Members of a shared book see every account and record in that book. Only invite people you trust. Records in your private book are visible only to you.
Service providers who run parts of NoCap for us, under contracts that limit how they may use data: Supabase (database, sign-in and storage, hosted in Singapore), Google Firebase (notifications, crash and usage analytics, app configuration), Vercel (website hosting), and Apple and Google (app distribution and in-app purchases).
Authorities, when the law requires it, or to protect the rights and safety of our users or the public.
A buyer or successor, if Plannook's business is transferred, who must keep protecting your data under this policy.

5Where your data is stored

Your data is stored on servers in Singapore. Some service providers may process limited data in other countries. When data leaves your country, we rely on the provider's contractual and security commitments to protect it to a standard comparable to the law where you live.

6How long we keep it

We keep your data while your account is open. If you delete your account, we delete your personal data and records within 30 days, except where we must keep something longer by law (for example, records of payments). Backups are overwritten on a rolling basis within a further 30 days.

When you delete your account, every book that only you belong to is erased at once, together with all its accounts, records, categories and recurring items. In a book you share with others, the book and its records stay for the other members, but your membership is removed, your name is no longer attached to the records you added, and if you were the owner, the member who joined first becomes the owner.

7How we protect it

Data is encrypted in transit and at rest. Access inside the database is restricted so that each person can only reach the books they belong to. Our staff do not look at your money records; the admin console shows only account details and totals. No system is perfectly secure, so please use a strong password and keep your device locked.

8Your choices and rights

Access and correct: you can see and edit your data in the app at any time.
Export: you can ask us for a copy of your data.
Delete: you can delete your account in Settings, or ask us to.
Notifications and comparisons: you can turn these off in Settings.
Withdraw consent: you can stop using NoCap at any time.

To make a request, email support@plannook.app from the address on your account. We reply within 21 days in Malaysia, 30 days in Singapore and 30 days in Australia. If you are not satisfied, you may complain to the Personal Data Protection Commissioner (Malaysia), the Personal Data Protection Commission (Singapore) or the Office of the Australian Information Commissioner.

9Children

NoCap can be used by people of any age, including children and teenagers. If you are under 18, please use NoCap with the permission of a parent or legal guardian. If you are under 13, a parent or guardian must agree to us collecting and using your data as described in this policy, and should set up the account for you.

We collect only what NoCap needs to work, and the protections in this policy apply to everyone, whatever their age. A parent or guardian who wants to see a child's spending can make a separate book for the child and invite them to it; the child then sees only that book, not the parent's other books. A parent or guardian can ask to see, correct or delete their child's data at any time by emailing support@plannook.app. If we learn that we hold data from a child under 13 without a parent's or guardian's agreement, we will delete it.

10Changes to this policy

We may update this policy. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.

11Contact us

Plannook, Malaysia. Email: support@plannook.app