Privacy Policy

Netcaly is a simple tool to keep track of your net worth. Because that involves financial information, we want to be clear about what we store, why, and what you can do about it. The short version: we only keep what Netcaly needs to work, we never sell your data, and you can export or delete it whenever you like.

Who we are

Netcaly is a service of NETONIC, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 93752318. In this policy, “we” and “us” mean NETONIC. We are the controller of the personal data described below. You can reach us at info+netcaly@netonic.nl.

What we collect

• Your Google account details. When you sign in with Google, we receive your name, email address, profile picture and Google account ID. We don’t receive your password, and we have no access to your Gmail, contacts, calendar or files.
• What you enter. The assets and liabilities you add: their names, types, icons and amounts, plus your preferred currency and language.
• Calculator results you choose to save. The net worth calculator on our website works in your browser and sends nothing while you type. If you press “Save and track it”, we keep the amounts with your session until you sign in, and then they become your items. If you don’t sign in, they’re removed when the session expires, after two hours without activity.
• Your net worth history. On days you change something, we store your totals for that day (assets, liabilities and net worth) so we can show how your net worth develops over time.
• Payment details. If you buy Lifetime, we store the amount, the date, the status and Mollie’s reference for the payment. Mollie processes the payment itself; we never see or store your card or bank details.
• Technical data. Your IP address and browser type, as part of your sign-in session and our server logs. We use these to keep you signed in and to protect Netcaly against abuse.

We don’t ask for, and you shouldn’t enter, bank logins, account numbers or other sensitive identifiers. Netcaly never connects to your bank.

Why we use it

• To provide Netcaly: signing you in, storing your items, calculating your net worth and showing its history. This is necessary to perform our agreement with you (article 6(1)(b) GDPR).
• To handle payments and keep our books, as Dutch tax law requires (article 6(1)(c) GDPR).
• To keep Netcaly secure: preventing abuse and investigating errors. This is our legitimate interest (article 6(1)(f) GDPR).

We don’t use your data for advertising, we don’t build profiles, and we don’t make automated decisions about you.

Cookies and local storage

Netcaly only uses strictly necessary cookies: a session cookie that keeps you signed in, a security token that protects forms, and a “remember me” cookie so you don’t have to sign in every day. Your browser also stores a few preferences locally, such as whether amounts are hidden. There are no analytics, advertising or tracking cookies, which is why you won’t see a cookie banner.

Who else processes your data

We work with a small number of service providers. They only process your data on our behalf and under our instructions:

• Google, to let you sign in with your Google account.
• Hetzner Online (Germany), which hosts our servers and database in the European Union.
• Ploi (the Netherlands), which we use to manage and deploy those servers.
• Mollie (the Netherlands), which processes Lifetime payments.

We never sell or rent your personal data. We only share it with others if the law requires us to. Google may process sign-in data outside the European Union; such transfers are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

How long we keep it

• Your account, items and history are kept until you delete your account. Deleting your account removes them immediately.
• Payment records are kept for seven years, because Dutch tax law requires us to keep our financial records that long.
• Server logs are kept for up to 14 days.
• Backups are kept for up to 30 days, after which deleted data is gone from our backups too.

How we protect it

All traffic to Netcaly is encrypted (HTTPS). Our servers are located in the EU, access to them is restricted, and we keep the software up to date. Signing in with Google means there’s no Netcaly password that could leak.

Your rights

Under the GDPR you have the right to:

• see the personal data we hold about you, and have it corrected;
• have your data deleted (you can delete your account yourself in Settings);
• receive your data in a portable format (you can download your items and history as CSV files in Settings);
• object to processing based on our legitimate interest, or ask us to restrict processing.

To use any of these rights, email info+netcaly@netonic.nl. We’ll respond within one month. If you think we handle your data incorrectly, please tell us. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Children

Netcaly is not intended for children under 16, and we don’t knowingly collect their data.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. If a change significantly affects how we handle your data, we’ll let you know before it takes effect.