# Privacy policy Last updated: November 4, 2026 This policy is written in Italian and translated; if the versions differ, the Italian one prevails. ## Who is responsible The data controller is: - Company: Estroverso srl - VAT number: IT03461120044 - Registered office: Savigliano (CN) - Privacy contact: nomadev@estroverso.com ## In short Your projects and your code stay on your computer: your phone connects to it directly, not to us. We don’t use advertising or profiling. Usage statistics, with Google Analytics, start only if you accept them, and you can turn them off at any time. ## What we process Apart from the order information Google Play shows us as the seller (see below), we process personal data in four cases only. - **Notification relay** (`push.nomadev.app`): your phone's Firebase notification token and a random identifier paired with it, kept until Firebase reports the token as no longer valid or until you ask us to delete it. For each notification: its kind, the project name (at most 60 characters) and the session id, used to compose the notification and not stored. Your IP address is held in memory only, to limit abuse. Legal basis: performance of the contract (art. 6(1)(b) GDPR). - **Subscriptions** (`push.nomadev.app`): for each subscription bought on Google Play, the purchase token, level, period, expiry date and status, linked to a random identifier of the NomaDev server on your computer. No name, email or payment details. We use them to verify the subscription with Google Play and to sign the server's licence. Kept while the subscription is valid and deleted automatically 12 months after it expires. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). - **Support emails**: what you write to us, used to answer you and kept as long as your request needs. Legal basis: your request and our legitimate interest in answering it (art. 6(1)(b) and (f) GDPR). - **Usage statistics**, only if you accept them: in the app with Google Analytics for Firebase, on the site with Google Analytics. They record which screens or pages you open and how often, your device model, operating system, language, country and a random identifier of the installation or browser. Never code, files, project names, passwords or messages, and never the advertising ID. Kept for 2 months. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the app’s Settings or with “Cookie preferences” at the bottom of the site. ## What third parties process Some services we rely on process data under their own policies: - **Google Play** handles purchases and subscriptions. As the seller we see the order information Google makes available to developers, never your card or payment details. [Google privacy policy](https://policies.google.com/privacy) - **Firebase Cloud Messaging** (Google) delivers notifications to your phone. [Firebase privacy](https://firebase.google.com/support/privacy) - **Anthropic** receives what Claude Code sends while working on your code, through the Claude Code installed on your computer, with your account and under its terms. We don't send it anything ourselves. [Anthropic privacy policy](https://www.anthropic.com/legal/privacy) - **Google Analytics** (Google) receives usage statistics, only if you accept them. [Google privacy policy](https://policies.google.com/privacy) - A **hosting provider** with servers in Frankfurt (Germany, European Union) hosts the website and the notification relay (`push.nomadev.app`). It stores the data on our behalf and only on our instructions, as a processor (Art. 28 GDPR). ## On your phone and on your computer The server address, the access token and your upload passwords stay on your phone (the passwords in the Android Keystore). Configuration, connected devices and the licence stay on your computer. We don't receive any of them. ## Cookies Without your consent this site sets no cookies. If you accept statistics from the banner, Google Analytics sets the `_ga` and `_ga_*` cookies, which last up to 2 years; you can change your choice with “Cookie preferences” at the bottom of every page. The app’s site preview uses a technical cookie, set by the server on your own computer, not by us. ## Transfers outside the EU Google and Anthropic may process data outside the European Union. These transfers rely on adequacy decisions of the European Commission or on standard contractual clauses. ## How long we keep data Notification tokens: until Firebase reports them as no longer valid, or until you ask us to delete them. Subscriptions: while they are valid, then deleted automatically 12 months after they expire. Usage statistics: 2 months. Support emails: as long as needed to handle your request, then deleted, unless the law requires otherwise. ## Your rights You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format, by writing to the privacy contact above. You can also lodge a complaint with the [Italian Data Protection Authority](https://www.garanteprivacy.it) or with the authority of your country. ## How to delete your data This section is about the **NomaDev** app by Estroverso. To ask us to delete the data we keep about you: - write to [nomadev@estroverso.com](mailto:nomadev@estroverso.com) with the subject “NomaDev data deletion”; - if you have or had a subscription, include your Google Play order number: it starts with `GPA.` and you'll find it in the Google Play receipt email. We need it to find your subscription data; - we delete the data and confirm it to you within 30 days. ## What is deleted and what is kept **What we delete:** your subscription data (purchase token, level, period, expiry date, status and the identifier of the linked server), your phone's notification tokens and the emails you sent us. After deletion the NomaDev server goes back to the Free level until you restore the purchase from the app. **What is kept:** the order information Google Play keeps as the seller, under [Google's privacy policy](https://policies.google.com/privacy); usage statistics, if you had accepted them, which are not tied to your name and are deleted automatically after 2 months. **Without writing to us:** disconnecting the phone in the app deletes the access token and the saved passwords from it. Uninstalling the app makes its notification token invalid, and the relay deletes it as soon as Firebase reports that. An expired subscription is deleted automatically 12 months after it expires. Uninstalling the server removes configuration and data from your computer: the commands are on the [support page](/support/). ## Children The service is not intended for people under 16. ## Changes If we change this policy we update the date at the top; if the changes are substantial, we also tell you in the app.