Privacy Policy

1. Who we are

Aomly (https://aomly.app) is a personal budgeting app run by an independent developer in Thailand, who is the data controller under Thailand's Personal Data Protection Act (PDPA). You can reach us at soravithok@gmail.com.

2. The short version

• You don't need an account, email or phone number to use Aomly.
• Your budget is saved on your own device. We only receive a copy if you turn on cloud sync.
• No advertising, no analytics or tracking, and we never sell your data.
• Aomly never connects to your bank, card issuer or lender.

3. Data that stays on your device

Everything you enter is saved in your browser or phone: your spending, bills, pay, savings goal, debt and interest rate, paydays, cards and pay-later accounts (their names, statement day, chosen design and, if you add them, the last 4 digits), and the name, birthday (day and month) and profile picture you choose, plus your settings. We can't see any of it unless you turn on cloud sync. See the Cookie and Storage Notice for details.

4. Data we receive and store

Cloud sync (optional, invite-only). A copy of your budget data (everything in section 3) is stored so your devices can share it, along with when it was last saved and its size. It's filed under a one-way fingerprint of your sync code, not under your name or email, and anyone with your sync code can read it, so keep it private.

Invites. When you accept an invite, we store the invite code's record: a random ID for the device that accepted it, when it was accepted, and an access pass that lets that person's other devices use cloud sync.

Reminders (optional). To send them, we store your device's notification address and keys (issued by your browser's push service), your time zone, language, the reminder times you chose, and the date each reminder was last sent. With cloud sync on, we also store a link to your synced budget (never the sync code itself) so the end-of-day reminder can be skipped on days you've logged spending.

Opening Aomly on your Home Screen. To open the Home Screen app already signed in, we briefly store a one-time code that stands for your sync code or access pass. It's deleted when used, or after 24 hours.

Technical data. Our host, Cloudflare, processes your IP address and browser details to deliver the site and protect it from abuse. We don't use them to identify you.

Emails. If you email us, we receive your email address and whatever you write.

5. Why we use it

• To provide what you ask for: cloud sync, reminders and opening on your Home Screen (performing our agreement with you).
• To keep Aomly secure and working, and to prevent abuse (our legitimate interests).
• To send notifications, which you allow in your browser and can withdraw any time (your consent).
• To reply to you when you write to us.

6. Who else handles it

• Cloudflare hosts Aomly and stores the data in section 4. Its network runs in many countries, so your data may be processed outside Thailand. Cloudflare protects it under its own data processing terms.
• Your browser's push service (for example Apple, Google, Microsoft or Mozilla) delivers reminders. It sees the notification, not your budget.
• Google (Gmail) handles emails you send us.

We don't share your data with anyone else, unless the law requires it.

7. How long we keep it

• On your device: until you delete it (clear the site's data, or remove the app).
• Cloud sync: until you delete it in Settings → Cloud sync → Delete cloud data, or ask us to. Disconnecting a device stops it syncing but doesn't delete the copy in the cloud. After deleting, we keep only a marker (a fingerprint with no data in it) so that sync code can't be used again. We may also delete synced data that hasn't been used for a long time.
• Reminders: deleted when you turn them all off, or when your browser tells us the notification address no longer works.
• Home Screen codes: when used, or after 24 hours.
• Invites: for as long as Aomly offers invites.
• Emails: as long as needed to reply and to keep a record of what you asked.

8. How we protect it

Aomly only uses encrypted connections (HTTPS). Synced data is filed under a fingerprint of a long random sync code, and we don't keep the sync code itself, except inside a Home Screen code for up to 24 hours. No system is perfectly secure, so keep your sync code private.

9. Your rights

Under the PDPA you can ask to access or get a copy of your data, correct it, delete it, restrict or object to its use, and withdraw consent. You can export your data yourself any time in Settings → Import or export data, and delete your cloud copy in Settings → Cloud sync → Delete cloud data. For anything else, email soravithok@gmail.com. To find your synced data, we need your sync code, because that's the only way it's filed. We'll reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee.

10. Children

Aomly isn't made for children. If you're under 20, please use it with a parent's or guardian's permission.

11. Changes

We'll update this policy when Aomly changes what it keeps. The date at the top shows the latest version.

12. Contact

soravithok@gmail.com