NYMBO Privacy Policy

This Privacy Policy governs the NYMBO mobile application (with public Android release Syncing Soon) and its associated cloud synchronization services provided under the Aformix brand (“Aformix”, “we”, “our”, or “us”).

Platform Distinction: This policy specifically describes data practices within the NYMBO mobile application and its backend APIs. General browsing on the public Aformix marketing website (www.aformix.com) remains governed by the Aformix Corporate Privacy Policy.

Pre-Login Privacy: Launching the NYMBO app initiates zero background network requests or tracking beacons prior to user-initiated authentication. The welcome splash screen plays a local bundled media asset without connecting to external servers.

Security Rate Limiting: On public authentication endpoints, our server logs transient client IP addresses for the purpose of rate limiting automated requests and brute-force attempts (such as 10 to 20 attempts per sliding window depending on the endpoint). These transient counters are stored in our application database and are not combined with user profiles or shared externally.

NYMBO is built for collaboration among household members:

• Shared Household Visibility: When you join a household, all members of that household can view shared chores, bills, renewals, records, attachments, and the chronological activity feed.
• Cross-Household Isolation: All records are strictly segregated by a unique household identifier (householdId). To protect against resource discovery, any attempt to access an item belonging to another household returns an HTTP 404 (Not Found) rather than 403 (Forbidden).
• Invitation Privacy:Household invitations are issued via single-use, cryptographically hashed tokens sent to the invitee's email address. Unclaimed invitations expire after 7 days.

When you attach receipts, appliance manuals, or domestic warranties to a NYMBO record:

• Private Storage Buckets: File attachments are stored in an access-restricted private storage bucket (records) on Supabase Storage with provider-managed volume encryption at rest.
• Zero Public URLs: Files are never assigned public or permanent URLs. File retrieval requires authenticated membership in the household and generates a time-limited signed URL that strictly expires after 300 seconds (5 minutes).
• Attachment Deletion: When an individual record is deleted, its file object is deleted from the storage bucket. When a household is deleted, associated storage attachments under that household are cleared before the household is removed.

NYMBO delivers chore alerts and due date reminders:

• Device Permission: On Android 13+, the app requests the standard runtime notification permission (POST_NOTIFICATIONS). You can revoke this permission at any time in device system settings.
• Quiet Hours & Muting: You can configure quiet hours and toggle global notifications off in your NYMBO account settings. During quiet hours, non-urgent alerts are suppressed.
• Delivery Channel: Push notifications are routed through Expo Application Services (EAS / 650 Industries) to your device.

You retain full control over your personal account:

• Self-Service Account Deletion: You can delete your NYMBO account at any time directly through the app (DELETE /api/me). Deleting your account permanently removes your credentials, active sessions, and personal notification preferences.
• Owner Transfer Safeguard: If you are the sole Owner of a household that has other active members, ownership must be transferred to another member before your account can be deleted, preventing accidental loss of access for family members.
• Household Deletion & Attachment Cleanup: If you are the sole member of a household, deleting your account triggers the deletion of that household, including its chores, bills, records, and activity feed. Stored file attachments under the household are cleared from cloud storage prior to database deletion.
• Household Departure vs. Account Deletion: Leaving a multi-member household (POST /api/households/current/leave) removes your membership from that household only; it does not delete your account, credentials, or sessions. If you choose to delete your account, your user account is removed and relational references on past household chores and activity are unlinked (SetNull). Static activity descriptions recorded prior to deletion (such as a historical member departure record or item title) may remain in the household log.
• Operational Deletion vs. Disaster Recovery Backups: Deletion of accounts, households, or records takes effect immediately in the live operational database. Automated disaster recovery backups maintained by our database provider (Supabase) are retained for system recovery and expire or are overwritten according to provider infrastructure lifecycle schedules.

NYMBO is engineered for adults and domestic household coordinators managing bills, warranties, and maintenance commitments. The application is not directed to children under 13 years of age (or 16 where applicable by local law).

We do not knowingly solicit or collect personal information from children under 13. If we become aware that personal information of a child under 13 has been collected without verifiable parental consent, we will promptly delete the data.