Earno is built privacy first, and this policy is written to be honest rather than flattering. It explains exactly what stays on your phone, what reaches our servers, who else is involved, how long we keep things, and the rights you have.
Earno ("Earno", "we", "us", "our") is provided by Bouteraa Devops Solutions, a sole proprietorship (Jednoosobowa Działalność Gospodarcza) established in Poland (VAT PL6751526881, REGON 544530975), Warsaw, Poland. For the personal data described below, we are the data controller under the EU General Data Protection Regulation (GDPR).
We are a very small team and we are not required to appoint a Data Protection Officer. Questions about this policy, or about your data, go straight to us at privacy@earno-app.com and a person reads them.
The money story itself, every check-in, every amount, every slip-up, is written on your phone first and the app works fully offline.
If you create an account, we keep a backup of that data so you can restore it on a new device, and we sync the parts of a shared challenge that your friends need to see.
We show no ads, we never sell your data, and we never use your data to train artificial intelligence.
We do not connect to your bank, your cards or your transactions. The amounts in Earno are your own estimates of money you chose not to spend.
We do not track you across other apps or websites, and we use no advertising identifiers.
The rest of this policy is the detail behind those five sentences.
On your device: your challenges, your check-ins, the amounts, your streaks, your badges, and the full history behind them, in the app's private storage.
Your history stays there until you add an email address. Adding one creates your account and turns on the backup, so that a lost or replaced phone no longer means a lost history.
With an account, we keep that backup and we store the challenges you own, solo ones included, so they can come back on a new phone.
If you join a friend's challenge from a link without adding an email, only that shared challenge travels: your first name and how you are doing in it, so the people in it can see the shared bucket fill. The rest of your history stays on your phone.
One thing deserves saying plainly. Once you finish setting up Earno, the app sends us a small record about the installation itself, described under Product analytics below, even if you never sign in. It is about the app and the device, not about what you resist.
Account details: your email address, your first name, your age, your country, your currency and your language. A profile photo if you add one. You enter your name and age while setting up, and you can change them at any time in Edit profile.
Setup answers: your spending style, what you are saving for, the kinds of things that tempt you, and a self-rated impulse score from 0 to 10. Setting up asks for all of these, and a couple of them start on a default answer if you simply tap through. They are stored with your account so we can understand, in aggregate, who Earno is helping.
Challenges and progress: the name you give a challenge, the item you are resisting, its icon, your amounts, dates, streaks and check-ins. Without an account this stays on your device. With an account, the challenges you own are stored on our servers so they survive a lost phone, and shared challenges send the parts other members need.
Account backup: so you can restore everything on a new device, we store a copy of your local data, including your full log of check-ins and slip-ups and the challenges you have deleted, as a single record tied to your account. It also contains the details of squad-mates in your shared challenges, because their part of a shared challenge lives in your copy too.
Product analytics: one record per installation, so we can see how many people use Earno, on what devices, and whether they stay. It contains your first name, your email address if you have given us one, a random installation identifier we generate (never an advertising identifier), your device model, operating system, app version, language, time zone, country, currency, plan, whether notifications and location are switched on, how many challenges you have active, how often and how long you open the app, and the IP address your device connects from. This is an identified record, not an anonymous statistic, and it is written for anyone who finishes setting up, with or without an account.
Friend challenges: if you invite someone, we process the email address you invite, and the shared challenge's progress so both of you can see it. What other members can see is set out in section 7.
Location, only if you switch on weather: your device sends its coordinates to fetch local weather and sunrise or sunset times, so your home screen and Lumen match the sky outside. See section 12, which explains this honestly and in full.
Notifications, only if you allow them: a notification token issued by our delivery provider, so we can send check-in reminders and squad updates. The messages themselves can contain a squad-mate's first name and the name of a challenge, which means those can appear on your lock screen.
Payments: if you subscribe, Apple or Google handles the money, and RevenueCat, the service we use to manage subscriptions, tells us what happened. We receive a record that includes the product you bought, the price and currency charged, the store's tax and commission share, the country of your store account, the store's transaction identifiers, whether it was a trial, and the event data RevenueCat sends us. It is stored against your Earno account, and your Earno account identifier is what RevenueCat uses to recognise you. We never receive or store your card or bank details.
Crash reports and diagnostics: when the app fails, we receive a report so we can fix it. It contains the error and where in the code it happened, your device model, operating system and app version, and a short trail of what the app was doing just before. We do not send your money history, your check-ins or your amounts to it.
Support and feedback: anything you send us, and the in-app feedback form, which does not ask for your name.
Website: earno-app.com shows this policy, the Terms, the Community Guidelines and a page of community wins. It sets no cookies, runs no analytics and no advertising, and stores nothing about you except the language you pick, which stays in your own browser.
You name your own challenges, and the name is free text. Earno suggests an icon based on what you type, and the icon set includes things like a cigarette, a glass, or a pill, because those are habits people genuinely want to stop.
That means a challenge name can say something about your health, and in principle about other private matters, and for account holders that name is stored on our servers, appears in the notifications your squad-mates receive, and appears in an invite email if you invite someone to it.
We never ask you for health information, and we never use what you write to profile you or to target anything at you. One thing you should know: when you name a challenge, Earno matches the words you typed against its icon library and pre-selects an icon, so a name like "quit smoking" selects a cigarette. That icon is saved with the challenge and travels with it, and you can always pick a different one.
If you would rather a subject did not leave your phone, keep that challenge on a device without an account, or give it a name that means something to you and nothing to anyone else.
Where a name you choose does reveal something sensitive, we rely on your explicit consent to store and share it in the way this policy describes, and you can withdraw that at any time by renaming or deleting the challenge, or by deleting your account.
To give you the app, your account, the backup and friend challenges: because it is necessary to perform our contract with you (GDPR Article 6(1)(b)).
To send notifications: with your consent (Article 6(1)(a)), which you can withdraw at any time in Settings or in your device settings.
To match the app to your local weather: with your consent for location (Article 6(1)(a)), which is off until you turn it on and can be withdrawn at any time.
To feature you in a community spotlight: with your explicit consent (Article 6(1)(a)), which is never required and can be withdrawn (see section 15).
To understand how Earno is used, keep it working, prevent abuse and fix crashes: for our legitimate interests in running and improving a product people rely on (Article 6(1)(f)). We keep this to what we need, and you can object at any time.
To take payment and to meet our tax and accounting duties: to perform our contract and to comply with legal obligations (Articles 6(1)(b) and 6(1)(c)).
For a challenge name that reveals something about your health or another special category of data: your explicit consent (Article 9(2)(a)), given by choosing that name and syncing or sharing it.
In a shared challenge, the other members can see your first name, your profile photo if you have one, how full your bucket is, what you have earned in that challenge, and whether you have finished. They can also see the email address the invitation was sent to, because that is how an invitation is addressed.
Your slip-ups are private. They are never shown to other members, in any challenge.
Your other challenges are never visible to them, and neither is your total across the app.
You can leave a challenge, or remove someone from one you host, at any time. Hiding your own progress bar with Show my progress is part of Pro, so on a free account your progress stays visible to the people in your shared challenges. If that is not what you want, leave the challenge or write to us and we will hide it for you.
We share personal data only with providers that help us run Earno, and only with what they need. We never sell it, never use it for advertising, and never use it to train AI models.
Your account, your backup and everything in our live database are kept in the European Union, in Frankfurt, Germany. Crash reports go to our crash provider's European service.
Our nightly database backups are encrypted before they leave our systems, with a key only we hold, and are then stored with Cloudflare, which may place them outside the EEA. Because they are encrypted, Cloudflare cannot read them.
Some of the providers in section 8 are based in the United States, including RevenueCat, Expo, Resend, Cloudflare, GitHub and the stores themselves. Where personal data reaches them, the transfer is protected either by an adequacy decision or by the European Commission's Standard Contractual Clauses, together with the safeguards in their data processing agreements.
On-device data: until you delete it, delete your account, or remove the app.
Account data and your backup: while your account exists, and erased when you delete it.
Deleted past challenges: when you delete one, a short summary including its name and the amount earned is kept on your device for 30 days as a safety net, then removed automatically. Because it is part of your account backup, a copy is also removed when that backup is.
Inactive accounts: an account with no activity at all for 90 days without an email address, or 365 days with one, is deleted automatically, along with its backup and photo. Any use of Earno resets the clock, and paid and trial accounts are never removed this way.
Analytics: the record described in section 4 is kept while you use Earno and for 24 months after your last use, then deleted. The IP addresses inside it are deleted after 90 days in every case. Your name and email address are removed as soon as you delete your account, and what is left is statistics about installs and retention that are no longer linked to you.
Encrypted database backups: kept for 30 days and then deleted automatically. This means that for up to 30 days after you delete your account, an encrypted copy still exists in our backups. We do not open backups to remove single accounts, because that would mean decrypting everyone's data, but they expire on their own.
Payment records: kept for as long as Polish accounting and tax law requires, which is 5 years from the end of the year the payment falls in. These survive account deletion, because we are legally required to keep them.
Location: not stored in your account at any point (see section 12).
Notification token: until you turn notifications off or delete your account.
Support messages: for as long as needed to deal with your request.
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw any consent you gave. Withdrawing consent does not affect what we did before you withdrew it.
Much of this is directly in the app: edit your profile, download your data, hide your progress, turn notifications or weather off, and delete your account with everything in it.
Download my data gives you the data held on your device. If you would like everything we hold on our servers as well, email privacy@earno-app.com and we will send it to you.
To exercise any right, email privacy@earno-app.com. We do not make automated decisions about you that produce legal or similarly significant effects.
If you think we have mishandled your data, you can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO, uodo.gov.pl), or to the authority where you live.
Weather is optional and off until you switch it on. When it is on, the app asks your device where it is so Lumen and your home screen can match your real weather and the time of day.
Being precise about this, because it is easy to be vague: your device sends its coordinates each time the app opens or comes back to the foreground, and at most once every ten minutes while it is open. They go to our weather function and to our weather providers, Apple WeatherKit and Open-Meteo. We ask the device for a low-accuracy fix, which is a rougher position than navigation apps use, but what is transmitted is a coordinate, not a city name.
We do not store your location in your account, we do not build a history of where you have been, and we do not track your movements. Coordinates can appear briefly in the technical logs our providers and we keep to run and debug the service.
You can turn weather off at any time in Privacy and data, or withdraw the permission in your device settings.
Earno is for people aged 13 and over. We ask your age when you set up, and we do not knowingly collect data from children under 13. The age you give is not verified, so if you believe a child under 13 is using Earno with their own account, contact privacy@earno-app.com and we will delete it.
In Poland and several other countries, a parent or guardian has to agree before someone under 16 can consent to optional features. Community spotlights are not offered at all to anyone under 16.
If you are under 16, please ask a parent or guardian before turning on notifications or weather, and talk to them about using Earno with friends.
Your money history lives on your device inside the storage the operating system protects. Data travelling to us and to our providers goes over encrypted connections. Our database is protected by row-level security, so an account can only reach its own data and the shared challenges it is part of, and our nightly database backup is encrypted with a passphrase only we hold before it is stored.
Access to production data is limited to the people who run Earno, which today is a very small number, and the dashboard they use can only read a fixed set of reports rather than the database at large.
Your profile photo is stored so squad-mates can see it in a shared challenge. Treat it as something visible to people you share challenges with rather than as a private file.
No system is perfectly secure, but we collect as little as we can, and we would rather tell you what we hold than promise more than we can keep.
Spotlights are not running yet. When we start them, this is how they will work, and we will not publish anyone's story before it does.
If we would like to celebrate a standout challenge on our website or in our own marketing, you will see a message in the app asking first, with a box you have to tick yourself before the confirm button does anything.
We would use your first name, the country you are in, and what you achieved. We would not use your photo, your email address, or anything about your slip-ups. For a shared challenge we ask every member separately, and a story is only ever published where every member has said yes.
This is never required, it has no effect on anything else in Earno, and you can change your mind at any time by emailing privacy@earno-app.com, after which we take the story down. We keep a record of your answer, and the date you gave it, so we can honour it. Spotlights are not offered to anyone under 16.
We may update this policy. When we do, we change the effective date at the top, and for anything important we tell you in the app before it takes effect. The current version is always in the app and at earno-app.com.
This policy is written in English. Earno's screens are translated into several languages, but the legal documents are English only, so that there is one authoritative wording rather than several that can drift apart.
We only ask for what the feature in front of you needs, and here is where you actually have a choice.
Your first name and your age are needed to set Earno up, and setup cannot finish without them. The age is how we keep Earno to 13 and over, and how we keep spotlights to 16 and over.
Your email address is needed only if you want an account, which means a backup you can restore and challenges with friends. Without one you can use everything else on your own device, but there is nothing for us to restore if you lose your phone.
The setup questions about your spending style, your motive, what tempts you and your impulse score are genuinely optional. Skipping them changes nothing about how Earno works for you.
Notifications, weather and community spotlights are all off or unasked until you choose them, and turning any of them down costs you nothing but that feature.
A profile photo is optional. If you subscribe, the store needs your payment details, but we never see them.
Data controller: Bouteraa Devops Solutions, a sole proprietorship (Jednoosobowa Działalność Gospodarcza) established in Poland (VAT PL6751526881, REGON 544530975), Warsaw, Poland.
Privacy contact: privacy@earno-app.com. General support: support@earno-app.com.
If you would like a copy of the safeguards we rely on for transfers outside the EEA, described in section 9, write to us and we will send them to you.