Privacy

What is stored, where, by whom, and what you can do about it.

Who is responsible

Nomogram is built and operated by its author, Enrique Alabort, in the United Kingdom, who is the data controller for the personal data described here. Contact: hello@nomogram.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk.

What is stored

Your email address, used to sign you in. The household you set up: members (a name and a birth year — never a full date of birth), accounts, balances and their history, holdings and the transactions behind them, income, pension arrangements and expense lines. Nothing about your health, your attitude to risk or your life expectancy is asked for.

A sign-in session is kept in this browser’s local storage so you stay signed in. There are no advertising or tracking cookies.

Where, and who processes it

The database and sign-in service are hosted by Supabase in Ireland (EU). The app itself is served by Vercel. Sign-in emails are sent by Supabase’s email service. Holdings are priced once a day by a job that sends the market symbol of each instrument held by any household — a ticker, never who holds it or how much — to a public market-data source and stores the close.

Each of these is a processor acting on our instructions. Transfers to the EU rely on the UK’s adequacy regulations for the EEA.

Why it is held

To provide the service you signed up for (contract), and to keep it secure — sign-in logs and abuse protection (legitimate interest). Nothing is used for marketing, profiling or advertising, and nothing is sold or shared.

Where the calculation happens

Every tax figure, projection and simulation runs in this browser, on your device, from rows it has fetched. The server holds no tax logic; a test in the repository fails the build if any appears. The one thing done on a server is pricing, described above.

Encryption, stated accurately

Data is encrypted in transit and at rest, and isolated to your household by database policy: the database itself refuses to return another household’s rows, and that is tested against the live database. It is not end-to-end encrypted, and we do not claim it is.

Your partner, if you add one

A household can hold a person with no login — a partner whose figures you track. We are the controller for their data too. We rely on you to tell them it exists; they can ask us for a copy or for it to be removed at the address above.

How long, and deletion

Data is kept while you have an account. Deleting an account removes it and its history; deleting your household removes everything, and nothing is soft-deleted or kept in a shadow table. The database provider keeps short rolling backups for disaster recovery, so a deleted row can persist in a backup for up to the provider’s retention window before it is gone everywhere.

Your rights

Access, correction, erasure, restriction, portability and objection. Export gives you every row as CSV at any time, without an account tier or a fee. For anything else, write to the address above; requests are answered within a month.