Nani Accounting is made by Adam R. Cagle (“we”). This policy explains the information handled by the app and website, what leaves your computer, and what happens when you connect a service of your own.
The short version
Your encrypted company file lives on your computer. Nani does not automatically upload your books, transactions, reports or filed documents to us. Licensing sends identity and device information, not your books. A hosted AI receives the data it reads through Nani when you choose to connect and use it. Information also leaves when you deliberately export or share it.
The app has no analytics or automatic crash reporting. This website currently has no analytics or advertising tracking installed.
Your company file and backups
The company file holds transactions, statements, customers, vendors, filed documents, settings and the audit log. It can also hold sensitive information you need for bookkeeping, such as contractor taxpayer IDs and payroll totals. It is encrypted with your passphrase.
Nani shows the last four digits of taxpayer IDs on screen and excludes full taxpayer IDs from AI tools and the activity log. Full taxpayer IDs are included in the CPA package’s 1099 list when you make that package.
We cannot open your company file or recover it if you lose both your passphrase and recovery key. Backups are encrypted copies saved to the folder you choose. If you use a cloud-synced backup folder, that service handles the files under its own terms and privacy policy.
Activation and license verification
Activation and periodic checks send your license key, an identifier for the computer and the app version to the licensing service. The key includes your name, email and license ID. The computer identifier is derived from an operating-system identifier and a random installation value. The service also receives the connection’s IP address.
These records verify license status, manage the two-computer limit, renew activation and handle recovery, refunds and removed activations. Your company files, transactions, passphrase and company-file encryption keys are not sent in license checks.
Licensing records include purchase and license identifiers, activation and verification status, revocation status and recovery-link records. Hosting and database providers process them to operate the service. Records are retained while needed to provide licensing and recovery, prevent abuse and meet applicable recordkeeping obligations. License keys are excluded from routine service logs.
Update checks and downloads
Nani asks GitHub, where releases are published, whether an update is available. GitHub receives the IP address and connection information, as it does when you visit or download from its website. Update checks do not include your license key or company records. Nani installs updates only after you choose to install them.
When you open this website, its hosting service receives the technical information needed to serve it, including your IP address, browser request and requested URL. Technical logs may be used to operate the site, investigate errors and prevent abuse. The site currently does not install analytics or advertising trackers.
AI is optional, and hosted AI receives data
Nani works without AI. When you connect an AI, its tools can request company basics, descriptions, amounts, payee names, report totals and other bookkeeping context. With a hosted provider, that information goes to the provider under your own account and that provider’s terms, retention rules and privacy settings. The local company file remains on your computer; that does not make the hosted AI interaction local.
When you use a model that runs entirely on your computer, Nani’s interaction with that local model stays on your computer. Use Check where it runs for a local-model connection and review the model software’s own settings and policies.
Nani masks long account and card numbers in bank text to their last four digits before exposing them through AI tools. The tools do not expose full taxpayer IDs, your passphrase, API keys or settings. API keys are stored in your computer’s keychain, outside the company file.
What was sent records Nani’s AI requests: when, to whom, which model and the content sent. It does not control other sharing you do directly in an AI app. Keep bookkeeping in a dedicated AI workspace without unrelated connectors or web access.
Suggestions wait for your approval by default. If you enable Autopilot, limited routine changes can apply within the amount limit you set. You can review its activity and undo eligible changes. See Your AI for the controls.
Purchases and license delivery
When purchasing is available, the payment provider shown at checkout handles payment details under its own privacy policy. Purchase records include your name, email, payment status and purchase identifiers. We do not receive your full payment-card number.
Your name and email are included in your license key. The licensing service and its email provider process information needed to deliver or recover that key, answer questions and handle important license communications. Purchase records are kept as needed to provide the license and comply with tax, accounting and other legal obligations.
Replacement keys are sent to the purchase email address. Recovery requests may be limited by email and network to prevent abuse. Device-reset links expire and can be used once.
Support forms, email and error reports
When the support form is enabled, a submitted request is saved with a reference number before email delivery is attempted. It includes your contact details, category, message, optional app and custom-work details, and delivery status. The form is designed to save this record in isolated support tables in the existing Neon database, with access restricted to support data, and to use Resend to deliver the request and acknowledgement emails. These services process the information needed for those purposes. Availability depends on completing their configuration and launch checks; this policy does not mean the form is currently enabled.
The saved form request and its duplicate-submission record become eligible for deletion 90 days after submission. A scheduled cleanup process removes eligible records in bounded batches; this is not instantaneous deletion at the 90-day mark. This cleanup does not delete email copies, replies or support mailbox threads. Mailbox correspondence is retained separately while needed to answer your request, maintain relevant support records and meet applicable legal obligations. Resend and the mailbox provider also handle their service records under their own policies. Contact us about access or deletion of support information.
A confirmation reference means your request was saved; it does not guarantee that an email has reached either mailbox. The form reports failure when it cannot save a request.
When direct-email receiving is enabled through Resend, messages sent to support@naniaccounting.com can be retrieved by our server and forwarded as plain text to the internal support mailbox. Message identifiers, delivery state and the plain-text forward are stored in the isolated support tables and become eligible for scheduled bounded deletion after 90 days. The website does not retrieve or forward attachments or the HTML body. The original email, including any attachments, may remain with Resend under its policies, and forwarded mailbox copies have the separate retention described above. Receiving an email does not trigger an automatic reply.
You can email support@naniaccounting.com directly. Include only what is needed to explain the problem. Do not send passwords, license keys, taxpayer IDs, full company files or private financial documents in a general support message.
If the app closes unexpectedly, it can offer to prepare an email with recent error lines. Nothing is sent automatically. Read and edit the message before sending it; an error message may mention a name or amount. We use reports to investigate and fix problems.
Exports are under your control
CPA packages and raw exports can include personal and financial information and are not encrypted. They leave your computer only when you choose to share them. Use your CPA’s secure upload portal for a CPA package and protect any exported copies.
Your choices
You control your local books, backups, exports and AI connections. You can remove local books by deleting the company file and its backups. Disconnect an AI in Nani when you no longer want to use it; information already shared with a provider remains subject to that provider’s policies.
For access, correction, deletion or questions about purchase, license or support information we hold, contact support@naniaccounting.com. We respond under applicable law and may need to verify the request. Some records must be retained for legal obligations or to operate a valid license. We do not sell personal information or share it for advertising.
Children
Nani is for running a business and is not intended for children under 16. We do not knowingly collect their personal information.
Changes and contact
We may update this policy as the app and website change. The date above identifies the current version. Contact Adam R. Cagle at support@naniaccounting.com with privacy questions.