1. Who we are
GoLoanly is a mobile app that helps you understand the real cost of your loans and how much you can save by overpaying them.
GoLoanly is operated by NVALUE.
Contact for any privacy question or request: [email protected].
2. What we collect, and why
Account information. When you create an account, we collect your email address (used for sign-in via a one-time code, and for the transactional/product emails described below). We do not ask for or store your name, date of birth, or any other identity information.
Your loan and financial plan data. If you create an account, the loan plans you build in the app (principal, interest rate, term, overpayments, custom strategies) are backed up to our database so they sync across your devices. This is the same data that lives on your device when you use the app without an account — creating an account just adds cloud backup and sync on top. All loan math happens on your device: our servers never calculate anything from your loan data, they only store and return the data your device already computed.
AI Coach — two different disclosures. GoLoanly's AI Coach and its PDF-import feature both use an AI tool made by Anthropic, but send very different data:
- Asking the AI Coach a question sends Anthropic a sanitised version of the relevant loan plan — figures only (amount, rate, term, overpayments, how far along you are), with no name, no account identifier. It also sends whatever question you type yourself.
- Importing a loan from a bank statement PDF sends Anthropic the entire PDF file you upload. This is not redacted before sending — a real bank statement can contain your name, address, account number, and unrelated transactions, and all of that reaches Anthropic as part of the document.
In both cases, we do not store your questions or your uploaded PDF on our servers. The PDF specifically is never written to disk or a database on our side — it is forwarded for extraction and discarded immediately after the request completes.
Subscription and billing information. If you subscribe to GoLoanly Plus, your purchase is handled entirely by Apple's App Store or Google Play — we never see or store your card details. We receive and store only your subscription status, which store you bought through, and when your current period ends, via our billing partner.
Communication preferences. We record whether you've opted in to the monthly AI portfolio review email and to product/marketing emails, along with when and how you gave that consent.
Diagnostic and crash data. We use a service to catch crashes and errors in the app and our backend. This is configured to exclude personal and financial data by design — your loan figures, balances, and request bodies are stripped before an error report is sent. What remains is standard technical diagnostic information: device model, OS version, app version, and the error itself.
Website analytics (goloanly.app only). If — and only if —
you click Accept on the cookie banner on this website, we use Google Analytics
to measure visits: pages viewed, how you arrived (search, link, campaign), approximate location
(country/city, derived from your IP address, which Google Analytics does not store), and
device/browser type. It sets cookies named _ga and _ga_<id>. If
you decline or ignore the banner, Google Analytics is not loaded at all. You can change your
choice any time via Cookie settings in the footer; withdrawing deletes those
cookies. The data is not used for advertising. This applies to the website only — the GoLoanly
app contains no analytics.
3. Legal basis for processing (GDPR / UK GDPR)
- Contract — account data, loan-plan backup/sync, and subscription status are necessary to provide the service you've signed up for.
- Consent — the AI Coach, PDF import, and monthly review email are all opt-in features; the marketing/newsletter email requires your explicit, separate opt-in. Website analytics cookies run only after you accept them on the cookie banner.
- Legitimate interest — crash/error diagnostics, to keep the app working reliably, collected in a way designed to exclude your financial data.
4. Who we share data with
We use a small number of specialist providers to run the service, each only for the purpose described:
- A cloud hosting and database provider (EU-based) — authentication, database, backend functions. Receives your email, loan-plan backup document, subscription status.
- Anthropic — powers the AI Coach and PDF import. See §2 above.
- Our billing partner — subscription management. Receives your subscription status, linked to your account id — never your card details.
- Our email delivery provider — sending transactional and (if opted in) marketing email. Receives your email address and the content of the email being sent.
- Our web hosting provider — hosting goloanly.app.
- A crash and error monitoring service — see §2 above.
- Google (Google Analytics) — website analytics on goloanly.app, only if you accept cookies. See §2 above.
- Apple / Google — app distribution and in-app purchases, under their own privacy terms. We never receive your payment details.
We do not sell your data, and we do not share it with anyone for their own marketing purposes.
International transfers. Anthropic is a US company. Per Anthropic's own privacy policy, they transfer personal data internationally under EU adequacy decisions where available, and otherwise under Standard Contractual Clauses. Google is a US company certified under the EU-U.S. Data Privacy Framework, which it relies on for these transfers.
5. How long we keep your data
- Account and loan-plan data — for as long as your account is active, plus 30 days after a deletion request to allow recovery from accidental deletion, then permanently deleted.
- AI Coach questions and uploaded PDFs — not retained at all, processed and discarded per request.
- Subscription records — for as long as required to resolve billing questions and meet applicable tax/accounting obligations.
- Crash/error diagnostics — 30 days.
- Website analytics — 14 months in Google Analytics, then deleted automatically. The cookies themselves expire after up to 2 years unless you withdraw consent sooner.
6. Your rights
Under GDPR / UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and associated data.
- Request a copy of your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection supervisory authority.
Account deletion is handled by request, not self-service today: email [email protected] to request it. Turning off the monthly review or marketing emails can be done directly in the app under Settings, without needing to email us. For any other right listed above, email [email protected].
7. Children's privacy
GoLoanly is not directed at children, and we do not knowingly collect data from anyone under 16.
8. Changes to this policy
If we make a material change to this policy, we'll update the "last updated" date above and, where required, notify you directly.
9. Contact
Questions about this policy or your data: [email protected].