Privacy policy
Effective 6 October 2026 · Last updated 6 October 2026
The short version
Bronomics keeps only what the app needs to work, never sells it, and shows no ads. These are the key points; the full policy below is what counts.
- What we keep: your display name and settings, and the lines you add to your private khata (friends' names, amounts, optional labels and notes, dates). If you add a friend's phone number, we keep only a scrambled code of it, never the number.
- No account details: no email, password, contacts, location, photos or payment details are collected.
- Your khata is private: friends never see your ledger, labels or notes. A friend you send a link to sees only your name, the total, how many entries and how many days.
- We never send messages: you send each link yourself, from your own phone. Bronomics has no company number and sends no SMS, email or push messages to anyone.
- No selling, no ads, no tracking: we do not sell or rent personal information, use it for advertising, or use analytics or tracking cookies.
- Two small cookies, both strictly necessary: one keeps your khata linked to your browser; the other is set on a friend's phone only if they ask Bro to stop.
- You are in control: delete lines at any time, download a copy of your khata, or delete it entirely from the Bro tab. A friend who gets a link can snooze it or stop it forever with one tap.
1. Who we are and how to contact us
Bronomics ("Bronomics", "we", "us") is a web app at bronomics.app for keeping a private record of money between friends and sending friends a light-hearted reminder link. The person responsible for your personal information (the "controller", or "data fiduciary" under Indian law) is:
| Controller | The founder of Bronomics, Toronto, Ontario, Canada |
|---|---|
| Privacy contact | privacy@bronomics.app |
| Grievance Officer (India) and Data Protection Officer (where required) | The founder of Bronomics, privacy@bronomics.app |
Write to us for any question, request or complaint about this policy. We reply within 30 days, or sooner where local law requires.
2. Who this policy covers
- Users: people who use Bronomics to keep a khata and send reminder links.
- Friends: people a user has added to their khata, including people who open a reminder link. Section 11 is written for you.
- Visitors: anyone who visits bronomics.app.
It covers the Bronomics web app, the reminder link pages, and emails you send us. It does not cover WhatsApp or any other app you use to send a link; those services have their own privacy policies.
3. What information we collect
We collect only what the app needs. Everything in the first table is typed in by the user; we never pull it from your phone.
Information users give us
| Information | Example | Required? |
|---|---|---|
| Display name | "Rahul" (shown to friends you send a link to) | Only to send a reminder |
| Settings | Language, character, drama level, currency | Yes, with defaults |
| Friends' names | "Amit" (as you type it; a nickname works) | Yes, per khata line |
| Khata lines | Amount, currency, gave or borrowed, date, settled or open | Yes |
| Optional details | A label ("Goa trip"), a private note ("said Friday"), a nudge date | No |
| A friend's phone number | Stored only as a scrambled code (a keyed hash); the number itself is never stored | No |
Information created when the app is used
| Information | Why it exists |
|---|---|
| Reminder records | Which friend has a reminder, its status, character, language and drama level |
| Visit records | The date and time of each visit you send and its drama level, to set the drama level and enforce the daily limits |
| Friend reactions | Whether a friend laughed, snoozed (and until when) or stopped a reminder, with the time |
| Activity date and age confirmation | When your khata was last used, so inactive khatas can be deleted, and when you confirmed you are 18 or older |
| Stop records | When a friend stops a reminder: the link code, and the friend's scrambled phone code if the user saved their number, so the stop cannot be undone (section 8) |
| Scrambled connection code | A one-way code made from your internet address when a reminder is created or sent, used only for the daily limits per connection, and deleted after 2 days. The address itself is never stored |
| Random IDs | A random ID for your khata (in a cookie, section 6) and a random code in each reminder link |
| Move codes | If you tap "Get a move code", a one-time code linked to your khata, so you can open it on another phone or in the home-screen app. It works once and is deleted after 15 minutes |
Technical information. When anyone opens bronomics.app, our hosting provider's servers receive standard connection details: IP address, browser type, and the date and time. The Bronomics app does not store these in its database. Our hosting provider may keep them in short-term server logs for security and to keep the service running.
What we never collect. No email address, password, contact list, location, photos, microphone, camera, payment card or bank details, government ID, or advertising ID. We do not want sensitive information such as health, religion or political views; please do not put such details in labels or notes.
Information about friends comes from users. A friend's information is limited to a name or nickname, the lines between them and the user, any label or note the user writes, and, if the user chooses, a scrambled phone code.
4. How we use information and why we are allowed to
| What we do | Whose information | Legal basis (EU/UK GDPR and similar laws) |
|---|---|---|
| Show you your khata, totals, nudges and roast card | Users; friends' names and lines | Performing our agreement with you (Art. 6(1)(b)); your consent where a law requires it, such as India's DPDP Act |
| Create the reminder link and show the friend's page | User's display name; friend's name and total | Our agreement with the user; the legitimate interests of the user and Bronomics in a light-hearted reminder (Art. 6(1)(f)) |
| Enforce limits and protect friends: 1 visit a day, 3 a day per person, daily caps per connection, snoozes, links that close after 14 days, and stops that last | Visit records, reactions, scrambled phone and connection codes, stop records, the friend's stop cookie | Legitimate interests in protecting friends from too many reminders (Art. 6(1)(f)) |
| Tell a user that a friend laughed | Friend reactions | Our agreement with the user; legitimate interests |
| Keep the service secure, prevent abuse, fix faults | Technical information and the records above | Legitimate interests (Art. 6(1)(f)) |
| Answer your emails and requests | What you send us | Legitimate interests; legal obligation for rights requests (Art. 6(1)(c)) |
| Comply with law and valid legal requests | As required | Legal obligation (Art. 6(1)(c)) |
Legitimate interests. Where we rely on them, we have weighed them against your rights: we keep friend information to a minimum, never show it to anyone but the user who added it, never send messages ourselves, and give every friend a one-tap way to snooze or stop reminders for good. You can object at any time (section 10).
What we do not do. We do not sell or rent personal information, or use it for advertising, marketing to friends, credit scoring, debt collection, or training AI models. We make no automated decisions with legal or similarly significant effects, and we do not combine your information with data from other sources.
Bronomics is not a lender or collector. We never lend money, process payments, chase debts, or contact anyone on a user's behalf. Whether and how money is repaid is entirely between the people involved.
5. Who we share information with
We never sell personal information. We share it only as follows:
| Recipient | What they receive | Why |
|---|---|---|
| The friend you send a link to | Your display name, the friend's name, the combined total, the number of entries and the number of days | So the reminder makes sense. Never your labels, notes, other friends or your full khata |
| Our hosting provider (Railway) | Stored information and technical information, held on our behalf | To run the app, acting only on our instructions under a data processing agreement |
| Our email provider | Emails you send us | To read and answer them |
| Authorities, courts or others where the law requires | Only what is legally required | To meet a valid legal obligation, or to protect someone's safety |
| A buyer or successor | Information held at the time | If Bronomics is sold or merged. You would be told, and this policy would keep protecting your information |
Our pages load no outside scripts, fonts or trackers: everything, including fonts, is served from bronomics.app. When you share a link through WhatsApp or another app, that app handles the message under its own policy; Bronomics sees nothing of that conversation.
6. Cookies
Bronomics uses two cookies. Both are strictly necessary: one for the app to work, and one to remember a choice the visitor made. Strictly necessary cookies do not need consent under the EU ePrivacy rules and similar laws, so there is no cookie banner.
| Cookie | Set by | What it holds | Lasts | Purpose |
|---|---|---|---|---|
| lender | bronomics.app (first party) | A random ID, nothing else | 1 year | Links your browser to your khata |
| bro_stop | bronomics.app (first party) | The value "1", no ID | About 400 days | Set only when a friend taps Report. Hides every future Bro link opened on that phone. The friend can turn it off from any Bro link |
Both cookies are HttpOnly (page scripts cannot read them) and Secure (sent only over HTTPS). Friends who open a reminder link get no cookie unless they tap Report. If you close the "Add to home screen" tip, the app remembers that in your browser's own storage on your device; it is never sent to us. We use no analytics, advertising, social media or tracking cookies, pixels or fingerprinting. If you clear the cookie, the app can no longer find your khata and a new empty one starts. If we ever add analytics or advertising, we will update this policy first and ask for consent where the law requires it.
7. International transfers
Bronomics is run from Canada and our servers are in North America. If you use Bronomics from elsewhere, including the EU, UK, India, Australia, New Zealand, Singapore, Malaysia or Indonesia, your information is transferred to and stored in those places. Where transfer rules apply, we rely on an approved safeguard, such as an adequacy decision (the EU recognises Canada's commercial privacy law as adequate) or the European Commission's Standard Contractual Clauses and the UK Addendum with our providers. Write to us for details of the safeguards we rely on.
8. How long we keep information
| Information | How long |
|---|---|
| A khata line you delete | Removed from the app straight away; gone from backups within 30 days |
| Your whole khata, if you tap "Delete my khata" | Removed straight away, with every reminder link you sent; gone from backups within 30 days |
| Your khata (settings, friends, lines, settled history) | Until you delete it. Deleted automatically after 24 months without use, or after 30 days without use if it has nothing in it |
| Reminder records, their visit records and friend reactions | Deleted 90 days after the friend's lines are all settled or deleted and the reminder is no longer used |
| A stopped ("reported") reminder | While the user's khata exists, the reminder record stays marked as stopped so it can never be restarted. If the user deletes their khata, we still keep the stopped link code and, if the user had saved the friend's number, the friend's scrambled phone code. No names, amounts or notes are kept. These records exist only to honour the friend's request, and are kept until the friend asks us to remove them |
| Scrambled connection codes | 2 days |
| Move codes | 15 minutes, or as soon as they are used |
| What a reminder link shows | Nothing until a visit is shared, then the visit for 14 days after the latest one. After that the link shows no amounts |
| Scrambled phone codes | Deleted with the friend's record |
| Server logs (hosting provider) | A short period set by our hosting provider, for security |
| Emails and requests you send us | Up to 2 years after we resolve them, unless the law requires longer |
| Backups | Up to 30 days, then overwritten |
We keep information longer only where the law requires it, or to deal with a legal claim, and we will tell you if that applies to you.
9. How we protect information
- All traffic is encrypted with HTTPS.
- Phone numbers are never stored; only a keyed hash is kept, which cannot be turned back into the number without a secret key we hold separately.
- Each khata is reachable only from the browser holding its random ID, and reminder links use long random codes that cannot be guessed.
- The friend's page shows only the total, the number of entries and the number of days, and only for 14 days after the latest visit.
- Our pages block outside scripts with a strict content security policy, set no tracking, and are hidden from search engines.
- Access to our servers is limited to the people who run Bronomics.
No system is perfectly secure. If a personal data breach puts your rights at risk, we will tell the relevant regulator and the people affected as the law requires; under the GDPR, the regulator within 72 hours of becoming aware of it. Anyone who has a reminder link can open it, so send each link only to the friend it is meant for.
10. Your rights
Wherever you live, you can ask us to access and get a copy of your information, correct it, delete it, restrict or object to how we use it, move it in a machine-readable format, and withdraw consent where we rely on it. You can also complain to us and to a regulator. Using your rights is free, and we will not treat you differently for using them.
How. Users can delete any line straight away, and in the Bro tab tap Download my khata for a full copy or Delete my khata to erase everything. Friends can stop a reminder from the link itself (section 11). For anything else, email privacy@bronomics.app. Because we hold no names, emails or accounts, we may ask for a reminder link or another detail to confirm a request is genuinely yours. We answer within the time the law sets, usually 30 days. An authorised agent can make a request for you where the law allows.
Extra rights by region
| Where you live | Law | Extra rights | Regulator |
|---|---|---|---|
| EU and EEA | GDPR | Not to be subject to solely automated decisions with significant effects | Your local data protection authority |
| United Kingdom | UK GDPR, Data Protection Act 2018 | As for the EU | Information Commissioner's Office |
| Canada | PIPEDA and provincial laws | To challenge our compliance | Office of the Privacy Commissioner of Canada |
| India | Digital Personal Data Protection Act, 2023 | Information about processing; grievance redressal through our Grievance Officer; to nominate someone to act for you after death or incapacity | Data Protection Board of India, after first contacting our Grievance Officer |
| Australia | Privacy Act 1988 | To deal with us anonymously or under a nickname where practical | Office of the Australian Information Commissioner |
| New Zealand | Privacy Act 2020 | Access and correction | Office of the Privacy Commissioner |
| Singapore | Personal Data Protection Act 2012 | Access, correction, withdrawal of consent | Personal Data Protection Commission |
| Malaysia | Personal Data Protection Act 2010 | To prevent processing likely to cause damage or distress | Personal Data Protection Commissioner |
| Indonesia | Law No. 27 of 2022 on Personal Data Protection | To object to automated decisions | The national personal data protection authority |
| California and other US states with privacy laws | CCPA as amended by CPRA, and similar laws | To know, delete and correct; to opt out of the sale or sharing of personal information (we do neither); non-discrimination | California Privacy Protection Agency or your state Attorney General |
11. If someone sent you a Bro link
A friend uses Bronomics to keep their own private record of money between you, and sent you a reminder link from their own phone. Bronomics did not message you and does not have your contact details.
- What we hold about you: the name or nickname your friend typed, the amounts and dates between you, and any label or note they wrote for themselves. If they added your phone number, we hold only a scrambled code of it. We also record whether you laughed, snoozed or stopped the reminder, and if you stopped it, the records described in section 8.
- What you see: your friend's display name, your name, the combined total, the number of entries and the number of days.
- What you can do: tap Snooze to pause reminders for 7 days (twice), or Report to stop that reminder forever. Report also hides every future Bro link opened on your phone, whoever sends it, and blocks your number from new reminders if the sender saved it. You can undo the phone-level hiding from any Bro link; the stopped reminder stays stopped.
- What you do not need: no account, no app, no payment, no promise to pay. The laugh button sends only a laugh to your friend.
- Your rights: everything in section 10. Email privacy@bronomics.app with the link you received and we can tell you what we hold, or delete the reminder and the information connected to it.
The record itself is your friend's personal note. If you disagree with an amount, please sort it out with them directly; Bronomics does not decide who owes what.
12. Children
Bronomics is for adults aged 18 and over. Every user must confirm they are 18 or older before they can send a reminder; we do not check ID. We do not knowingly collect information from anyone under 18, and the app must not be used to record money with or send reminders to children. If you believe a child's information has been added, email privacy@bronomics.app and we will delete it.
13. Your responsibilities when you add other people
- Add only people you genuinely lend to or borrow from, and keep entries accurate.
- Use a first name or nickname, and keep labels and notes to what you need to remember.
- Never add sensitive details (health, religion, sexuality, politics, ID numbers) or anything hurtful.
- Add a friend's phone number only if you are comfortable doing so; it is optional.
- Send a reminder only to the person it is about, and respect a snooze or stop.
Bronomics is for friendly reminders, never harassment or debt collection. We may remove information or block use of the app if it is used to threaten, shame or harass anyone.
14. Changes to this policy
We update this policy when the app or the law changes, and change the date at the top. If a change materially affects how we use your information, such as adding sign-in, payments, analytics or advertising, we will show a notice in the app before it takes effect and ask for consent where the law requires it. Earlier versions are available on request.