Privacy Policy

Last updated: 3 July 2026

Volnar is a portfolio tracking and intelligence tool operated by NovaHub B.V. This policy explains what personal data we process when you use Volnar, why we process it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR). We keep this short and concrete on purpose.

1. Who we are

The data controller for your personal data is NovaHub B.V., registered with the Dutch Chamber of Commerce (KVK) under number 92194923, with its registered office in Eindhoven, the Netherlands. You can reach us at support@novahub.nl for any privacy question or to exercise your rights.

2. What data we process

We process the following categories of personal data:

• Account data — your email address, your name, and the authentication provider you sign in with (for example email or a social login). This is what identifies your account.
• Portfolio data — the financial information you enter or import: your holdings, their values, mutations (buys, sells, deposits, withdrawals), property addresses, and any diary entries or notes you write.
• Derived snapshots — values we calculate from your portfolio data over time, such as historical net-worth snapshots and category breakdowns, so we can show you trends.
• Subscription and billing data — if you take a paid plan, our payment processors handle the payment itself. We receive only the limited billing details we need to manage your subscription (such as your plan, its status, and a processor customer reference). We never see or store your full card number.

We do not ask for, and do not want, any data we do not need to run the service. We do not knowingly collect special categories of data (such as health or biometric data).

3. Why we process it (legal bases)

We rely on two legal bases under Article 6 of the GDPR:

• Performance of a contract — we need to process your account and portfolio data to provide the service you signed up for: storing your portfolio, calculating your figures, and showing them back to you.
• Consent — where we send your portfolio context to our AI provider to power chat and insights, we do so on the basis of your consent, which you give by choosing to use those features. You can stop using them at any time.

4. How AI is used

Volnar uses AI to help you understand your portfolio. When you ask a question or open an insight, the relevant portfolio context (such as your holdings and recent changes) is sent to our AI provider, Anthropic, so the model can read it and explain it in plain language. Data sent to Anthropic through the API is not used to train their models.

Importantly, the AI does not perform your calculations. All financial figures — totals, returns, allocations, FX conversions — are computed by deterministic code on our side. The AI only parses and explains; the numbers come from the maths, not the model.

5. Who we share data with (subprocessors)

We use a small number of trusted providers to run Volnar. Each only receives the data it needs for its specific purpose:

We do not sell your personal data, and we do not use it for advertising.

6. Where your data is stored

Your account and portfolio data are stored in the European Union (the Supabase EU region). Where a provider processes data outside the EU, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep your data for as long as your account exists. When you delete your account, we delete your associated personal and portfolio data. Limited records may be retained for a short period where we are legally required to, after which they are removed.

8. Cookies

We use only the cookies needed to keep you signed in (session and authentication cookies). Our analytics is cookieless — it does not set tracking cookies and does not build an advertising profile of you. We do not use third-party advertising or cross-site tracking cookies.

9. Your rights under the GDPR

You have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted (you can delete your account at any time from within Volnar).
• Portability — receive your data in a structured, machine-readable format, or have it exported.
• Objection — object to certain processing, and withdraw consent for AI features at any time.

To exercise any of these rights, email support@novahub.nl. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

10. Changes to this policy

We may update this policy as the service evolves. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you in the app.