Effective date: 05 June 2026
Nomo Co Pty Ltd ABN 96 697 722 053 ("Nomo", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you use the Nomo mobile application, website and related services (collectively, the "Service"). Nomo is designed to assist users with record-keeping, expense organisation, receipt storage, work-related activity tracking and access to educational information based on publicly available Australian taxation guidance. Nomo is not a registered tax agent and does not provide tax advice. By accessing or using the Service, you agree to the collection, use and disclosure of information described in this Privacy Policy.
Nomo is operated by Nomo Co Pty Ltd, ABN 96 697 722 053, hello@heynomo.com.au, https://heynomo.com.au, Melbourne, Victoria, Australia. We handle personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Notifiable Data Breaches Scheme, and other applicable Australian privacy laws.
When you create an account, we may collect your name, email address, password (stored in encrypted or hashed form), subscription status and account preferences.
You may choose to upload or create records including receipts, invoices, expense records, reimbursement records, transaction descriptions, dates, amounts, merchant information, and notes. We collect this information solely to provide record-keeping and organisational functionality.
Where you choose to connect financial accounts through our Open Banking integrations, we may receive transaction descriptions, dates, amounts, merchant information, account identifiers and account balances. Financial account credentials are not provided directly to Nomo; financial data is supplied through authorised Open Banking providers selected by users.
Where you use tracking features, we may collect work-from-home records (work sessions, dates, durations, notes) and work trip records (start and end locations, route information, distance, timestamps, and GPS coordinates while tracking is active). Location information is collected only while tracking features are active and authorised by you.
We may collect device identifiers, operating system information, application version, browser type, device model, crash diagnostics and performance logs; information about how you interact with the Service; and information you provide when contacting support, submitting feedback, participating in surveys, joining waitlists or responding to communications.
We collect information directly from you, automatically through your use of the Service, and through integrated service providers, Open Banking providers, analytics providers and payment providers.
We use information to create and manage accounts, provide the Service, store and organise records, generate reports and summaries, process subscriptions and payments, provide customer support, improve functionality, detect fraud and misuse, monitor security, comply with legal obligations and communicate with users. We only use personal information where reasonably necessary for these purposes.
Nomo may use OCR, artificial intelligence and machine learning technologies to assist with receipt extraction, merchant recognition, expense categorisation, record organisation and educational explanations. AI outputs are generated automatically and may contain inaccuracies; users remain responsible for reviewing information generated by AI features. We do not use your receipts, financial records or tax-related information to train proprietary AI models without your express consent.
We do not sell personal information and do not provide personal information to advertisers for their own marketing purposes. We may share information with trusted service providers that help us operate the Service, including cloud hosting providers, payment processors, analytics providers, customer support tools, Open Banking providers, OCR providers and AI service providers. These providers are authorised to access information only to the extent necessary to perform services on our behalf.
Where you choose to connect bank accounts through Nomo, financial data may be accessed through our Open Banking provider. By connecting an account, you authorise our Open Banking provider to obtain and provide financial data to Nomo in accordance with your consent, the provider’s terms, and applicable Open Banking and Consumer Data Right requirements. You may disconnect connected accounts at any time. Nomo does not receive or store your online banking passwords.
Some service providers may process information outside Australia, including in the United States, Singapore, European Union member states and other jurisdictions used by our service providers. Where personal information is transferred overseas, we take reasonable steps to ensure appropriate safeguards are in place.
We implement reasonable technical and organisational safeguards designed to protect information from unauthorised access, misuse, interference, loss, modification and disclosure. Measures may include encryption in transit and at rest, access controls, authentication measures, monitoring and logging, and security reviews. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.
We retain personal information only for as long as reasonably necessary. Unless otherwise required, account data is generally deleted or anonymised within 30 days of account closure, backups may be retained for up to 90 days, and information may be retained longer where required by law. Users are encouraged to export records before deleting accounts. Nomo is not intended to be the sole repository for legally required tax records.
Subject to applicable law, you may request access to personal information, correction of inaccurate information, deletion of personal information, withdrawal of certain consents, and copies of information you have provided. Requests may be submitted to hello@heynomo.com.au. We may require verification of identity before responding.
If a data breach occurs that is likely to result in serious harm, we will comply with our obligations under the Notifiable Data Breaches Scheme, which may include notifying affected individuals, notifying the Office of the Australian Information Commissioner (OAIC), and taking remedial action where appropriate.
Where permitted by law, we may send service updates, product announcements, educational content and promotional communications. You may unsubscribe from marketing communications at any time. Service-related communications may still be sent where necessary.
The Service is intended for users aged 18 years and older. We do not knowingly collect personal information from children, and if we become aware that information has been collected from a child, we will take reasonable steps to delete it.
If you believe we have breached applicable privacy laws, please contact us first at hello@heynomo.com.au. We aim to acknowledge complaints within 7 business days, investigate promptly, and respond within 30 days where reasonably possible. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner (OAIC).
We may update this Privacy Policy from time to time. Material changes may be communicated through email, in-app notifications or website notices. Continued use of the Service after updates become effective constitutes acceptance of the revised Privacy Policy.
Nomo Co Pty Ltd · ABN 96 697 722 053 · Email: hello@heynomo.com.au · Website: https://heynomo.com.au · Melbourne, Victoria, Australia · Last Updated: 05 June 2026