Effective July 19, 2026 · Applies to the San by NOVO mobile app (rotating savings with your people) · Operated by Novo LLC, Florida, USA
In plain English
San stores the basics — your email, display name, and the savings circles you're part of — in a database we run. San never holds your money or your crypto keys: your wallet is created and secured by Coinbase's infrastructure, and every payment is a direct wallet-to-wallet transfer we simply verify on the public blockchain afterward. Our only revenue is two small, flat fees paid by the host out of their own collection — a one-time hosting fee ($1.50–$4.50 per san, depending on its size) and a $1 platform fee on each cuota payment; members never pay more than their cuota. We don't sell your data, and we don't run ads or third-party trackers.
1Information we collect
When you create a San account, we collect:
Account details — your email address, a display name, and an optional profile photo.
Wallet details — if you connect a wallet, we store its public address and, if you used email sign-in with Coinbase, the email tied to that wallet. We never see or store a private key.
San activity — the savings circles ("sans") you create or join, your turn order, due dates, and the transaction signatures that prove a payment happened on-chain.
Chat messages — messages you send in a san's group chat are visible to that san's members and stored so the conversation persists.
Device notifications — if you allow it, we send local notifications about turns, payments, and messages. This uses your device's own notification system; we don't collect a push token or ad identifier for it.
We don't ask for or store your card number, bank details, or government ID. San isn't a bank and doesn't process card payments directly — see §6 for how buying USDC with a card works.
2How we use it
To run the app: show your sans, track whose turn it is, and confirm cuota payments.
To verify a payment actually happened, by checking the transaction you submit against the public blockchain record — amount, sender, and recipient must match before we mark a turn as paid.
To notify you about things that need your attention: your turn came up, someone paid, an invite arrived.
To keep the app secure and stop abuse — for example, reviewing a reported message or a reported profile, and acting on it.
To comply with U.S. sanctions law: every wallet address the app touches is checked against the U.S. Treasury's (OFAC) sanctions list before a transaction is built, and we keep a log of those checks. A listed address can't be connected or paid in San.
3What we don't do
We don't sell your data to anyone, for any reason.
We don't run ad networks, ad trackers, or third-party analytics SDKs in the app.
We don't hold your USDC or any other funds. Every cuota and every payout moves directly between members' own wallets — our backend is purely a ledger that records a payment's signature after it has already settled on-chain. It cannot move, hold, or freeze anyone's money.
We don't route member money through ourselves. There is no pooled account, no platform escrow, no "deposit then disburse" step — and our fee wallet only ever receives our own fees, never pot money (see §5).
We don't have access to your wallet's private key. That's held by Coinbase's embedded wallet infrastructure (CDP), tied to your sign-in email. Only your signed-in wallet can authorize a transaction — San holds no keys and cannot initiate a transfer of your funds.
4Wallets & the blockchain
San uses a Coinbase Developer Platform embedded wallet. Your wallet address, and every transaction you make with it, is recorded on Base, a public blockchain — that's how blockchains work everywhere, not just in San. Anyone can look up a wallet address and see its transaction history on a public block explorer.
This means two things worth knowing: first, we can verify your payments without ever touching your money; second, once a transaction is confirmed on-chain, neither you nor San can delete or edit it. Deleting your San account removes your profile and app data, but not the blockchain's own public record of past transactions.
Your wallet is yours in the strongest sense: from Wallet → Export private key you can take the key that controls it and use your funds from any standard wallet app — with or without San.
5How money moves (and our fees)
Every transfer in San is a direct wallet-to-wallet USDC payment between members' own wallets: cuotas go member → host, payouts go host → that turn's recipient. San is software that helps you instruct your own wallet — it never takes custody of anyone's funds, and there is no account of ours your money passes through.
Our fees. San charges two flat fees, both paid by the host out of their own collection: a one-time hosting fee per san, based on its size ($1.50 for a 3-member san, $3.00 for 6, $4.50 for 9), and a $1.00 platform fee on each cuota payment. Nothing is charged when a san is created. Instead, each cuota payment is split by the payer's own wallet in one atomic transaction: the cuota minus the fee goes straight to the host, and the fee goes straight to San's own fee wallet. The first payment carries both fees; every payment after carries only the $1. Members never pay more than their normal cuota — the fees come out of the host's own collection.
You see them before you commit — the fees are shown while creating a san, and again on the review step before launch.
It stays visible after — each payment that carries a fee is labeled with the exact breakdown in the san's transaction list, for every member to see.
Our fee wallet receives only our fees — it never holds or forwards members' money and never sits between a payer and a recipient. Its public address is the only thing that exists in the app.
Network fees are covered — gas on Base is sponsored through Coinbase, so neither members nor hosts pay network fees on San payments.
The app builds the transaction for you (including that one first-payment split), but only your signed-in wallet can approve and execute it — as everywhere else in San, we cannot move funds without your wallet signing.
Supabase hosts our database, authentication, and file storage (for profile photos). Your account data lives on Supabase's infrastructure under our control.
Coinbase Developer Platform (CDP) creates and secures your embedded wallet, and signs transactions when you send USDC. Coinbase's own privacy policy governs how they handle wallet creation and key security.
Coinbase Onramp — if you buy USDC with a card or Apple Pay, that purchase happens on a Coinbase-hosted checkout page outside the San app. San never sees or stores your card details; Coinbase's privacy and payment terms apply to that transaction.
7Keeping & deleting your data
You can delete your account at any time from You → Delete account inside the app. Here's exactly what happens:
Erased — your login, email, display name, profile photo, saved wallet address, chat messages, notifications, invites, and blocks are all deleted from our database.
Kept, anonymized — san and payment records that other members rely on (like "who paid turn 3") stay intact, with your name shown as "Former member". This keeps every group's own money history honest without keeping anything that identifies you.
Sans that haven't started — your spot frees up for someone else; sans you created but hadn't started are cancelled and their members told.
Sans that are running — if you're a member, your (anonymized) place remains until the host replaces you with a new member. If you're the host of a running san, you must pay out its remaining turns before deleting — a live circle can't lose its organizer.
Your wallet itself belongs to you via Coinbase, not to San — deleting your San account doesn't touch it or its funds. And as explained in §4, on-chain transactions already made remain publicly visible on the blockchain; no one, including us, can erase those.
8Your choices
Private account — toggle this in your profile to keep your account out of search; invites by email still reach you.
Notifications — controlled entirely by your device's system settings.
Theme & language — stored locally on your device, never sent to us.
Export your key — take your wallet's private key any time (see §4); your money never depends on San existing.
Your state's privacy rights — depending on your U.S. state you may have rights to access, correct, or delete personal data. All three are built in: everything we hold about you is visible in the app, your name and photo are editable, and deletion is self-serve (§7). For anything else, email us (§11).
9Children's privacy
San is not directed at children and isn't intended for anyone under 18 — it moves real money between people, so we require account holders to be an adult under their local law.
10Changes to this policy
If we make a material change to how we handle your data, we'll update the effective date above and, where required by law, let you know inside the app.
11Contact us
Questions about this policy or your data? Reach us at social@novo.ws.