Security & Privacy

Your own infrastructure

Nomad Expenses is designed to run in infrastructure configured by its operator. Trip and expense information is stored in the configured Postgres database. The operator is responsible for their hosting, database access, backups and updates.

One shared password

The tracker uses one shared password rather than individual accounts. Anyone with that password can access and change the data. Use a strong, unique password, share it carefully and change it if exposed. Changing it invalidates existing sessions.

Share links

Share links expose a read-only summary to anyone with the link, without a password. They do not display individual expenses or notes. Revoke a link on the Trip screen if you no longer want it to work.

External requests

The server queries external providers for exchange rates. The supplied project has no analytics or advertising tracker. The hosting and database services you select may process operational data under their own policies.

Questions or security concerns

Contact contact@nomad-developer.co.uk. Please do not send passwords, share links or private financial information in a report. Read the Privacy Policy for more information.