Privacy policy

NIFly is an independent app published by Relay Spatial, Unipessoal Lda. It is not affiliated with Autoridade Tributária e Aduaneira.

The short version

Your NIF stays on your iPhone. The app has no server and no accounts, and through it we do not collect, receive or sell any information about you. We only learn something about you if you write to us or visit this website, as described below.

What NIFly stores, and where

NIFly stores what you type into it: your profiles (a name, a NIF, a type and a colour) and your settings. This is kept on your device, in storage that only NIFly and its own widgets and controls can read.

If you back up your iPhone, to iCloud or to a computer, this data is included in your backup like any other app's data. Those backups are yours and are governed by your agreement with Apple. We cannot see them.

Because this data never leaves your devices to reach us or any system of ours, Relay Spatial, Unipessoal Lda is not the controller of your NIF or profile data under the GDPR.

What we collect

Nothing. NIFly contains no analytics, no advertising, no tracking and no third-party code that sends data anywhere. The app works without an internet connection and makes no network requests of its own.

When your NIF leaves the app

Only when you make it:

• when you show the screen, a widget or the barcode to someone;
• when you have it read aloud (iOS's built-in text-to-speech produces the voice on your device; NIFly never listens or records);
• when you copy it, share it, or use it in a shortcut.

What happens to it after that depends on the app or person you gave it to.

Device permissions

NIFly asks for one permission, and only if you use it: the camera. It requests camera access strictly to scan a physical NIF card, when you choose to do that instead of typing the number.

Reading the card, both its barcode and the printed number (optical character recognition, or OCR), happens entirely on your device, using the recognition built into iOS. No image data is ever saved, transmitted or shared: the camera picture is used only for the moment it takes to find the number, and only the number is kept, as part of your profile.

You can refuse camera access and type the NIF instead. The rest of the app works the same.

NIFly does not request or use your microphone, your contacts, your photos or your location.

What Apple handles

Some things are handled by Apple, under Apple's privacy policy, not by us:

• Downloads and purchases. The App Store processes them. We never see your name, your Apple Account or your payment details.
• Siri and Shortcuts. If you use them with NIFly, Apple's system handles your request. NIFly tells the system the names of your profiles so that you can ask for one by name.
• Beta testing. If you try a beta of NIFly through Apple's TestFlight, Apple gives us crash reports, how often the beta is opened, and any feedback or screenshots you choose to send. If you were invited by email, your email address comes with your feedback. We use these only to fix the app. They never contain your NIF unless you put it in a screenshot or a message, so please don't.
• Analytics and crash reports. If you chose to share analytics with app developers in your iPhone's settings, Apple gives us aggregated statistics and crash reports. They do not identify you and do not contain your NIF.

If you contact us

If you write to support@relayspatial.pt, we receive your email address and whatever you tell us. Relay Spatial, Unipessoal Lda is the controller of this data. We use it only to answer you (our legitimate interest in replying to what you asked, Article 6(1)(f) of the GDPR), and delete the conversation within 12 months of our last message in it. Please do not send us your NIF: we never need it to help you.

This website

This website sets no cookies and has no advertising or tracking. If you switch between the dark and the light theme, your choice is kept in your own browser and is never sent to us.

To know how many people read these pages, the site uses Vercel Web Analytics. For each page view Vercel records the page, the time, the site you came from, your country and city, your device type, operating system and browser. It sets no cookie and uses no advertising identifier. To tell one visit from another it makes a hash from the request and discards it after 24 hours, so visits are not joined up across days or sites, and we see only totals: we cannot identify you. Our legitimate interest in knowing whether the site is read, Article 6(1)(f) of the GDPR; Vercel processes this for us under the safeguards described below.

The site is hosted by Vercel Inc., a company in the United States, acting as our processor. Like any web host, it receives your IP address and the address of the page you ask for, in order to deliver the page and keep the service secure (our legitimate interest in running the site, Article 6(1)(f) of the GDPR). Relay Spatial, Unipessoal Lda is the controller. Vercel processes this data outside the European Economic Area, relying on the adequacy decision for the EU-US Data Privacy Framework, under which Vercel is certified, or, where applicable, on Standard Contractual Clauses. We do not combine these records with anything else, and we do not use them to identify you.

Your rights

Under the General Data Protection Regulation you have the right to access, correct, delete, restrict and object to the processing of your personal data, and the right to data portability. Because your NIFly data exists only on your own devices, you exercise most of these yourself: edit or delete a profile in the app, or delete the app to remove everything.

For the data we do hold (an email conversation with you, and the hosting records of this website), write to support@relayspatial.pt to use any of these rights, including the right to object. You also have the right to complain to a data protection authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt.

Children

NIFly is not directed at children and collects no data from anyone.

Changes

If NIFly changes in a way that affects your privacy, this policy will be updated before the change is released, and the date above will change.

Contact

support@relayspatial.pt

Relay Spatial, Unipessoal Lda. Registered office: Largo de Santos 11, 2.º B, 1200-808 Lisboa, Portugal. Registered at the Conservatória do Registo Comercial de Lisboa under the single registration and tax number 519203054.