Google OAuth2 Homepage

novia is a mobile application available on iOS and Android that helps people in the Dominican Republic understand their personal finances. It is an expense tracker: it brings a user's bank accounts, credit cards and everyday spending together into a single, clear view so they always know the status of their personal finances.

This page is the official homepage submitted for Google OAuth2 brand verification. It describes the application, the Google user data it requests, and how that data is handled.

This website (novia.com.do) is owned and operated by NOVIA, S.A.S., the same company that publishes the novia mobile app on the App Store and Google Play. The domain, the app icon shown above, the brand name and the OAuth consent screen all belong to the same product.

The site hosts the app's public-facing material:

• The product landing page describing novia's features.
• Step-by-step tutorials for connecting Dominican banks and enabling their notifications.
• The company story and team.
• The legal documents: privacy policy and terms and conditions.

The Google OAuth2 flow is initiated from inside the novia mobile app, by a signed-in user who chooses to connect their Gmail account so that banking emails can be turned into expense records automatically.

novia uses Google user data for two purposes, and only those two:

• Identify the user. Basic profile and email address information is used to identify the account and to link the Gmail connection to the correct novia user.
• Read approved banking emails. Once the user explicitly approves the connection, novia reads emails sent by banking senders — transaction alerts, purchase notifications and account statements from Dominican financial institutions — and extracts the transaction details (merchant, amount, date, card or account) in order to record the expense inside the app.

Emails are processed automatically, without human intervention. Emails that do not come from a recognized banking sender are not read or processed. novia does not store copies of the user's emails: the content is processed in memory and only the extracted transaction data is kept in the user's own account.

novia does not sell, rent or transfer this data to third parties, does not use it for advertising, and does not use it to train generalized artificial intelligence or machine learning models.

novia requests the following Google OAuth2 scopes:

• https://www.googleapis.com/auth/gmail.readonly — read-only access used to locate and parse emails from banking senders. A narrower scope is not sufficient: the transaction details novia needs (merchant, amount, currency, date) live in the message body, which metadata-only scopes do not expose. Access is read-only; novia can never send, modify or delete a message.
• openid, .../auth/userinfo.email, .../auth/userinfo.profile — used solely to identify the user and associate the connection with their novia account.

Granting access is entirely optional. novia works without it, and the user can disconnect at any time from within the app or from their Google Account permissions page. Revoking access stops all further processing immediately.

In the Dominican Republic there is no widely available open-banking API, so most people track spending by hand or not at all. novia closes that gap:

• Automatic expense capture. Every purchase already generates an email alert from the bank. Reading those alerts turns manual data entry into an automatic, real-time expense log.
• One unified view. Users typically hold products at several institutions. novia consolidates cards and accounts from different banks into a single balance, timeline and category breakdown.
• Complete, up-to-date data. The Gmail connection complements novia's PDF statement upload: statements provide history, banking emails keep the picture current between statement cycles.
• Better financial decisions. With accurate categorized spending, users can see where their money goes, set budgets and goals, and understand their financial habits.

The Google connection is what makes this effortless. Without it, the same information would require the user to re-enter every transaction by hand.

• All communications are encrypted in transit using TLS.
• Email content is processed in memory or in secure temporary environments and is not archived.
• Access is managed with multi-factor authentication for administrators, with continuous activity monitoring.
• Users may request access to, rectification of, or deletion of their data at any time by writing to soporte@novia.com.do.

novia requests read-only access to email in order to identify banking emails and process them into the app.

novia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

NOVIA, S.A.S. — Dominican Republic
Support and data requests: soporte@novia.com.do