Privacy Policy

• Account details — your email address, and a display name and avatar if you choose to add one.
• What you record — income, expenses, categories, bills, assets, liabilities, savings goals, budgets and notes you type into Nest.
• Shared space activity — who paid what, settlement history, and messages you send in a family chat.
• Imported statement rows — the date, description and amount of the transactions you approve from a bank statement.

We do not ask for, and never store, your online banking username, password, card number or government identification.

When you import a statement for an account held abroad, the file is opened and read inside your own browser. The PDF or CSV file itself is never uploaded to our servers and is never stored anywhere by Nest.

• Only the rows you review and approve are saved to your account.
• Balances, account numbers and long digit strings are stripped before any description is used for automatic categorisation.
• Most statements are sorted entirely by local rules on your device, with no outside service involved.
• When a description cannot be recognised, only that short piece of text (for example "EXITO 140") is sent for categorisation. It is processed under a zero data retention agreement: it is not stored and is never used to train any model.
• Duplicate rows are detected and skipped, so re-uploading a statement is safe.

• All traffic between your device and Nest is encrypted in transit (TLS).
• Data is encrypted at rest on our hosting provider's managed infrastructure.
• Every record is protected by row-level rules in the database: a request can only read rows belonging to your own account, or to a shared space you are a member of.
• Personal spaces are private by default. Nobody — not even a family member in a shared space — can see your personal entries.
• Access requires a signed-in session; passwords are stored hashed, never in plain text.

We do not sell your data, and we do not share it with advertisers or data brokers. We use a small number of processors purely to run the service: a managed database and authentication provider, an email provider for sign-in and notification emails, and an AI provider for the optional insight and categorisation features. Each one is bound by contract to process data only on our instructions.

We may disclose information if legally required to do so, or to protect the safety of our users.

• Access and export everything you have recorded.
• Correct or delete any entry, category, space or account at any time.
• Delete your whole account. When you do, your entries, spaces you own, imported rows and profile are removed from our live systems, and from backups within 30 days.
• Withdraw consent for optional AI features by simply not using them.

Data is kept only while your account is active. Imported rows you discard are marked ignored and removed with the account.

Nest uses cookies and local storage only to keep you signed in and to remember your preferences, such as your language, theme and the dashboard period you selected. We do not use advertising or cross-site tracking cookies.

Questions about this policy, or a request about your data, can be sent to privacy@nestfinance.live. We respond within 30 days.