Privacy Policy

1. Scope

This policy applies to the NestFlow website, household ledger, bill-import workflow, and related account services. It covers information you provide, information created through your use of the service, and limited technical information needed to operate it.

2. Information we process

The information processed depends on the features you choose to use.

• Account information, such as your email address, display name, authentication method, preferred language, and default currency.
• Household ledger information, including memberships, accounts, categories, transactions, balances, notes, and reviewed import candidates.
• Bill-import content, including uploaded PDF or image bytes, spreadsheet structure and sample rows, model results, and reviewed candidate transactions.
• Limited operational and security information, such as session identifiers, request timing, errors, and events needed to protect and troubleshoot the service.

3. How we use information

NestFlow uses information only to operate, secure, maintain, and improve the service you request.

• Create and authenticate your account and remember your preferences.
• Provide shared household ledgers, reports, account balances, and transaction management.
• Parse uploaded bills, generate editable candidate transactions, and prevent duplicate submissions.
• Detect abuse, diagnose failures, protect household separation, and improve reliability and usability.

4. Large-model processing of bill imports

To import a bill or use voice input, NestFlow may transmit an uploaded PDF, image, audio recording, confirmed transcript, or a structured spreadsheet sample, together with relevant account and category choices, to an external large language model for transcription, analysis, and conversion into candidate transactions.

• The model currently used for this purpose is Gemini 3.5 Flash-Lite.
• Bills can contain names, account details, transaction descriptions, and other sensitive financial information. Review the file and upload it only when you are comfortable with this processing and have the right to use it.
• Model output may be incomplete or incorrect. It remains an editable candidate and is not written to the ledger until you confirm it.

5. iOS sign-in, purchases and account deletion

The native iOS app uses the same NestFlow account and household records as the web app.

• If you use Sign in with Apple, we store Apple’s account identifier and an encrypted credential used to revoke access when you delete your account. Apple may supply a private relay email address. Google sign-in uses Google’s official SDK.
• Apple processes iOS in-app purchases. NestFlow verifies signed transaction identifiers, product, purchase and expiry dates, environment and the NestFlow account association to provide membership and process renewals or refunds. Web payments continue to use Paddle. NestFlow does not receive your payment card details.
• You can delete your account in iOS Settings. We erase your profile, sign-in credentials and private import material, and delete households with no remaining members. Shared household records remain available to other members with an anonymous author reference. Minimal billing identifiers remain to handle later billing events. Deleting NestFlow does not cancel subscriptions managed by Apple or Paddle.

6. Storage and retention

NestFlow limits stored information to what is needed for the product workflow and security.

• The original uploaded bill is processed in memory and is not stored as a business record by NestFlow.
• Import-job status, normalized candidates, warnings, your edits, and derived mapping references may be stored so that you can review, submit, and improve later imports. Parsing evidence is reduced after submission.
• Account and ledger records remain while your account or household uses the service, subject to deletion, security, backup, and operational requirements.

7. When information is shared

NestFlow does not sell personal or household financial information and does not use it for third-party advertising.

• Information may be processed by infrastructure, authentication, email, payment, and AI service providers only when needed to provide the relevant feature.
• Household information is visible to members of that household according to the product's access controls.
• Information may be disclosed when required to protect users, investigate abuse, comply with a valid legal obligation, or complete a business reorganization with appropriate safeguards.

8. Security

NestFlow uses access controls, household-level separation, secret management, transport protections, input validation, and review-before-posting safeguards. No online system can guarantee absolute security, so use a unique password and protect access to your email and devices.

9. Your choices

You control whether to use bill import and whether to confirm recognized transactions.

• You can review and correct profile, account, category, and transaction information through available product controls.
• You can avoid large-model processing by not using bill import and entering transactions manually instead.
• You may request access, correction, export, or deletion through the support channel made available by NestFlow, subject to identity verification and applicable obligations.

10. Policy changes

NestFlow may update this policy as features and processing practices change. Material changes will be presented in the product or through another reasonable notice, and the updated date will be revised.

11. Contact

For privacy questions or requests, email [email protected]. Please do not include passwords, full bill files, or unnecessary financial details in a support email.