nifty BUDGET

Your information, explained

Privacy policy

Effective and last updated: October 1, 2026

This policy explains how Nifty Budget handles information when you visit nifty-budget.com, use app.nifty-budget.com, share a budget, or contact us. Questions or data requests? Email support@nifty-budget.com.

The short version

  • We run a subscription budgeting service, without advertisements.
  • We do not sell or rent your personal information, share it for targeted advertising, or use your budget content to train AI models.
  • You enter your financial information yourself. We do not connect to your bank or collect bank-login credentials.
  • You decide whether to share your budget. Invited members use their own logins.
  • You can export your budget and request account deletion in settings.

1. Information we collect

Account and sign-in information

We process your email address, account identifier, verification and sign-in information, and any optional authenticator setup. Amazon Cognito manages passwords and authentication. We also maintain trial, subscription, access-permission, and account-deletion status.

The budget information you provide

This includes account names and balances, categories, envelopes and allocations, transaction dates and amounts, payees, notes, transfers, credit-card activity, reconciliation status, and review flags. Avoid putting passwords, full payment-card numbers, or other unnecessary sensitive information in names or notes.

Sharing, payments, and support

For shared budgets, we store invitation email addresses, invitation status and expiry, membership details, and viewer or editor permissions. For payments, we store subscription and payment references, amounts, currency, status, and refund-related records. PayPal processes payment details; Nifty does not collect your full payment-card number or PayPal password. If you contact us, we receive your message, contact information, and any attachments you choose to provide.

Technical and usage information

Our hosting and security systems process request information such as IP addresses, browser or user-agent details, request times, response codes, and errors. The public website also measures visits, selected link clicks, sections viewed, scroll depth, time on the page, broad referral categories, screen-size categories, and indications of automated traffic. Its random visit identifier is created for each page load, rather than used to track you across websites.

2. How we use information

We use information to authenticate you, store and calculate your budget, provide shared access, process subscriptions and refunds, deliver exports, answer support requests, prevent abuse, diagnose problems, and operate and improve Nifty Budget. We also use it to apply access and retention rules and meet applicable legal obligations.

Internal operational reporting includes aggregate account counts and transaction-count trends. These counts can be calculated from record identifiers and dates without decrypting transaction amounts, payees, or notes. Website analytics do not include budget content.

3. Shared budgets

When an owner invites you and you accept, the owner controls whether you may view or edit that budget. Members can see the shared budget's financial information, including its accounts and transactions. Owners can manage or revoke membership. Accepting access to someone else's budget does not share your separate personal budget.

Invitation links are tied to the invited verified email and expire after seven days. Owners distribute the links themselves, for example by email. Share only with people you trust: revoking access cannot retrieve information a member has already copied or exported. Deleting your login does not delete another owner's budget or the budget entries you contributed to it.

4. Service providers and other disclosures

We use Amazon Web Services (AWS) for hosting, authentication, storage, encryption, operational monitoring, and background processing. We use PayPal for subscriptions, payments, and refunds. These providers process information needed for their services; PayPal also handles payment information under its own privacy statement. See also AWS's privacy notice.

We disclose budget information to members you authorize through sharing. We may also disclose information where required by law, to respond to valid legal requests, or as reasonably necessary to investigate fraud or protect the service and people's rights. If Nifty Budget undergoes a merger, acquisition, or business transfer, information may transfer as part of that transaction, subject to applicable privacy obligations.

5. Cookies and browser storage

The app uses browser session storage for sign-in state and app state such as the selected budget. Authentication and payment providers may use cookies or similar technology needed for their services. Our public-site analytics do not use advertising cookies or cross-site identifiers. Blocking necessary storage may prevent sign-in or payment features from working. Clearing browser storage does not delete information stored in your Nifty account.

6. Security and processing locations

Connections use HTTPS, and budget data is encrypted when stored. Access controls restrict shared budgets according to membership and permissions. Optional authenticator-based two-step verification helps protect your login.

This is not end-to-end encryption: authorized server processes decrypt budget data to provide the service. No storage or transmission system is completely secure. Keep your credentials private and contact us if you suspect unauthorized access.

Nifty's production AWS infrastructure is hosted in the United States (US East, Northern Virginia). Hosting, content delivery, payment, and support services may process information in other locations. Depending on where you live, using the service may involve processing outside your country; applicable data-protection requirements still apply.

7. Retention and deletion

We retain account and budget information while providing your account, subject to your deletion request and the access-based retention rule below. Canceling a subscription is different from deleting an account: paid access continues through the paid-through date, and expired budgets remain read-only with export available while you still have access.

The 90-day account-retention rule

If you have no active personal trial, paid-through subscription, complimentary access, or accepted membership in a shared budget whose owner has qualifying active access, your account receives a 90-day deletion grace period. An in-app warning shows your deadline. Pending invitations and shared budgets whose owners' access has expired do not qualify.

Subscribe, start an available personal trial, obtain complimentary access, or join a qualifying shared budget before the deadline to retain your account. Regaining qualifying access clears the deadline; losing it later starts a new grace period. Signing in or exporting alone does not extend the deadline. Automatic deletion begins on the first successful daily check at or after the displayed date.

What deletion removes and what may remain

Account deletion removes your login, personal budget records, and stored budget exports through our background deletion process. It does not remove budgets owned by other people. Backup copies can remain for up to 35 days. Separate payment references and refund records are retained as needed to administer billing, refunds, disputes, and applicable legal obligations; they are not erased with the budget.

Public-site per-page analytics records are scheduled to expire after seven days and daily analytics totals after 90 days. Short-lived abuse-control records use an IP-derived hash and are scheduled to expire after one hour. Automated storage expiry may take additional time to finish. Operational logs, aggregate service metrics, and support correspondence follow separate retention needs for security, troubleshooting, service operation, and resolving requests.

8. Your choices and privacy requests

You can edit budget information, export a budget you can access, manage sharing as an owner, and request account deletion in settings. Owners can also reset their budget; a reset is not account deletion and preserves login, billing, and sharing permissions.

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, object to or restrict certain processing, or withdraw consent where processing relies on consent. To make a request, contact support@nifty-budget.com. We may need to verify your identity and authority over the information before acting. Some records may need to be retained for legal obligations or unresolved billing matters. We will explain applicable limitations when responding.

Where data-protection law requires a legal basis, we process information as necessary to provide the service you request, for legitimate interests such as securing and improving it, to meet legal obligations, or with consent where required. You may also contact your local data-protection regulator about a concern.

9. Children and third-party sites

Nifty Budget is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information to us, please contact support so we can investigate and take appropriate action. External websites and payment services have their own privacy policies.

10. Changes and contact

We will publish updates here and change the date at the top. Where required, we will provide additional notice of material changes. For questions about this policy or how Nifty Budget handles your information, email support@nifty-budget.com.