Your budget deserves
a little privacy.

You pay for Nifty. That's our business model.

We make money from subscriptions. We don't sell or rent your financial information, serve ads, build spending profiles for marketing, or use your budget content to train AI models.

What we need to run your budget

Your email and sign-in information, subscription status, the budget details you enter, and permissions for any shared budgets. That includes your accounts, balances, envelopes, transactions, payees, and notes.

We don't connect to your bank or collect bank-login credentials. PayPal handles payment details; Nifty doesn't collect your full payment-card number or PayPal password.

Protected in transit and at rest

Your budget data is encrypted in transit and at rest.

• Add an authenticator app for optional two-step verification.
• Invited guests use their own logins. You choose who can view or edit your budget.
• Change or revoke guest access in settings. Revoking access cannot recall copies someone already saved.

Useful metrics, without spending profiles

The public website measures visits, selected clicks, sections viewed, scroll depth, time on page, broad referral and screen-size categories, and signs of automated traffic. A random identifier is created for each page load. These analytics don't include budget content or use advertising cookies or cross-site identifiers.

Per-page analytics records are scheduled to expire after seven days and daily totals after 90 days. Short-lived abuse controls use an IP-derived hash with a one-hour expiry. Storage expiry can take additional time.

Internal reporting uses aggregate service metrics, such as account and transaction counts. Hosting and security systems also process technical request information, including IP addresses and errors, to operate and protect the service.

The services behind Nifty

Amazon Web Services provides hosting, sign-in, storage, and operational infrastructure. PayPal processes subscriptions, payments, and refunds. These providers receive information needed to deliver their services.

Our privacy policy explains service providers, processing locations, disclosures, and your data rights in more detail.

Your choice to stay. Your choice to leave.

Export your budget as a JSON file or request account deletion from settings. Downloaded exports are unencrypted, so keep your copy somewhere private.

Deletion removes your login, personal budget, and stored exports through a background process. Backup copies can remain for up to 35 days. Payment references and refund records are retained for billing, refunds, disputes, and applicable legal obligations.

If you have no active personal trial, subscription, complimentary access, or qualifying accepted shared-budget access, a 90-day account-deletion countdown begins. The app shows the deadline. Regaining qualifying access clears it; signing in alone does not.