Privacy Policy

Nixpense (“we”, “the app”) is a personal-finance tool operated by Nixpense. This policy covers the Nixpense app and everything you do inside it. It does not cover any other site you might reach from a link here.

If you use Nixpense, this policy applies to you. If you disagree with any of it, the remedy is entirely in your hands: delete your data from the profile page and stop using the app.

Everything below is information you typed in or uploaded. We do not buy data about you, and we do not connect to your bank — Nixpense never asks for online-banking credentials, and could not use them if you offered.

We do not use analytics or advertising trackers, and there are no third-party scripts on any page of the app. The only cookie we set is the one that keeps you signed in.

This is the part most worth being precise about, so here is the whole path, step by step:

• You choose a PDF. It is sent over an encrypted connection to our own parsing endpoint. It is not sent to any third-party document or AI service.
• The parser reads the text out of it — institution, statement period, balances, interest rate, and the transaction lines — and returns that to your browser as a preview.
• You review and correct it before anything is saved. Nothing is written to our database until you confirm the preview.
• On confirm, the transactions are filed against the account you chose, and both the parsed contents and the original PDF are stored as your document history.

Statement contents are also what we would use to improve the parser and the automatic categorisation. That work happens on your own data, for your own account. We do not pool your statements with other users' to train anything, and we do not send them to an outside model provider.

Everything Nixpense calculates is shown with its working, on purpose. When the app says a payment is $75.94 of interest, it shows you the arithmetic that produced it — balance, rate, days — so you can check it against your own statement rather than take our word for it.

The same principle applies to the data itself:

• Nothing is inferred behind your back. Categories guessed by the app are labelled as guesses, and you can overrule any of them.
• No automated decisions are made about you. Nothing here scores you, rates your creditworthiness, or shares an assessment of you with anyone.
• You can see the raw data. The export on your profile page gives you everything we hold, in a plain machine-readable file — not a summary of it.

Your records are isolated at the database level, not merely by application code: every table enforces row-level security keyed to your user ID, so a query that forgot to filter by user would still return nothing but your own rows.

Data is encrypted in transit and at rest. The operator of Nixpense has administrative access to the database as a matter of technical necessity, and uses it only to keep the service working or when you ask for help with a specific problem. We do not sell, rent, or share your financial data with anyone — advertisers, lenders, insurers, data brokers, or otherwise.

The third parties involved are the infrastructure the app runs on, one form service, and two sources of exchange rates:

These are service providers acting on our instructions, not partners we share data with for their own purposes. We would only disclose your data beyond this if the law required it.

You can delete your data at any time, yourself, without contacting us and without giving a reason. From your profile page you can:

• Export everything — a single file containing every record we hold for you.
• Delete your document history — removes the retained contents and the original PDFs described in section 3, while leaving the accounts and transactions you have built up.
• Delete all financial data — accounts, transactions, bills, payments, categorisation memory and statement history, in one action. Your login stays so you can start clean.
• Delete your account — the above, plus your profile and your login.

Deletions are immediate and permanent: the rows are removed, not flagged as hidden. We keep no shadow copy for our own use. Encrypted infrastructure backups may retain deleted rows for up to 30 days before they age out, and server logs age out on the schedule in section 2.

Individual records can also be deleted one at a time wherever they appear — an account, a transaction, a bill, a recorded payment — without touching anything else.

Depending on where you live, you may have statutory rights to access, correct, port, or erase your personal information, and to withdraw consent. The controls in section 6 are designed to let you exercise all of them directly, immediately, without going through us. If you would rather make a formal request, or you believe something here has not been honoured, write to feedback@nixpense.com and we will respond within 30 days.

Nixpense is not intended for anyone under 16, and we do not knowingly hold data about children. If you believe a child has given us information, write to us and we will remove it.

If we change how data is handled — particularly anything in section 3 — we will update this page and the date at the top before the change takes effect, and material changes will be flagged inside the app. Continuing to use Nixpense after a change means you accept the updated policy; if you do not, section 6 is always available to you.

Questions about any of this go to feedback@nixpense.com. See also the Terms of Service.