Nestviz Privacy Policy
Last updated: October 19, 2026
Nestviz is a private household retirement-planning web app. This policy explains what information Nestviz collects when you use it, why, and the choices you have. In this policy, "we" and "us" mean the operator of Nestviz.
Information we collect
| Information | Source | Purpose |
|---|---|---|
| Email address, name and profile picture URL | You, or your Google account when you choose Sign in with Google | Create and identify your account and sign you in |
| Password | You, if you sign up with email and password | Authenticate you. It is stored only as a salted hash by our authentication provider and is never visible to us |
| Planning data: household details, accounts and balances, income, expenses, tax settings, scenarios and assumptions | You enter it | Show and calculate your retirement projections |
| Sign-in history: time, sign-in method, IP address and approximate location (country, region, city, network provider) | Collected automatically when you sign in | Account security and service administration |
| Basic, cookie-free usage and performance statistics (pages viewed, browser type, country) | Cloudflare Web Analytics | Understand how the site is used and keep it fast |
Google sign-in
If you sign in with Google, Nestviz asks Google only for the basic profile scopes: your email address, your name and your profile picture. We use your email address to identify your account and your name to greet you. We do not request access to your Google Drive, Gmail, Calendar, Contacts or any other Google service, and we do not read any Google data beyond those basic profile fields.
Nestviz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To provide Nestviz: authenticate you and store and calculate your plan.
- To keep the service secure and investigate abuse or unusual sign-in activity.
- To maintain and improve the service using aggregate usage statistics.
We do not sell your information, do not use it for advertising, and do not use your planning data to train machine-learning models.
Who can see your information
- You. Each account has its own household. Database rules prevent other users from reading your planning data.
- Administrators can see account metadata (such as email, sign-up date and sign-in history). They have no access to your planning data through the app.
- Service providers that process data on our behalf: Supabase (authentication and database), GitHub Pages (website hosting), Cloudflare (web analytics), ipinfo.io (it receives only an IP address, when an administrator opens a user's sign-in history, and returns approximate location), and Google, if you use Google sign-in.
- Legal requirements. We may disclose information if required by law.
Retention and deletion
- Account and planning data are kept while your account exists.
- Records you delete in the app are first moved to Settings → Recently deleted so you can restore them.
- Sign-in history is kept for 180 days.
- To delete your account and all associated data, or to request a copy of your data, contact us using the details below. We will act on verified requests within a reasonable time.
Security
Data is transmitted over HTTPS and stored in a managed database with row-level access controls. No system is perfectly secure, so please use a strong, unique password and do not share your account.
Cookies and local storage
Nestviz stores your sign-in session in your browser's local storage so you stay signed in. It does not use advertising or cross-site tracking cookies. Cloudflare Web Analytics does not use cookies or track you across sites.
Children
Nestviz is not intended for anyone under 18, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. The "Last updated" date above shows the latest revision; significant changes will be announced in the app or by email.
Contact
Questions or requests about privacy: [email protected].