Privacy Policy

This Privacy Policy explains how NestWorth handles information when you create an account, manually enter portfolio information, use market data features, manage billing, or contact support.

NestWorth is a manual-entry personal portfolio and net worth tracking app. NestWorth does not ask for bank, brokerage, retirement account, or crypto exchange login credentials, and it does not connect directly to those accounts.

NestWorth is for personal portfolio tracking only. Market prices and FX rates may be delayed, estimated, incomplete, or unavailable. NestWorth does not provide financial advice.

You may provide account information such as your email address, name or display name, password credentials handled through Supabase Auth, country or residency selection, age range, occupation, risk comfort, and default currency.

You may also provide financial tracking data such as account or institution names, asset and holding names, tickers or symbols, quantities, buy or sell prices, cash balances, transaction records, holding records, notes, account categories, and settings.

Because NestWorth is manual-entry, your dashboard depends on the accuracy and completeness of the information you choose to enter.

NestWorth uses Stripe for web and PWA checkout, subscription billing, billing status, payment processing, and customer portal features.

NestWorth may store Stripe customer identifiers, subscription identifiers, price identifiers, subscription status, billing interval, subscription period dates, cancellation status, and checkout state needed to verify app access.

For iOS App Store subscriptions, NestWorth uses Apple StoreKit and may process product identifiers, original transaction identifiers, subscription status, expiry, renewal, cancellation, refund or revocation status, and signed-transaction-derived metadata needed to verify and restore Plus access.

NestWorth does not store full payment card numbers. Payment details are handled by Apple or Stripe according to their own policies and security practices.

If you choose Google sign-in, NestWorth uses Google OAuth to authenticate you. NestWorth may receive account information needed for sign-in, such as your email address and display name, depending on the permissions you grant.

If you choose Sign in with Apple, NestWorth uses Apple and Supabase Auth to authenticate you. NestWorth may receive your email address and, on the first Apple authorization, your name if Apple provides it.

Google and Apple sign-in are optional where email and password sign-in is available.

NestWorth uses Supabase for authentication, database storage, session handling, and app-owned user records.

Supabase may process authentication data, account identifiers, session cookies, profile records, settings, portfolio data, subscription status records, and non-identifying account-deletion audit records on NestWorth's behalf.

NestWorth may use yfinance-backed provider logic for stock prices, stock search results, and FX rates.

NestWorth may use CryptoCompare when a CryptoCompare API key is configured and may use CoinGecko for crypto search and price fallback data.

Market data providers may receive symbols, search queries, ticker identifiers, currency pairs, or crypto asset identifiers needed to return reference data. NestWorth does not send bank login credentials, brokerage login credentials, or crypto exchange login credentials to market data providers.

If you contact NestWorth at support@nestworthapp.com, NestWorth may use your email address and the contents of your message to respond, investigate issues, and maintain support records.

Please avoid sending sensitive credentials, bank passwords, brokerage passwords, crypto exchange passwords, or full payment card details in support messages.

NestWorth uses authentication cookies and related session storage needed to keep you signed in and protect your account.

NestWorth may store local preferences or UI state in the browser, such as dismissed Free-plan notices or cached search results used to improve the app experience.

Server logs may record limited technical information needed for security, reliability, fraud prevention, rate limiting, and debugging, such as request timing, route activity, error categories, and network-derived request information.

NestWorth uses data to provide authentication, save and display your portfolio, calculate dashboard values, enforce Free and Plus plan limits, process and verify subscriptions, provide support, protect the service, troubleshoot issues, and comply with legal obligations.

NestWorth does not use your manually entered portfolio information to provide financial advice or investment recommendations.

NestWorth shares data with service providers only as needed to operate the app, including Supabase, Stripe, Sign in with Apple, Apple StoreKit and App Store services, Google sign-in where enabled, and market data providers.

NestWorth may also disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or as part of a business transfer subject to appropriate protections.

NestWorth keeps account and portfolio data while your account is active or as needed to provide the app, maintain records, resolve disputes, enforce agreements, and comply with legal obligations.

You can update or delete portfolio entries inside the app. You can immediately delete your NestWorth login account from Settings -> Delete NestWorth account.

After confirmation, NestWorth immediately deletes the Supabase Auth identity and app-owned profile, settings, portfolio accounts, holdings, transactions, portfolio history, subscription records, entitlements, and deletion-request records linked to that identity.

NestWorth retains a non-identifying operational deletion record for 12 months, then automatically purges it. The record contains completion status, timestamps, deleted-data categories, and Apple revocation outcome, but no user ID, email address, provider identifier, portfolio value, or other account content.

The current Supabase project has no user-accessible scheduled backups or point-in-time recovery. Supabase may nevertheless retain isolated provider-controlled daily backup copies for up to seven days. Those copies are unavailable to the live app, are not used after deletion, and age out under Supabase's managed retention.

Operational request and authentication logs may outlive active account data for short security and reliability windows. On the current Supabase Free plan, API and database logs are retained for one day and Auth audit logs for one hour. NestWorth does not intentionally write deletion credentials, tokens, user IDs, email addresses, or portfolio content to its own deletion logs.

Deleting your NestWorth account does not automatically cancel an App Store or Stripe subscription. You should manage or cancel an active subscription through the applicable billing provider to avoid future renewal charges.

NestWorth uses technical and organizational safeguards intended to protect user data, including authenticated access controls and database row-level security.

No online service can guarantee perfect security. You are responsible for keeping your login credentials secure and for promptly notifying support if you believe your account has been compromised.

NestWorth is not intended for children. If you believe a child has provided personal information to NestWorth, contact support so the issue can be reviewed.

NestWorth and its service providers may process information in countries other than where you live. Data protection laws may differ by location, but NestWorth uses service providers intended to support secure app operations.

NestWorth may update this Privacy Policy as the app changes. The effective date on this page shows when this policy was last updated.

For privacy questions, deletion requests, or support, contact support@nestworthapp.com.