Privacy Policy
Last updated 14 July 2026
This Privacy Policy explains how Nudget (“Nudget”, “we”, “us” or “our”) collects, uses, shares and protects your information when you use our household budgeting and personal‑finance application and website (together, the “Service”). Nudget is designed to be private by default — we only collect what we need to run the Service, and we never sell your data.
By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use Nudget.
1. Who we are
Nudget is the data controller for the personal information described in this policy. If you have questions or want to exercise your rights, contact us at budget@convurtx.com.
2. Information we collect
2.1 Information you give us
- Account details: your name, email address, and a securely hashed password (we never store your password in plain text). You may also set a locale, display currency and timezone.
- Social sign‑in: if you sign in with Google, we receive your Google account identifier, email address, name and profile picture from Google. We do not receive your Google password.
- Financial information you enter or import: the accounts, balances, transactions, payees, amounts, notes, categories, tags, budgets, savings goals and recurring bills/income you create. Nudget does not connect to your bank — this data comes from what you type in or from bank CSV files you choose to import.
- Household & sharing data: household names, member roles and invitations when you share a household with others.
- Support communications: messages you send us and their contents.
2.2 Payment information
Premium subscriptions are processed by our payment provider, Stripe. Your card details are entered directly with Stripe and are never stored on Nudget’s servers. We retain only your subscription status, plan, billing period and a Stripe customer/subscription reference so we can manage your plan. Stripe’s handling of your data is governed by its own privacy policy.
2.3 Information we collect automatically
- Device & usage data: IP address, browser/user‑agent, and timestamps of key actions.
- Security & audit logs: we record sign‑in events (including failed attempts), sign‑outs, registrations and sensitive account or administrative actions, together with the associated IP address and user‑agent, to protect your account and detect abuse.
- Device sessions: the devices and apps signed into your account, including a device label and last‑active time, which you can review and revoke in Settings.
- Notification data: your notification preferences and, if you enable push notifications, the push subscription your browser provides.
2.4 Cookies & local storage
Nudget uses browser local storage to keep you signed in (an authentication token) and to remember preferences such as your theme. As a Progressive Web App, Nudget also uses a service worker and local caches so it loads quickly and works offline. We do not use third‑party advertising or cross‑site tracking cookies.
3. How we use your information
- To provide and operate the Service — storing your accounts and transactions, calculating budgets, goals and “safe to spend”, and running scheduled recurring items.
- To send you the notifications you opt into, such as budget nudges, bill‑due reminders and weekly summaries, by email and/or push.
- To manage subscriptions, billing and receipts (via Stripe).
- To secure your account — authentication, optional two‑factor authentication, fraud/abuse prevention and audit logging.
- To provide customer support and respond to your requests.
- To maintain, troubleshoot and improve the Service, and to produce aggregate, non‑identifying usage statistics.
- To comply with legal obligations and enforce our Terms of Service.
4. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the Service you sign up for.
- Consent — for optional features such as push notifications and marketing emails, which you can withdraw at any time.
- Legitimate interests — to secure the Service, prevent abuse and improve the product, balanced against your rights.
- Legal obligation — to meet accounting, tax and other legal requirements.
5. How we share information
We do not sell your personal or financial information. We share it only as described below.
5.1 With other people in your household
If you join or create a shared household, other members may see shared accounts, transactions and budgets according to their role. Accounts you mark as private remain visible only to you. Be mindful of what you share.
5.2 With service providers (sub‑processors)
We use trusted providers to run the Service. They may process your data only on our instructions:
| Provider | Purpose |
|---|---|
| Stripe | Subscription payments and billing |
| Optional Google sign‑in | |
| Email delivery provider | Transactional emails (verification, reminders, summaries) |
| Web Push services | Delivering push notifications you enable |
| Exchange‑rate provider | Currency conversion for multi‑currency households |
| Hosting provider | Running the application and storing your data |
5.3 Legal and safety
We may disclose information if required by law, or to protect the rights, property or safety of Nudget, our users or others, or to investigate fraud or security issues.
5.4 Business transfers
If Nudget is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
6. Data retention
We keep your information for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymise your personal and financial data within a reasonable period, except where we must retain certain records (for example, billing and tax records, or security/audit logs) to comply with legal obligations, resolve disputes and enforce our agreements. Backups are purged on a rolling schedule.
7. How we protect your information
- Encryption in transit (HTTPS/TLS) for all traffic between your device and Nudget.
- Passwords stored using strong one‑way hashing; sensitive secrets encrypted at rest.
- Optional two‑factor authentication (TOTP) for your account.
- Role‑based access controls, private‑account visibility, and audit logging of sensitive actions.
- The ability to review and revoke device sessions at any time.
No method of transmission or storage is 100% secure, but we work hard to protect your data and continually improve our safeguards.
8. Your rights & choices
Depending on where you live, you may have the right to:
- Access and receive a copy of your data — you can export your transactions and account data from within the app.
- Correct inaccurate information via your profile and Settings.
- Delete your data by deleting your account.
- Object to or restrict certain processing, and withdraw consent for optional features such as push or marketing.
- Data portability — export in common formats (CSV, and XLSX/PDF on Premium).
- Complain to your local data‑protection authority.
To exercise a right we can’t fulfil in‑app, email budget@convurtx.com. We may need to verify your identity first.
9. International data transfers
Your information may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
10. Children
Nudget is not intended for children under 16 (or the age of digital consent in your country). We do not knowingly collect data from children. If you believe a child has provided us information, contact us and we will delete it.
11. Third‑party links
The Service may link to third‑party sites (for example, Stripe’s billing portal or Google). Their privacy practices are governed by their own policies, and we are not responsible for them.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice (for example, by email or in‑app). Your continued use of the Service after changes take effect means you accept the revised policy.
13. Contact us
Questions about this policy or your data? Email us at budget@convurtx.com.