Privacy Policy

NutBit helps you save by logging the purchases you skip and putting that money towards your goals, on your own or together with friends. This policy explains what data the app and this website collect, why, who can see it, and what you can do about it.

NutBit doesn't hold or move money. Amounts in the app are what you enter to track your savings. We never connect to your bank, and we never see your card or bank details.

1. Who is responsible

NutBit is run by Ivan Szabo, Kővirág utca 5, 2040 Budaörs, Hungary. They are responsible for your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, email privacy@nutbit.app.

2. What we collect

Your account

• Email address and name from sign-up, or from Google or Apple if you sign in with them. Passwords are handled by our hosting provider; we never see them.
• Profile: nickname, and optionally a profile photo and short bio; your friend code; currency and country.
• Birth year, which you give at sign-up, and the age group we work out from it. We use them to confirm you're 18 or over and, in anonymous form, to understand who uses NutBit.
• Sign-up answers: the goal and saving categories you pick, how you heard about us, and any referral or promo code you use.

Your savings

• Saves (what you skipped, the amount, an optional note), stashes into goals, and your General stash.
• Goals: name, target, due date, currency and an optional picture.
• Subscriptions you cancelled and track as recurring savings.
• Progress the app works out from this: totals, streaks, XP, levels and badges.

Friends and shared goals

• Friends: friend requests, who you're friends with, cheers, nudges, reactions and challenges.
• Activity feed: your individual saves appear in your friends' feed only if you turn on sharing in your profile.
• Shared goals: which shared goals you're in, your share, what you've stashed into each, invites, money-back requests and leave requests.
• Joining by invite link: if you join a shared goal through an invite link, we record when you asked to join and the notice you were shown. When the owner approves, you become NutBit friends with the owner, and the goal's members see your nickname and how much you've stashed into that goal. The legal basis is performing the service you asked for (Art. 6(1)(b) GDPR). You can remove a friend at any time; deleting your account removes your friendships and join requests.

Hazel, your savings coach

If you chat with Hazel, we store your messages and Hazel's replies so the conversation can continue, plus a daily count of messages for plan limits. Hazel uses an AI language model to write replies (see section 5). Hazel is a habit coach, not a financial adviser. Please don't share sensitive information such as health details or account numbers with Hazel.

Plan and purchases

We store your plan (Free or NutBit Plus), trial dates and when your plan ends. Purchases are made through Apple's App Store. Apple handles payment and RevenueCat confirms your subscription to us. We never receive your card details.

Using the app

• Session data: when you open and close the app and how long you use it, and milestones such as your first save or first goal.
• Bug reports you send: your description, any screenshot you attach, and your name.
• Testimonials you choose to submit: your text, rating and name. We only publish them after review.
• Support messages you send from Help → Contact support or by email: your message, topic, account email, app version and device type.
• Error reports: when something breaks in the app, it sends us the error message, the screen, the app version and the device type, linked to your account so we can fix it. They never contain amounts you saved.
• Technical data: IP address, device and browser type, used by our hosting provider to run and protect the service.

3. Why we use it, and the legal basis

• To provide NutBit — your account, saves, goals, friends, shared goals, Hazel, notifications and your plan. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).
• To keep NutBit safe and correct — preventing abuse, checking the savings records add up, fixing bugs. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
• To improve NutBit — understanding which features are used, using aggregated or pseudonymous statistics. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR). You can object at any time.
• Push notifications and published testimonials — only with your consent (Art. 6(1)(a) GDPR), which you can withdraw in your device settings or by emailing us.
• Legal duties — for example keeping records we're required to keep (Art. 6(1)(c) GDPR).

We don't sell your data, don't show ads, and don't use your data for advertising. We don't make decisions about you by automated means that have legal or similarly significant effects.

4. Who can see what in the app

• Anyone with your friend code can find your nickname to send you a friend request.
• Your friends see your nickname, profile photo, level, streaks and total saved, and your individual saves if you've turned on sharing.
• Members of a shared goal see your nickname, your share and how much you've stashed into that goal, and that goal's activity.
• Your personal goals, Hazel chats and plan are visible only to you.
• A small number of NutBit administrators can access data when needed for support, security or fixing errors.

5. Who processes your data for us

• Base44 (operated by Wix.com Ltd.) hosts the app and website: database, sign-in, file storage and the AI service behind Hazel. Its sub-processors are listed in Base44's sub-processor list.
• AI model provider (via Base44) — Hazel's replies are written by a large language model that Base44 uses on our behalf. Your chat messages are sent to it to produce a reply.
• Apple — App Store purchases and subscriptions, and Sign in with Apple if you use it. Apple is responsible for its own processing of your payment.
• RevenueCat — checks and manages your subscription status, based on purchase data from Apple.
• Despia — the runtime that packages NutBit as an iOS app; provides native features and may process device and app-usage data for that.
• OneSignal — delivers push notifications if you allow them. It receives a device identifier, your NutBit user ID and the notification text (never amounts of money).
• Google — Sign in with Google, if you use it.
• Base44's email service (Twilio SendGrid) — sends our emails, such as support messages and the replies to them. It receives the email address and the message.

To show amounts in your currency we fetch public exchange rates; no personal data is sent for that.

Some of our providers process data outside the EU, mainly in the United States and Israel (and Apple and Google wherever they operate). Israel has an EU adequacy decision. For the United States, transfers rely on the EU–US Data Privacy Framework where the provider is certified, otherwise on the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Account and app data: as long as you have an account.
• When you delete your account (Profile → Delete account), we delete your profile, email, friendships, notifications, join requests, sessions, testimonials and other personal data. We keep your savings history only in anonymised form, under a random ID that can't be linked back to you, for statistics. Money you stashed into a shared goal stays in that goal's total, anonymised, so the other members' progress stays correct.
• Hazel chats are stored in Base44's AI service and are not yet removed automatically when you delete your account. Email privacy@nutbit.app and we'll have them deleted.
• Join-request records (when you asked to join and the notice you saw) are kept while you're in that shared goal, as proof of what you were told, and deleted with your account.
• Bug reports and support messages: as long as needed to deal with them; your support messages are deleted with your account.
• Error reports: as long as needed to fix the problem. When you delete your account they are unlinked from you.
• Purchase records are kept by Apple under its own policies.

7. Your rights

You can correct most of your data yourself in the app (Profile), and delete your account at any time under Profile → Delete account. For everything else, including a copy of your data, email us.

Under the GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data ("right to be forgotten").
• Take your data with you in a machine-readable format (portability).
• Restrict how we use your data, or object to uses based on our legitimate interests.
• Withdraw consent at any time, where we rely on it. This doesn't affect what we did before you withdrew it.

Email privacy@nutbit.app with the subject "Privacy Request". We answer within one month. We may ask you to confirm it's really you before we hand over or delete anything.

You can also complain to a data protection authority, in particular the one in the EU country where you live, work or where you think the problem happened. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu); in Germany, the authority of your federal state. We'd appreciate the chance to sort it out with you first.

8. Storage on your device

The app stores small values on your device that it needs to work, such as your sign-in session, settings and which celebrations you've already seen. We don't use advertising or cross-site tracking cookies. If you allow push notifications, your device's push token is used to send them; you can turn them off in your device settings.

9. Security

We use access controls, encrypted connections and checks on who can read and change each kind of data. No system is perfectly secure. If a breach puts your data at risk, we'll inform the data protection authority within 72 hours where the law requires it, and tell you without undue delay if the risk to you is high.

10. Age

NutBit is for people aged 18 and over. We ask for your birth year at sign-up and don't let anyone under 18 create an account. If you believe someone under 18 is using NutBit, email privacy@nutbit.app and we'll delete their data.

11. Changes

We'll update this policy when NutBit changes, and change the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

12. Contact

Questions or requests about your data: privacy@nutbit.app.