Skip to content
Nido

Nido — Privacy Policy

Effective date: 12/07/2026 Last updated: 12/07/2026

This Privacy Policy explains how Juan Diego Cruz Ruiz ("Nido," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Nido mobile application and related services (collectively, the "Service").

Nido is a shared-money app for couples and households. Because the Service is designed to be used by two or more people together, some information you provide is, by design, made visible to the other member(s) of your household. Please read the "Households and Shared Data" section carefully.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. A quick summary

This summary is for convenience only; the full policy below governs.

2. Information we collect

Information you provide directly - Account information: your email address, password (stored only in hashed form by our authentication provider), and optionally your display name, profile photo, country, and language. - Household and relationship information: the household you create or join, your membership in it, invitations you send or accept, and the fact that you are connected to another user as a household member. - Financial information you enter: accounts, balances, transactions, amounts, merchants, categories, budgets, bills, shared expenses, splits, settlements, goals, and related notes that you manually enter into the app. - Communications within the app: comments, reactions, and notes you add to transactions or other items. - Sharing and visibility choices: your settings for what is shared with, or hidden from, your household member(s). - Support communications: information you provide when you contact us for help.

Information created when you use the Service - Usage and analytics data: how you interact with the app, features used, and events related to onboarding and activation, collected through our analytics provider. - Device and technical data: device type, operating system and app version, language settings, general location inferred from IP address, and unique device or installation identifiers. - Diagnostic data: crash reports and performance logs. - Push notification tokens: an identifier that lets us deliver notifications you enable (for example, bill reminders).

Purchase information - If you subscribe to a paid plan, we receive confirmation of your subscription status and related transaction identifiers from the app stores or payment provider. We do not receive or store your full payment card details; those are handled by Apple, Google, or the applicable payment provider.

Bank and financial-account connection data (only if you choose to connect an account) - If we offer, and you choose to use, a feature to connect an external financial account, we work with third-party providers (such as Plaid in the United States and Belvo in Colombia) to access information from that institution, which may include account details, balances, and transaction history. You enter your banking credentials directly with the provider, not with Nido; we never receive or store your bank login credentials. Access tokens that allow ongoing retrieval are stored securely on our servers and are never placed on your device.

We do not knowingly collect special categories of data beyond the financial information described above, and we ask that you not enter such data into free-text fields.

3. How we use your information

We use your information to: - provide, operate, and maintain the Service, including syncing your data across your and your household's devices; - enable the shared features of the Service according to your visibility choices; - authenticate you and keep your account secure; - send you service-related and transactional messages, and notifications you have enabled; - provide customer support; - understand how the Service is used so we can fix problems and improve it; - process subscriptions and manage entitlements; - detect, prevent, and address fraud, abuse, security incidents, and technical issues; and - comply with legal obligations and enforce our Terms of Service.

Our legal bases for processing (where applicable) include performing our contract with you, your consent (which you may withdraw), our legitimate interests in operating and improving the Service, and compliance with law.

4. How your information is shared

With your household member(s). This is central to how Nido works. When you are in a household, the data you choose to share becomes visible to the other member(s) of that household, subject to your per-account and per-transaction visibility settings. Items you mark as private are not shared with them. Please note that once another member has viewed shared information, we cannot retract what they have already seen. See "Households and Shared Data" below.

With service providers (sub-processors) who process data on our behalf under contract, including for: - backend, database, and hosting infrastructure; - data synchronization between your devices and our servers; - product analytics and crash reporting; - subscription management and payment processing; - push-notification and email delivery; and - financial-account connectivity (only if you use that feature).

A current list of key sub-processors is available at https://getnidoapp.com/subprocessors or on request. Representative providers include Supabase, PowerSync, PostHog, RevenueCat, Apple, Google, Expo, and, for optional account connections, Plaid and Belvo.

For legal reasons, when we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Nido, our users, or others.

In a business transfer, in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or notify you of any material change.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Data retention

We keep your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. Because Nido is a shared product, deleting your account does not automatically delete shared data that your household member(s) also have access to or that is jointly attributable to the household; see "Households and Shared Data."

6. Security

We use technical and organizational measures designed to protect your information, including encryption in transit and at rest, database-level access controls that restrict data to authorized household members, and secure storage of authentication tokens. As noted above, we never receive your bank login credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Where your information is processed; international transfers

Your information may be stored and processed in the United States and other locations where we or our service providers operate. If you are located in Colombia or elsewhere outside these locations, your information will be transferred internationally. Where required, we implement appropriate safeguards and obtain your authorization for such transfers in accordance with applicable law, including Colombia's Ley 1581 de 2012.

8. Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information: - to know and access the information we hold about you; - to correct or update inaccurate information; - to delete your information; - to obtain a copy of certain information in a portable format; - to withdraw consent where processing is based on consent; - to object to or restrict certain processing; and - to lodge a complaint with a data protection authority.

Colombia (Ley 1581 de 2012 / Habeas Data). You have the rights to know, update, rectify, and delete your personal data, and to revoke any authorization you have given, subject to legal limits. You may exercise these rights by contacting us at [email protected]. You also have the right to file a claim with the Superintendencia de Industria y Comercio (SIC).

United States (including California). If you are a U.S. resident, you may have rights to know, access, delete, and correct your personal information, and to opt out of the "sale" or "sharing" of personal information. As stated, we do not sell or share your personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.

To exercise any right, contact us at [email protected]. We will verify your request and respond within the timeframe required by applicable law. You can also manage much of your data directly in the app (for example, editing or deleting entries) and control notifications in your device settings.

9. Households and shared data

Because Nido is built for couples and households, some processing is inherently shared, and this section explains what that means: - What your partner can see. When you join a household, the accounts, transactions, and other data you choose to share are visible to your household member(s), according to your visibility settings. Items you mark as private are not shared with them. - Invitations. When you invite someone to your household, you provide us with the information needed to deliver that invitation. Please only invite people who have agreed to join. - Jointly created data. Some information — such as shared expenses, splits, and settlements — relates to more than one member and may remain associated with the household and visible to the other member(s) even if you later leave or delete your account. - Leaving a household. If you leave a household or a household is dissolved, we will handle the separation of data as described in the app at that time. Information a member already saw or exported cannot be recalled.

If you have questions about shared data, contact us before sharing sensitive information.

10. Children's privacy

The Service is intended for adults and is not directed to individuals under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means and update the "Last updated" date above. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

12. How to contact us

If you have questions, requests, or complaints about this Privacy Policy or your personal information, contact:

Juan Diego Cruz Ruiz Cali, Colombia Email: [email protected]

The data controller responsible for your information is Juan Diego Cruz Ruiz, unless otherwise stated.