NestCalc.ai LLC dba CertusFX ("CertusFX," "we," "us," or "our") is a Wyoming limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the CertusFX application (the "Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
Account Information
Creating an account is optional — the core app works without one. If you create an account, we collect your email address and an encrypted password. Authentication is managed by Supabase. We do not store your password in plaintext.
Preferences & Watchlists
Your preferences — base currency, language, theme, watchlists, and rate alerts — are stored on your device, not on our servers.
Plan Data
If you purchase a Pro pass, we store your plan tier and its expiry date against your account profile so your plan can be recognized across your devices.
Payment Information
If you purchase a Pro pass in the app, payment is processed by the app store you buy through — the Apple App Store or Google Play — and we do not receive or store your card details; the store provides us only your purchase status. There is nothing to buy on the web version of the Service.
Usage Data
Our hosting infrastructure automatically records minimal technical information such as request paths, device type, and timestamps. This data helps us improve performance and diagnose issues.
2. How We Use Your Information
We use the information we collect to:
•
Provide, operate, and maintain the Service
•
Process your purchases and recognize your plan across devices
•
Fetch exchange rates and government bond-yield data for the app
•
Improve, personalize, and expand the Service
•
Communicate with you about your account, updates, or support requests
•
Detect and prevent fraud or abuse
The AI trend outlooks shown in the app are generated nightly from public market data only — no personal data of any user is involved in producing them.
3. Third-Party Services
We rely on the following third-party services to operate CertusFX. Each service receives only the minimum data required to perform its function:
•
Supabase — Authentication and database. Stores your account credentials (hashed) and your plan tier. Hosted in the United States.
•
Apple App Store / Google Play — Process payments for in-app purchases. We receive your purchase status, never your payment card details.
•
RevenueCat — Validates in-app purchases and manages plan entitlements. Receives the store purchase token and an app user identifier, never your payment card details.
•
Frankfurter / European Central Bank — Daily reference exchange rates on the free data rail. No personal data is sent.
•
ExchangeRate-API — Extended keyed exchange-rate coverage on the Pro data rail. No personal data is sent.
•
FRED API (Federal Reserve Economic Data) and US Treasury FiscalData — Government bond-yield data. No personal data is sent.
•
Anthropic — Writes the short prose in the nightly AI trend outlooks from computed market facts (currency pair, rate history, yield differentials). No personal data is sent.
•
Netlify — Hosting and serverless functions. Serves the application and processes API requests. See Netlify's Privacy Policy.
4. Cookies & Local Storage
CertusFX uses device local storage (not traditional cookies) to:
•
Maintain your authentication session (Supabase JWT token), if you sign in
•
Store your preferences, watchlists, and alerts so they persist between sessions
•
Cache the most recent rates so the app can show them when you are offline (always labeled as cached)
We do not use third-party tracking cookies. We do not use advertising cookies. If Supabase sets cookies for session management, those are governed by its privacy policy.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., purchase records for tax compliance). See our Delete data page for how to request deletion.
Cached market data (rates, yields, trend outlooks) contains no personal data.
6. Data Security
We implement reasonable technical and organizational safeguards to protect your data:
•
All data in transit is encrypted via HTTPS/TLS
•
Passwords are hashed by Supabase (bcrypt)
•
API endpoints validate JWT tokens and request origin
•
Payment card data is handled entirely by the app store and is never received or stored by us
No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
•
Access — Request a copy of the personal data we hold about you.
•
Correction — Request correction of inaccurate or incomplete data.
•
Deletion — Request deletion of your personal data, subject to legal retention requirements.
•
Portability — Request your data in a portable, machine-readable format.
•
Opt-Out of Sale — We do not sell your personal data. We do not share your data with third parties for their marketing purposes.
California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@nestcalc.ai.
European Residents (GDPR): If you are located in the European Economic Area, you have additional rights including the right to lodge a complaint with your local data protection authority. Our lawful basis for processing is contract performance (providing the Service) and legitimate interest (improving the Service).
8. Children's Privacy
CertusFX is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@nestcalc.ai.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
•
Email: support@nestcalc.ai
•
Mailing Address: NestCalc.ai LLC dba CertusFX, 30 N Gould St Ste R, Sheridan, WY 82801
•
Entity: NestCalc.ai LLC dba CertusFX — a Wyoming limited liability company
Effective Date: July 18, 2026