Privacy Policy

Effective 2026-10-16. Provided in English and Simplified Chinese; if they differ, the English version controls.

The short version.

We collect what it takes to run a shared household ledger: your sign-in details, the bills and photos you and your Nest members enter, and basic server logs.

No ads, no analytics, no tracking across sites. We do not sell or share your personal information for advertising.

A receipt photo goes to our AI provider (DeepSeek, in China) only when you tap to scan it.

The server operator can technically access the database and backups; Nestbill is not end-to-end encrypted.

1. Who we are

Nestbill (also called 巢记) is operated by the operator of this Nestbill service ("we", "us"), who decides how personal information on this server is used. This policy covers the Nestbill website and app connected to this server. A copy of Nestbill that someone else runs on their own server is operated by them, not us.

2. Information we collect

You give us

Account details: login name, display name (nickname) and your ledger's base currency. Your password is stored only as a salted hash, never in plain text.
Ledger content: bills (amount, currency, date, category, description, who paid and how it is split), payments and confirmations, group funds, and exchange-rate records with any screenshot you attach.
Photos: receipts, bill photos and payment proofs you upload.
Payment methods you choose to add: an account number or payment instructions and an optional payment QR image, so Nest members know how to pay you.

Other people give us

Members of a Nest can enter information about you, such as your name on a bill, a share you owe, or you as a guest without an account.

Collected automatically

A sign-in cookie that keeps you logged in for up to 12 hours. It is strictly necessary; we use no advertising or analytics cookies.
Browser storage for your language and appearance choices. It stays on your device.
Server logs for running and securing the service: IP address, requested page, time, response status and browser type. Invitation codes are kept in the part of the link that browsers do not send to the server.
Account events such as sign-up, password changes, signing out other devices, the number of receipt scans used and your acceptance of these documents.

We do not collect your precise location, contacts or advertising identifiers, and Nestbill contains no third-party analytics or advertising code. The camera and photo library are used only when you choose to take or pick a picture.

3. How we use it

To provide Nestbill: keep your ledgers, calculate balances, and show a shared Nest's records to its members.
To scan a receipt when you ask.
To keep the service secure: authentication, session limits, rate limits and abuse prevention.
To fix problems, keep backups and restore data.
To tell you about important changes, and to comply with the law.

We do not use your information for advertising, we do not build profiles about you, and we make no automated decisions that have legal or similarly significant effects on you. We do not use your content to train AI models.

4. Who can see it and who we share it with

Your Nest members. Signed-in members of a shared Nest see that Nest's bills, attached photos and proofs, and members' payment methods. Your personal ledger is visible only to you.
Hosting provider. The server and its backups run on a cloud hosting provider in the region where this server is hosted, which stores the data on our behalf.
AI provider, only when you scan. The receipt photo and the ledger's base currency are sent to DeepSeek, a company in the People's Republic of China, which reads the items and amounts and returns them to us. We do not send your name, account details or other bills. DeepSeek processes the request under its own terms and privacy policy.
Apple, if you buy something in the iOS app. Apple handles the payment; we receive only what Apple shares to confirm the purchase.
Legal and safety. We may disclose information if required by law or valid legal process, or to protect the rights, property or safety of users or others.
Transfer of the service. If Nestbill is transferred to a new operator, your information may move with it under this policy, and we will tell you.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months.

If you copy Nestbill's sorting instructions into an AI service of your own, that service's own policies apply to what you give it.

5. How long we keep it

Account and ledger data are kept while your account is active and, for shared Nests, while the Nest exists, because other members rely on the records.
When you delete your account in the app (Me → Account security), we delete your login, personal ledger, payment methods and any Nest where you are the only member right away. If you ask us instead, we do the same within 30 days. In shared Nests, bills you were part of remain for the other members, with your name replaced by a neutral label. Rolling backups that still contain your data expire within 30 days.
Backups are rolling and overwritten after a short period (on the official server, about 8 days). Server logs are rotated and kept only for a limited time.

6. Security

Connections are encrypted with HTTPS, passwords are hashed, each account keeps at most 5 active sessions, and backups are readable only by the server owner. Nestbill is not end-to-end encrypted: the person who maintains the server has the technical ability to access the database and backups, and account permissions should not be read as meaning they cannot. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

7. Your choices and rights

Access and export: export the current ledger as CSV from the Bills page, or ask us for a fuller copy.
Correct: edit your nickname and your own records in the app, or ask us to correct shared records.
Delete: delete your account yourself under Me → Account security, or ask us to.
Receipt scanning: don't tap scan, and no photo is sent.
Sign-in security: sign out other devices or change your password under Me → Account security.

To make a request, contact us through the person who invited you, as described in Account help. We will verify your identity using your login name or UID and a contact channel you used before, and respond within 45 days. You may use an authorized agent; we may ask for proof of their authority. We will not treat you differently for exercising your rights. If we decline a request, you may ask us to reconsider by replying to our decision.

8. Notice for U.S. state residents

Residents of California and other U.S. states with consumer privacy laws have the right to know what personal information we collect and why, to access it, to correct it, to delete it, and to opt out of its sale, sharing for targeted advertising, or profiling. Because we do none of those three, there is nothing to opt out of, and we honor Global Privacy Control signals regardless. In the past 12 months we collected:

Category	Examples	Disclosed to
Identifiers	Login name, display name, account ID, IP address	Hosting provider; Nest members (names only)
Customer records	Payment account details you choose to add	Hosting provider; members of that Nest
Commercial information	Bills, shares, payments and receipts	Hosting provider; Nest members; AI provider (receipt photo only, when you scan)
Internet activity	Server logs and account events	Hosting provider
Visual information	Receipt photos, payment proofs, QR images	Hosting provider; Nest members; AI provider (when you scan)
Sensitive personal information	Login name with password; financial account numbers you add	Hosting provider; members of that Nest (payment details only)

Sources: you, other members of your Nests, and your device. Purposes: those in section 3. We use sensitive personal information only to provide the service, not to infer characteristics about you. Retention: see section 5.

9. Children

Nestbill is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, contact us and we will delete it.

10. International processing

Our server is located in the region where this server is hosted, and receipt photos you scan are processed in the People's Republic of China. These places may have data protection laws different from yours. We apply this policy wherever your information is processed.

11. Changes

We will post any update here with a new effective date. If a change is material, we will ask you to review and accept it in the app before you continue.

12. Contact

The operator of this Nestbill service · reachable through the person who invited you; see Account help.

隐私政策 · 国际版

隐私政策

生效日期 2026-10-16。本政策提供英文与简体中文版本，两者不一致时以英文版为准。

简要说明。

我们只收集运行共享家庭账本所需的信息：你的登录资料、你和 Nest 成员录入的账单与照片，以及基本的服务器日志。

没有广告、没有统计分析、不做跨站追踪。我们不出售你的个人信息，也不为广告目的共享。

只有当你点击识别时，小票照片才会发送给 AI 服务商（DeepSeek，位于中国）。

服务器运营者在技术上可以访问数据库和备份；巢记不是端到端加密的。

1. 我们是谁

巢记（Nestbill）由本 Nestbill 服务的运营者（“我们”）运营，并由我们决定本服务器上个人信息的使用方式。本政策适用于连接本服务器的巢记网站和 App。他人在自己服务器上运行的巢记副本由其自行运营，不属于我们。

2. 我们收集的信息

你提供的

账号资料：登录名、显示名称（昵称）和账本主币种。密码只以加盐哈希形式保存，绝不保存明文。
账本内容：账单（金额、币种、日期、类别、备注、谁先付、如何分摊）、付款与核对记录、筹款，以及汇率记录和你附上的截图。
照片：你上传的小票、账单照片和付款凭证。
你选择添加的收款方式：收款账号或说明，以及可选的收款二维码图片，方便 Nest 成员向你付款。

他人提供的

Nest 成员可以录入与你有关的信息，例如账单上的你的名字、你应付的份额，或把你登记为没有账号的临时成员。

自动收集的

登录 Cookie：让你保持登录最多 12 小时，属于必要 Cookie。我们不使用广告或统计 Cookie。
浏览器存储：保存你的语言和外观偏好，只留在你的设备上。
服务器日志：用于运行和保护服务，包括 IP 地址、访问页面、时间、响应状态和浏览器类型。邀请码放在浏览器不会发送给服务器的链接部分。
账号事件：例如注册、修改密码、退出其他设备、已使用的拍小票次数，以及你对本文件的同意记录。

我们不收集你的精确位置、通讯录或广告标识符，巢记不含任何第三方统计或广告代码。只有你选择拍照或选图时，才会使用相机和相册。

3. 我们如何使用

提供巢记：保存账本、计算余额，并向共享 Nest 的成员展示该 Nest 的记录。
在你要求时识别小票。
保障服务安全：身份验证、会话限制、频率限制和防止滥用。
排查问题、备份和恢复数据。
告知你重要变更，以及遵守法律。

我们不会将你的信息用于广告，不会为你建立画像，也不会作出对你产生法律或类似重大影响的自动化决定。我们不会用你的内容训练 AI 模型。

4. 谁能看到，以及我们与谁共享

你的 Nest 成员。共享 Nest 的已登录成员可以看到该 Nest 的账单、附带的照片和凭证，以及成员的收款方式。个人账本只有你能看到。
托管服务商。服务器及其备份运行在位于本服务器所在地区的云托管服务商上，由其代我们存储数据。
AI 服务商，仅在你识别时。小票照片和账本主币种会发送给位于中华人民共和国的 DeepSeek，由其读出商品和金额后返回给我们。我们不会发送你的名字、账号资料或其他账单。DeepSeek 按其自己的条款和隐私政策处理请求。
Apple：如果你在 iOS App 中购买。付款由 Apple 处理，我们只收到 Apple 为确认购买而提供的信息。
法律与安全。在法律或有效法律程序要求时，或为保护用户及他人的权利、财产或安全，我们可能披露信息。
服务转让。如果巢记转交给新的运营者，你的信息可能按本政策随之转移，我们会告知你。

我们不出售个人信息，也不为跨情境行为广告共享个人信息。过去 12 个月内也没有这样做过。

如果你把巢记的整理指令复制到你自己的 AI 服务中，你提供给该服务的内容受其自身政策约束。

5. 保存期限

账号和账本数据在你的账号有效期间保存；共享 Nest 的数据在该 Nest 存在期间保存，因为其他成员依赖这些记录。
你在 App 内（我的 → 账号安全）注销账号后，我们会立即删除你的登录、个人账本、收款方式和只剩你一人的 Nest；如你向我们申请，我们会在 30 天内完成同样的删除。共享 Nest 中你参与的账单会为其他成员保留，其中你的名字替换为中性标识。仍含有你数据的滚动备份会在 30 天内过期。
备份为滚动备份，短期后即被覆盖（官方服务器约 8 天）。服务器日志会轮换，只保留有限时间。

6. 安全

连接使用 HTTPS 加密，密码经过哈希处理，每个账号最多保留 5 个有效会话，备份仅服务器所有者可读。巢记不是端到端加密的：维护服务器的人在技术上能够访问数据库和备份，不应把账号权限理解为维护者无法读取。没有系统是绝对安全的。如发生影响你信息的安全事件，我们会依法通知你。

7. 你的选择与权利

查阅与导出：可在账单页导出当前账本 CSV，或向我们索取更完整的副本。
更正：可在 App 中修改昵称和你自己的记录，或请我们更正共享记录。
删除：可在「我的 → 账号安全」自行注销账号，也可请我们删除。
拍小票：不点击识别，就不会发送任何照片。
登录安全：可在“我的 → 账号安全”退出其他设备或修改密码。

提出请求请联系我们，可通过邀请你的人联系，步骤见账号帮助。我们会通过你的登录名或 UID 以及你之前使用过的联系渠道核验身份，并在 45 天内答复。你可以委托授权代理人提出请求，我们可能要求其提供授权证明。你行使权利不会受到差别对待。如我们拒绝请求，你可以回复我们的决定要求重新考虑。

8. 美国各州居民须知

加利福尼亚州及其他有消费者隐私法的美国州的居民，有权知悉我们收集哪些个人信息及原因，并有权查阅、更正、删除这些信息，以及拒绝其被出售、为定向广告共享或用于画像。由于我们三者都不做，你无需选择退出，我们也会尊重全球隐私控制（GPC）信号。过去 12 个月内我们收集了：

类别	示例	披露对象
标识符	登录名、显示名称、账号 ID、IP 地址	托管服务商；Nest 成员（仅名称）
客户记录	你选择添加的收款账户信息	托管服务商；该 Nest 成员
商业信息	账单、份额、付款和小票	托管服务商；Nest 成员；AI 服务商（仅在你识别时的小票照片）
网络活动信息	服务器日志和账号事件	托管服务商
视觉信息	小票照片、付款凭证、二维码图片	托管服务商；Nest 成员；AI 服务商（在你识别时）
敏感个人信息	登录名及密码；你添加的金融账户号码	托管服务商；该 Nest 成员（仅收款信息）

来源：你本人、你所在 Nest 的其他成员以及你的设备。目的：见第 3 节。我们仅为提供服务而使用敏感个人信息，不会用其推断你的特征。保存期限：见第 5 节。

9. 儿童

巢记不面向 13 周岁以下儿童，我们不会在知情的情况下收集其个人信息。如你认为有 13 周岁以下儿童向我们提供了信息，请联系我们，我们会将其删除。

10. 跨境处理

我们的服务器位于本服务器所在地区，你识别的小票照片在中华人民共和国处理。这些地方的数据保护法律可能与你所在地不同。无论你的信息在哪里处理，我们都按本政策对待。

11. 政策变更

任何更新都会在此发布并标明新的生效日期。如变更属于重大变更，我们会请你在 App 中查看并同意后再继续使用。

12. 联系我们

本 Nestbill 服务的运营者 · 可通过邀请你的人联系，参见账号帮助。