Privacy policy

Last updated 3 October 2026

Nightfolio is operated by Easy Startup (“we”). It is built to know as little about you as possible.

What we do not collect

• No name, email address or phone number — there is no sign-up form.
• No seed phrases or private keys — the app never asks for them.
• No advertising, no analytics or tracking SDKs, and we never sell data. The only thing ever shared with other users is described under “Exchange addresses” below, and you can turn it off.

What we store

• Your account: a random account ID. Your recovery code is never stored — only a keyed hash of it, which cannot be turned back into the code.
• Your devices: for each phone signed in, a hash of its sign-in token, its platform (iOS or Android), and when it was created and last used.
• Your portfolio: the public wallet addresses and public keys you add, the balances and transaction history read for them from public blockchains, coins and orders you enter by hand, your watchlist, and the portfolio’s value history.
• Names you give addresses (“Mum”, “my Ledger”, “Binance”): private to your account, shown only to your own devices.
• Phones you link or share with: each linked or shared phone is a device of your account, with what it may see (which portfolios) and do (view or edit). You can remove any of them in Settings.
• Price alerts and notifications: the alerts you set (coin, price or change, how often), and for each phone that allows notifications its push token from Expo/Apple/Google, so we can send them. Notifications contain prices only — never your balances, values or addresses. Turning notifications off on the phone, or signing it out, removes its token.
• Screenshot imports: when you import orders, trades or balances from a screenshot, the image never leaves your phone — the phone reads the text itself, and leaves out any part you blurred. Only that text is sent to us, where it is read by our own software and our own language model running on our own server; the text is deleted as soon as it has been read, and the extracted rows are kept for 48 hours so you can review them. Only the rows you choose to import are saved, as orders or holdings in your portfolio.
• Exchange rates: to show values in your currency we fetch the European Central Bank’s published rates; no data about you is sent to get them.
• Device check (App Attest): when your iPhone supports it, the app proves to us that it is the genuine Nightfolio app on a real device. We keep, for that phone, a public key Apple vouches for, a counter, and whether its last check passed. It identifies the app installation, not you, and lets us ignore data sent by scripts or modified apps.
• Prices your phone reads: for coins you hold that only CoinGecko prices, your phone may send us the price it just read there. We keep the coin, the price, the time and a one-way code of your account (so we can count how many different accounts agree), and delete them within a day. Only accounts at least a week old that hold the coin in a tracked wallet can send prices. A price is only ever shown to anyone after at least five different accounts, each using a verified copy of the app, agree and it matches the market’s recent range; it is shown as provisional until the market confirms it, and it is never used for your value history or alerts.
• PIN-protected recovery QR codes: if you make one, we keep a random secret and a check value for your PIN, so we can limit how often a PIN is tried. Neither reveals your recovery code.

Wallet addresses are public by nature, but together they reveal what you hold. We treat them as confidential: they are shown only to devices signed in to your account, and accessed by us only to run the service.

Exchange addresses (shared, anonymous, optional)

When you mark an address as belonging to an exchange (for example “this is Binance”), we record that answer — the address and the exchange, nothing else — so that once at least five established users (accounts at least a week old, whose own wallets actually transacted with that address) independently agree, everyone sees that address named. The answer is stored under a one-way code derived from your account with a secret key, not under your account ID; your other names, your addresses and your holdings are never part of it. Turn it off in Settings → Privacy → Share exchange answers; doing so, or deleting your account, removes the answers you gave.

To suggest which of your counterparties might be exchanges, we also read a few of those counterparties’ own public transaction histories from the same public sources we use for balances.

Services that process data for us

• Cloudflare carries all traffic to our servers and sees your IP address in doing so. Our servers use it only briefly, in memory, to limit abuse (for example, failed recovery attempts) and do not store it.
• Your phone fetching your own wallets: to keep balances fresh, the app can read your own wallets directly from the same public explorers when you open it, and send us what they answered; we read it exactly as if our server had fetched it. Those explorers then see your phone’s IP address together with your addresses, instead of our server’s. Your phone only ever fetches your own wallets, never anyone else’s, and only from a fixed list of explorers built into the app. You can turn this off in Settings › Privacy (“Fetch from this phone”); our server then does all the fetching, as before.
• Public blockchain data: to read balances we query public sources with the addresses you add — our own Cardano node, and public explorers for Bitcoin (mempool.space, blockstream.info), Ethereum and Polygon, Tron (TronGrid) and Ergo. They see the address, not who you are.
• Prices come from exchanges and market-data providers; no data about you is sent to get them.
• Push notifications are delivered through Expo’s push service and Apple’s or Google’s, which see the phone’s push token and the notification text (a price, never a balance).

Where

Our servers are in Germany (Hetzner, Falkenstein). Data is processed under the EU General Data Protection Regulation.

Deleting your data

In the app, Settings → Delete my portfolio deletes your account and everything in it — addresses, balances, history and devices — immediately from our live database. Copies in server backups, if any, are gone within 30 days.

Your rights

You can access, export or delete your data, and object to its processing. Because we hold nothing that identifies you, you prove ownership with the app itself or your recovery code. Contact [email protected]; you may also complain to a data-protection authority.

Children

Nightfolio is not directed at children under 16.

Changes

We will update this page and its date if this policy changes.