Last updated: 27 August 2026
nest-egg is a personal budgeting tool run by a single individual for their own use. It is not a commercial service, has no other users, and no account can be created on it.
The operator of this installation is both the sole controller and the sole data subject. Contact for any data protection question is the email supplied when registering the application with Enable Banking.
Only what is needed to categorise spending and compare it against a budget:
- Bank account identifiers, names and currency
- Transaction date, amount, currency and counterparty description
- Categories, budgets and corrections created by the operator
No credentials for any bank are processed or stored at any point. Authentication happens on the bank's own website or app, and this application never sees a banking username, password or one-time code.
In a single SQLite database file on the operator's own computer. It is not hosted, not synchronised to any server, and not backed up to any third party. The application binds to the local loopback interface only and is not reachable from any network.
Nobody.
There is no analytics, no telemetry, no advertising, no profiling and no automated decision-making with legal or similarly significant effects. Transaction data is never transmitted to any third party, and categorisation runs entirely on the operator's own machine — no external service is sent any transaction.
The only outbound connections are to the account information provider (Enable Banking) in order to retrieve the operator's own account data, and to Google Fonts to load two typefaces for the interface.
Processing is carried out by an individual in the course of a purely personal activity, which falls outside the scope of the GDPR under Article 2(2)(c). The policy is published because the account information provider requires one.
Data is kept until the operator deletes it. Deleting the database file removes everything. Access to the bank account expires automatically after 90 days unless renewed.
As the sole data subject is also the operator, rights of access, rectification, erasure and portability are exercised directly against the local database.
Consent to access bank account data can be withdrawn at any time — from within this application by disconnecting the account, or from the bank's own app, which revokes it at source.
This document describes a personal, single-user installation and is not legal advice. If nest-egg is ever operated for anyone other than its author, this policy is insufficient and must be replaced.