NestCalc.ai LLC (“Munduro,” “we,” “us,” or “our”) is a Wyoming limited liability company. This Privacy Policy explains what information the Munduro website at munduro.com and the Munduro apps for iPhone, iPad and Android (together, the “Service”) handle, where it goes, and how you control it. By using the Service, you consent to the practices described in this policy.
In short: your plan stays on your device, and we never sell or share your answers. Munduro has no accounts and no ads, and nothing you enter is sent to us beyond the first question’s pick, anonymously, in the phone apps’ analytics. The website uses no analytics. The phone apps send app-usage events and crash reports to Google Firebase, never with your name, email address or any id we assign (Section 1 lists exactly what they carry). If you buy the Lifetime unlock on the web, Stripe takes the payment on its own checkout page, as merchant of record; in the phone apps, the App Store or Google Play takes it.
1. Information We Collect
No Account
Munduro works without an account. To plan, we do not ask for your name, email address, phone number or password, and there is no sign-in.
Your Answers and Your Plan
The answers you give — such as where you live, who is going, where you would like to retire, your lifestyle picks, the challenges you pick, your age, your savings, how much you save and your income — and the plan settings you change are stored only in your browser’s local storage, on your device. Every calculation runs in your browser. None of it is sent to us or to anyone else, and we cannot see it.
Exchange Rates
To price costs abroad, your browser asks Frankfurter (api.frankfurter.dev) for the European Central Bank’s daily reference rates. Frankfurter receives your IP address and the request itself, which names the same currencies for every visitor; none of your answers are sent. For the 9 currencies the European Central Bank does not publish, your browser asks munduro.com for our once-a-day ExchangeRate-API snapshot: our server fetches it from ExchangeRate-API once a day with our own key, so ExchangeRate-API receives nothing from you.
Usage Data
Our hosting provider, Netlify, receives your IP address and the details of each request when your browser loads a page or file from munduro.com or calls one of the Service’s own functions (the exchange-rate snapshot, the checkout, unlocking or restoring a purchase) — such as the address requested, your browser type and the time — and keeps standard server logs. These logs are used only to run the Service and to diagnose problems.
No Analytics, Ads or Tracking on the Website
The website uses no analytics, no crash reporting, no ads and no tracking of any kind, and it sets no cookies of its own. Stripe’s checkout page, which you reach only when you choose to buy, is Stripe’s own and follows Stripe’s privacy policy.
Emails You Send Us
If you email us at support@nestcalc.ai, we receive your email address and whatever your message contains, and we use them only to answer you.
Payment Information
If you buy the Lifetime unlock on the web, Stripe sells it as merchant of record, through Stripe Managed Payments. You enter your email address and payment details directly on Stripe’s own checkout page; we never receive your card number. Our server then asks Stripe only what it needs to unlock Munduro for you — the checkout’s reference, whether it was paid or refunded, and when — and gives your browser a signed Lifetime key that it keeps in local storage. Stripe also sends us notices of completed payments and refunds, which we keep without your name, email address or the amount.
Restoring a Purchase
If you use Restore purchase in another browser, the email address and the last 4 digits of the card you type are sent to our server. It asks Stripe for the Lifetime purchases made with that email address and unlocks one only if it was paid with a card ending in those 4 digits. If they do not match, the answer is the same as when there is no purchase at all, so Restore purchase never reveals whether an email address bought. We do not store either.
In the Phone Apps
The Munduro apps for iPhone, iPad and Android work like the website, with the differences below. Your answers, your plan, when your free trial started, the most recent exchange rates and your language and theme choices are stored only in the app’s own storage on your phone, and every calculation runs on your phone; none of it is sent to us, except the group you pick in the first question, in one anonymous analytics event (below). The apps fetch exchange rates from Frankfurter and from munduro.com, as the website does.
App Analytics and Crash Reports (Phone Apps Only)
The phone apps use Google Firebase Analytics to count how the app is used, with these events and no others of ours: a step of the questions was shown (onboarding_step_viewed) or picked up again (onboarding_resumed), with that step; the questions were finished (onboarding_completed), with the group picked in the first question (retiring early, planning ahead or ready to go); the offer was shown (offer_viewed); the free trial started (trial_started); the trial reminder was shown (nudge_shown); the Lifetime unlock was bought (purchase_completed) or restored (restore_completed); a country’s page was opened (country_opened), named only by its region; and the link to Certus FX was tapped (certusfx_handoff). A step, one of the three groups and a region are the only details our events carry: never your name, email address, money amounts, your other answers or any id we assign. Firebase also records its own standard events, such as the app’s first open, sessions and updates, and when a purchase goes through Google Play, or the App Store on iOS 15, it records the store’s purchase event on its own, with the item bought, its price and its currency. The apps do not collect your device’s advertising identifier. Firebase Crashlytics receives crash and diagnostic data when the app crashes or hits an error: what the app’s code was doing at that moment, your device model and operating system version, and an identifier Crashlytics creates for the installation. Google receives your IP address with each of these requests. We use them only to improve the apps and fix problems, never for advertising or tracking.
Purchases in the Phone Apps
In the phone apps, the Lifetime unlock is bought through Apple’s App Store or Google Play, which take the payment under their own terms and privacy policies; we never receive your payment details. RevenueCat processes these purchases for us: it receives an anonymous id the app creates on your phone and the purchase history the store reports for it (what was bought, when, and whether it was refunded), so the app can unlock and restore it. That id is not your name, your email address or your Apple or Google account.
Your Free Trial on Android
On Android, when you start the free trial, the day it started is recorded on Munduro’s server under that same anonymous id, so the 14-day trial runs only once. On iPhone and iPad, the trial is a free item in the App Store, which Apple records.
Backup on Android
Android may back up the app’s stored data, such as your answers and your plan, to your Google account, as it does for most apps, so they come back if you reinstall the app or move to a new phone. Google holds that backup under its own privacy policy, and you can turn backup off in your phone’s settings.
2. How We Use Your Information
We use the little information that reaches us to:
•
Provide, operate, and maintain the Service
•
Unlock, restore and refund the Lifetime unlock you bought
•
Answer your emails and support requests
•
Keep the Service secure and diagnose problems, using our host’s standard logs
•
Understand how the phone apps are used, and find and fix crashes, from the analytics events and crash reports described in Section 1
Your plan never reaches us. Of your answers, only the first question’s pick reaches us, anonymously, in the phone apps’ analytics.
3. Third-Party Services
We rely on the following third-party services to operate Munduro. Each service receives only the minimum data required to perform its function:
•
Netlify — Hosts munduro.com and delivers it through its global network, and runs the Service’s functions: the exchange-rate snapshot, the checkout, and unlocking and restoring a purchase. Receives your IP address and the details of each request as part of serving it, keeps standard server logs, and stores the payment and refund notices described above. See Netlify’s Privacy Policy.
•
Frankfurter / European Central Bank — Daily reference exchange rates. Your browser requests them directly from Frankfurter, so Frankfurter receives your IP address along with the currency codes requested. No other personal data is sent.
•
ExchangeRate-API — The rates for the 9 currencies the European Central Bank does not publish. Our server fetches them once a day with our own key; your browser makes no request to ExchangeRate-API, so it receives nothing from you.
•
Stripe — Sells the Lifetime unlock on the web as merchant of record, through Stripe Managed Payments: it processes the payment on its own checkout page, calculates and remits any tax, sends your receipt, and handles payment support, refunds it makes and disputes. Stripe receives what you enter on its page, under Stripe’s own privacy policy.
•
Google Firebase (phone apps only) — Firebase Analytics receives the app-usage events and Firebase Crashlytics the crash and diagnostic data described in Section 1, with your IP address, under Google’s privacy policy. Neither runs on the website.
•
Apple and Google (phone apps only) — The App Store and Google Play take the payment for the Lifetime unlock in the phone apps, under their own terms and privacy policies. On Android, Google may also keep a backup of the app’s data in your Google account.
•
RevenueCat (phone apps only) — Processes the purchases made in the phone apps: it receives the app’s anonymous id and the purchase history the store reports for it, under RevenueCat’s privacy policy.
Links to other websites, such as medicare.gov, certusfx.com, exchangerate-api.com or Stripe’s pages, open sites that have their own privacy policies.
4. Cookies & Local Storage
Munduro sets no cookies. It uses your browser’s local storage, on your device, to:
•
Keep your answers, where you are in the questions, and your plan settings, so they are there when you come back
•
Remember when your free trial started, and that its day-7 reminder was shown
•
Keep the most recent exchange rates, so the Service can show them with their age when a source can’t be reached
•
Keep your Lifetime key, if you bought the Lifetime unlock, so this browser stays unlocked
•
Remember your light or dark theme choice
The name of each item Munduro stores begins with “munduro.” You can remove them at any time; see Section 5 and our Delete your data page.
The phone apps keep the same items in the app’s own storage on your phone, where the operating system keeps them private to the app.
5. Data Retention
Your answers, your plan and your Lifetime key stay in your browser until you remove them. Start over, in Account, clears your answers and your plan; clearing this site’s data in your browser removes everything Munduro stored. Because your answers never leave your browser, we cannot recover them for you; a Lifetime purchase can be restored with Restore purchase.
We keep emails you send us for as long as we need them to answer you, and you can ask us to delete them. We keep Stripe’s payment and refund notices, which hold no name, email address or amount, for as long as we need them for refunds and our records. Stripe keeps your purchase under its own policies, and Netlify keeps its server logs under its own policies.
In the phone apps, your data stays on your phone until you use Start over or uninstall the app; on Android, a copy may also stay in your Google account’s backup until that backup is replaced or deleted. Google keeps the analytics events and crash reports, and RevenueCat keeps the purchase history, under their own retention policies.
6. Data Security
We implement reasonable technical and organizational safeguards to protect your data:
•
All data in transit is encrypted via HTTPS/TLS
•
Your plan is never transmitted to or stored on our servers
•
We hold no passwords and never receive payment card numbers
Anyone who uses your device and browser can see what is stored there. On a shared device, use Start over or clear this site’s data when you are done. No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
•
Access — Request a copy of the personal data we hold about you.
•
Correction — Request correction of inaccurate or incomplete data.
•
Deletion — Request deletion of your personal data, subject to legal retention requirements.
•
Portability — Request your data in a portable, machine-readable format.
•
Opt-Out of Sale — We do not sell your personal data. We do not share your data with third parties for their marketing purposes.
We hold very little personal data: your plan stays on your device, where you control it directly. For anything we do hold, such as emails you sent us, contact us at support@nestcalc.ai.
California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@nestcalc.ai.
European Residents (GDPR): If you are located in the European Economic Area, you have additional rights including the right to lodge a complaint with your local data protection authority. Our lawful basis for processing is contract performance (providing the Service) and legitimate interest (operating and securing the Service).
8. Children’s Privacy
Munduro is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@nestcalc.ai.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, show a notice in the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
•
Email: support@nestcalc.ai
•
Mailing Address: NestCalc.ai LLC, 30 N Gould St Ste R, Sheridan, WY 82801
•
Entity: NestCalc.ai LLC — a Wyoming limited liability company
Effective Date: October 21, 2026