Effective date: January 1, 2026
Last updated date: January 6, 2026
Nifty Machines (“Nifty Machines”, “we”, “us”) builds and operates the following applications and services (collectively, the “Services”):
- Health Export (iOS app)
- HeyShifu (web app)
- Cropperoo (web app)
This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Who we are
Controller / operator: Nifty Machines
Contact: contactniftymachines@gmail.com
Website: niftymachines.net
2. What we collect
We aim to collect the least data possible.
A) Information you provide
Depending on the Service, you may provide:
- Support communications: messages you send us, including attachments and the email address you use to contact us.
- Feedback: optional feature requests, bug reports, or survey responses.
- Optional inputs inside the Services:
- HeyShifu: information you enter to generate name suggestions (e.g., preferences, optional names/keywords you type).
- Cropperoo: files you choose to upload/open for cropping.
- Health Export: you choose what data/files to export or share.
B) Information collected automatically
When you use our Services, we may collect limited technical data such as:
- Device and browser information (e.g., device type, OS version, browser type)
- Usage data (e.g., pages viewed, feature usage, crash logs)
We do not try to identify you personally from this data unless necessary for security or support.
C) Files and content you process
Our Services may process files or content that you upload or generate:
- Cropperoo: may process PDFs/images you upload for cropping.
- HeyShifu: may process text you enter to produce results.
- Health Export: may process health-related exports you choose to generate.
We treat this content as sensitive and handle it with extra care.
3. How we use your information
We use information to:
- Provide and operate the Services
- Process your requests and respond to support inquiries
- Improve features, reliability, and performance
- Monitor and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. Health and sensitive data
Some users may use Health Export with information that could be considered sensitive or health-related.
- We do not sell health data.
- We do not use your health data for advertising.
- We only process what you choose to export/share and what is needed for the app to function.
5. Cookies and similar technologies
Our web apps such as HeyShifu and Cropperoo may use cookies or similar technologies for:
- Essential functionality (e.g., keeping preferences or session state)
- Security and abuse prevention
- Basic analytics (if enabled)
You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.
6. Analytics
We may use privacy-respecting analytics to understand how the Services are used (for example, which pages are popular or which features are slow). Analytics data is used to improve the Services, not to identify you.
If we use third-party analytics tools, we configure them to minimize data collection where possible.
7. Advertising
We do not sell your personal data.
We do not use your content (files, text inputs, exports) for targeted advertising.
8. Sharing your information
We share information only when necessary:
A) Service providers
We may use vendors that help us run the Services (e.g., hosting, storage, email support, error monitoring). They process data on our behalf and are required to protect it.
B) Legal and safety
We may disclose information if required to comply with law, regulation, legal process, or to protect the rights, safety, and security of users and the Services.
C) Business changes
If Nifty Machines is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if required by law.
9. Data retention
We retain information only as long as necessary for the purposes described above.
- Support emails/tickets: retained as needed to resolve issues and maintain records, then deleted or anonymized when no longer required.
- Uploaded/processed files (web apps): retained only as needed to provide the Service. (Some workflows may process files transiently; if storage is required, it will be limited and protected.)
- Logs and analytics: typically retained for a limited period for diagnostics and product improvement.
10. Security
We use reasonable administrative, technical, and organizational measures to protect your information. However, no method of transmission or storage is 100% secure.
11. Your choices and rights
Depending on your location, you may have rights to:
- Access, correct, or delete your personal information
- Object to or restrict certain processing
- Withdraw consent (where applicable)
- Receive a copy of your information (data portability)
To make a request, contact us at contactniftymachines@gmail.com. We may ask you to verify your request for security reasons.
12. Children’s privacy
Our Services are not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.
13. International transfers
If you access our Services from outside the country where our servers/providers are located, your information may be transferred and processed internationally. We take steps to ensure appropriate safeguards.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date.
15. Contact us
If you have questions about this Privacy Policy or your data, contact:
contactniftymachines@gmail.com