Privacy Policy

Effective date: January 1, 2026
Last updated date: January 6, 2026

Nifty Machines (“Nifty Machines”, “we”, “us”) builds and operates the following applications and services (collectively, the “Services”):

  • Health Export (iOS app)
  • HeyShifu (web app)
  • Cropperoo (web app)

This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Who we are

Controller / operator: Nifty Machines
Contact: contactniftymachines@gmail.com
Website: niftymachines.net

2. What we collect

We aim to collect the least data possible.

A) Information you provide

Depending on the Service, you may provide:

  • Support communications: messages you send us, including attachments and the email address you use to contact us.
  • Feedback: optional feature requests, bug reports, or survey responses.
  • Optional inputs inside the Services:
    • HeyShifu: information you enter to generate name suggestions (e.g., preferences, optional names/keywords you type).
    • Cropperoo: files you choose to upload/open for cropping.
    • Health Export: you choose what data/files to export or share.

B) Information collected automatically

When you use our Services, we may collect limited technical data such as:

  • Device and browser information (e.g., device type, OS version, browser type)
  • Usage data (e.g., pages viewed, feature usage, crash logs)

We do not try to identify you personally from this data unless necessary for security or support.

C) Files and content you process

Our Services may process files or content that you upload or generate:

  • Cropperoo: may process PDFs/images you upload for cropping.
  • HeyShifu: may process text you enter to produce results.
  • Health Export: may process health-related exports you choose to generate.

We treat this content as sensitive and handle it with extra care.

3. How we use your information

We use information to:

  • Provide and operate the Services
  • Process your requests and respond to support inquiries
  • Improve features, reliability, and performance
  • Monitor and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Health and sensitive data

Some users may use Health Export with information that could be considered sensitive or health-related.

  • We do not sell health data.
  • We do not use your health data for advertising.
  • We only process what you choose to export/share and what is needed for the app to function.

5. Cookies and similar technologies

Our web apps such as HeyShifu and Cropperoo may use cookies or similar technologies for:

  • Essential functionality (e.g., keeping preferences or session state)
  • Security and abuse prevention
  • Basic analytics (if enabled)

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

6. Analytics

We may use privacy-respecting analytics to understand how the Services are used (for example, which pages are popular or which features are slow). Analytics data is used to improve the Services, not to identify you.

If we use third-party analytics tools, we configure them to minimize data collection where possible.

7. Advertising

We do not sell your personal data.
We do not use your content (files, text inputs, exports) for targeted advertising.

8. Sharing your information

We share information only when necessary:

A) Service providers

We may use vendors that help us run the Services (e.g., hosting, storage, email support, error monitoring). They process data on our behalf and are required to protect it.

B) Legal and safety

We may disclose information if required to comply with law, regulation, legal process, or to protect the rights, safety, and security of users and the Services.

C) Business changes

If Nifty Machines is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if required by law.

9. Data retention

We retain information only as long as necessary for the purposes described above.

  • Support emails/tickets: retained as needed to resolve issues and maintain records, then deleted or anonymized when no longer required.
  • Uploaded/processed files (web apps): retained only as needed to provide the Service. (Some workflows may process files transiently; if storage is required, it will be limited and protected.)
  • Logs and analytics: typically retained for a limited period for diagnostics and product improvement.

10. Security

We use reasonable administrative, technical, and organizational measures to protect your information. However, no method of transmission or storage is 100% secure.

11. Your choices and rights

Depending on your location, you may have rights to:

  • Access, correct, or delete your personal information
  • Object to or restrict certain processing
  • Withdraw consent (where applicable)
  • Receive a copy of your information (data portability)

To make a request, contact us at contactniftymachines@gmail.com. We may ask you to verify your request for security reasons.

12. Children’s privacy

Our Services are not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.

13. International transfers

If you access our Services from outside the country where our servers/providers are located, your information may be transferred and processed internationally. We take steps to ensure appropriate safeguards.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date.

15. Contact us

If you have questions about this Privacy Policy or your data, contact:
contactniftymachines@gmail.com