Legal

Privacy Policy

Last updated: October 1, 2026

The TL;DR

NestSafe is designed so that we cannot see your data. All documents, passwords, and notes are encrypted on your device with AES-256 before they touch storage. We never see plaintext.

What data we collect

  • Waitlist email: if you sign up for our launch waitlist, we store the email you enter. Nothing else.
  • Crash reports: when the app crashes, a stack trace is sent to Firebase Crashlytics to help us fix bugs. Never includes your vault contents.

What data we DO NOT collect

  • Your documents, passwords, or notes
  • Your biometric data (that lives in your device keystore)
  • Your PIN (stored as a salted hash, never plaintext)
  • Your contacts, location, or photo library outside of images you explicitly pick
  • Any third-party advertising or tracking SDKs

Where your data lives

Entirely on your device. Your vault never leaves it: NestSafe has no cloud backup today.

Who processes data for us

We use these service providers (processors). They process data only on our behalf, for the purposes below.

  • Google Firebase Firestore (Google): stores waitlist email addresses from the app and from this website.
  • Google Firebase Crashlytics (Google): receives crash reports from the app (stack trace, device model, OS version, an installation ID). Never vault contents.
  • nCloud (Napradha): hosts this website. Like any web server it receives your IP address and the page you request in order to deliver it.

This website

nestsafe.app uses no analytics, no advertising or tracking tools, and no cookies. Fonts are served from our own server, so loading a page does not contact third parties. The only thing the site sends to a processor is the email address you type into the waitlist form, when you submit it.

Your rights

  • Access / portability: export your entire vault from Settings → Backup & Export.
  • Deletion: uninstalling the app deletes all data on the device. To delete your waitlist email or crash reports, see Delete your data.
  • Contact: privacy@nestsafe.app

India DPDP Act 2023

For users in India, we comply with the Digital Personal Data Protection Act, 2023. NestSafe acts as a Data Fiduciary only for the waitlist email address — everything else is processed on your device where we have no access.

GDPR (EU / UK)

For users in the EU and UK, we are compliant with GDPR Articles 13–22. You have the right to access, rectify, erase, and port your data. Contact privacy@nestsafe.app to exercise these rights.

Changes

We may update this policy. The top of this page will show the new "Last updated" date. Material changes will be surfaced in the app with a re-consent prompt.

Questions? Contact support.