Privacy Policy

Nestled

Last updated: March 23, 2026

Nestled (“we,” “our,” or “the app”) is a home inventory organizer that helps you catalog and find your belongings using NFC tags. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Account Information

When you create a Nestled account, we collect:

• Name — used to personalize your experience (e.g., greeting you on the dashboard)
• Email address — used for authentication and account recovery
• Password — securely hashed and managed by Firebase Authentication; we never store or see your plaintext password

Inventory Data

When you use the app, you create and manage:

• Rooms — names and ordering
• Boxes — labels, locations, tags, and associated NFC tag IDs
• Items — names, descriptions, quantities, tags, and timestamps
• Subcategories — labels and ordering within boxes

Images

Photos you take or select from your gallery are stored locally on your device only. They are never uploaded to our servers or any cloud service. Firestore stores only the local filename references, not the images themselves.

NFC Tag Data

When you scan or write an NFC tag, the app reads or writes a short identifier that links the physical tag to a box in your inventory. No personal information is stored on the NFC tag itself — only a reference ID.

2. How We Use Your Data

We use your data solely to provide the Nestled app experience:

• Authenticate your account and keep it secure
• Store and display your inventory across sessions
• Enable sharing of spaces with other users you invite
• Personalize the app (e.g., displaying your name on the dashboard)

We do not use your data for advertising, profiling, or marketing purposes.

3. Data Storage and Security

• All account and inventory data is stored in Google Firebase (Firestore and Authentication), hosted in the United States
• Data is encrypted in transit (TLS) and at rest by Google’s infrastructure
• Access to your data is controlled by Firebase security rules — you can only access spaces you own or have been invited to
• Images remain on your device and are not transmitted to any server

For more on Firebase’s security practices, see Google Cloud’s security page (https://cloud.google.com/security).

4. Spaces and Data Sharing

Nestled allows you to share a “space” (a collection of rooms, boxes, and items) with other users:

• You generate a share code that others can use to join your space
• Members who join have read and write access to all rooms, boxes, and items within that space
• As the space owner, you can remove members at any time
• Members can leave a shared space at any time
• Only the data within the shared space is visible to members — your account information (beyond your name) is not shared

You are in full control of who has access. No data is shared with third parties or other users unless you explicitly invite them via a share code.

5. Permissions

Nestled requests the following device permissions:

• NFC — to scan and write NFC tags on storage boxes
• Camera — to take photos of items or boxes (only when you choose to)
• Photo Library — to select existing photos from your gallery (only when you choose to)

All permissions are requested at the time of use and can be revoked through your device settings at any time.

6. Analytics and Crash Reporting

Nestled uses Firebase Analytics and Firebase Crashlytics to help us understand how the app is used and to identify and fix crashes. These services collect:

Crashlytics

Crash logs, stack traces, device model, operating system version, and app state at the time of a crash. This data is used solely to diagnose and fix bugs.

Analytics

Anonymous usage data such as screen views, session duration, and general device information (model, OS, country/region). An anonymous app instance ID is assigned — this is not linked to your personal identity.

This data is processed by Google Firebase and is not used for advertising or sold to third parties. No advertising identifiers are collected.

7. Third-Party Services

The only third-party service Nestled uses is Google Firebase, for:

• Firebase Authentication — account creation and login
• Cloud Firestore — inventory data storage
• Firebase Crashlytics — crash reporting and diagnostics
• Firebase Analytics — anonymous usage analytics

No data is shared with any other third-party service.

8. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated data (user profile, spaces you own, and all inventory data within those spaces) will be permanently removed.

9. Your Rights

You have the right to:

• Access — your data at any time through the app
• Edit or delete — any inventory data (rooms, boxes, items) through the app
• Delete your account — and all associated data by contacting us
• Revoke sharing — by removing members from your spaces
• Revoke permissions — (camera, NFC) through your device settings at any time

To request full account deletion, contact us at the email address below.

10. Children’s Privacy

Nestled is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or via email. The “Last updated” date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: hello@nestled.info