Privacy Policy

NESTWELL PRIVACY POLICY

Last updated: 30 June 2026

1. Who We Are

Nestwell is a personal productivity app for planner, personal finances, secure vault, PDF tools, notes and diary, developed by Team Mio. Nestwell is built local-first: your content lives on your device and is never transmitted to us. This policy explains what data the app handles, how it is protected, and the rights you have including under the EU General Data Protection Regulation (GDPR) and the UK GDPR. For anything unclear, contact us using the details in section 12.

2. Data You Store in Nestwell

Nestwell stores only the content you create: notes and checklists; diary entries, including handwritten ink pages; tasks, habits and calendar entries; income, expense and savings records; reminders; items you place in the secure vault (such as credentials and attachments); PDF files you import and document pages you scan; and app preferences (theme, language, currency, lock settings). Nestwell has no user accounts and collects no personal profile, no advertising identifier, no usage analytics, and no tracking data of any kind.

3. How Your Data Is Used and Legal Basis

Your data is processed on your device solely to provide the app features you use. It is never sold, rented, or used for advertising or profiling. Where the GDPR applies, the legal basis for this processing is the performance of the service you request (Art. 6(1)(b) GDPR). Optional cloud backup operates only with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by disabling backup in Settings.

4. Data Storage and Security on Your Device

All data is stored locally in an on-device database and preference store. Secure vault contents are additionally encrypted with AES-256-GCM using a key derived from your vault passphrase via PBKDF2; the passphrase itself is never stored. The optional app lock protects access with a PIN or your device biometrics, biometric recognition is performed entirely by the operating system (Android BiometricPrompt / iOS Face ID and Touch ID), and Nestwell never sees, stores, or can access your biometric data.

5. Backups: Local File, Google Drive and iCloud

All backup options are optional and encrypted end-to-end. Before any backup leaves the app, your data is encrypted on your device with AES-256-GCM using a passphrase only you know. A local backup is saved as an encrypted file to a location you choose. On Android, the optional Google Drive backup uploads the encrypted file to the private app-data folder of your own Google account; on iOS, the optional iCloud backup stores it in your personal iCloud Drive. In every case only ciphertext leaves your device. We never have access to your passphrase or your decrypted content, and a lost passphrase cannot be recovered by anyone, including us. Because cloud backups are stored in your own Google Drive or iCloud account, they depend on you having enough available storage space in that account; if your cloud storage is full, a backup may fail or be incomplete. You can disable cloud backup and delete backup files at any time.

6. Third-Party Services

Nestwell contacts external services only when you use the related feature. Google Drive backup and Google sign-in are operated by Google and subject to Google's privacy policy; iCloud is operated by Apple and subject to Apple's privacy policy. Currency exchange rates for the wallet are fetched from the Open Exchange Rate API (open.er-api.com) via an anonymous request that contains no personal data. Document scanning on Android uses the Google ML Kit document scanner, which processes camera images on your device via Google Play services, scanned pages are not uploaded. Voice-to-text dictation uses the platform's speech recognition; on iOS this may send the recorded audio to Apple for processing, and on Android it is handled by the device's speech service. Reminder notifications are scheduled through the operating system. Nestwell is a paid app, and your purchase is processed by the Apple App Store or Google Play, we do not receive or store your payment details. Using Google or Apple services may involve processing in countries outside the EEA; both providers rely on recognized transfer safeguards such as the EU Standard Contractual Clauses.

7. Data Sharing

We do not share, sell, or transmit your data to anyone. Data only leaves the app when you explicitly initiate it yourself, for example sharing an exported PDF, saving a backup file, or uploading an encrypted backup to your own cloud storage.

8. Data Retention and Deletion

Your data remains on your device until you delete it in the app or uninstall the app. Uninstalling removes all locally stored data. Backup files you created remain in the location you stored them (your device storage, Google Drive app-data folder, or iCloud Drive) until you delete them there or via the app; they stay encrypted and unreadable without your passphrase.

9. Your Rights (GDPR / UK GDPR)

If you are in the European Economic Area, Switzerland or the United Kingdom, you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Because your data is stored only on your device, you can exercise these rights directly at any time: view and edit content in the app (access, rectification), delete content or uninstall the app (erasure), use the encrypted backup export to take your data with you (portability), and disable cloud backup to withdraw consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Children's Privacy

Nestwell is not directed at children under 13 (or the higher age your country requires for digital consent, up to 16 in some EEA member states). We do not knowingly collect personal information from children. If you believe a child has provided personal data, please contact us so we can advise on appropriate steps.

11. Changes to This Policy

We may update this privacy policy when the app gains new features or when legal requirements change. Updates ship with new versions of the app, and the date at the top of this policy shows the latest revision. Significant changes affecting optional cloud features will be presented for your renewed consent.

12. Contact

If you have questions or concerns about this policy or how Nestwell handles your data, please contact: keepmio24@gmail.com