Privacy Policy: Nestie

Nestie Privacy Policy

Effective date: September 10, 2026 Who we are: Formenos Group LLC ("Nestie," "we," "us") Contact: support@nestie-home.com

Nestie is a home-management app that helps you keep up with home maintenance, manage renovation projects, and keep your home's documents in one place. This policy explains what information we collect, how we use it, and the choices you have. We've written it in plain language on purpose.

The short version: we collect only what the app needs to work, we don't sell your data, and we don't use advertising trackers or analytics profiles. We use one diagnostic service to catch crashes and errors, and it is configured to never receive your identity. You can delete your account and all your data yourself, in the app, at any time.

1. Information we collect

Everything below is information you give us by using the app, plus the technical diagnostics described at the end of this section. We do not buy data about you, track you across other apps or websites, or collect your precise location.

Account information

Your email address and the way you sign in. You can sign in with a password (which is hashed by our authentication provider, Supabase Auth, and never stored by us in plain text), with Sign in with Apple, or with Sign in with Google. We use your email to identify your account and to send you the emails described in Section 3. Emailed magic links are now used only when you reset your password.

Face ID / Touch ID. If you turn on Face ID sign-in in the iOS app, biometric processing happens entirely on your device through Apple's Face ID system. We never receive, store, or have access to your biometric data — your device only tells the app whether the match succeeded.

Sign in with Apple token (iOS). If you sign in with Apple in the iOS app, we store an Apple refresh token on our server. It is encrypted, kept server-side only, and never exposed to you or to the app. We use it for a single purpose: to revoke your Apple sign-in when you delete your account, which Apple requires of every app that offers Sign in with Apple.

Home information

Details you enter about your home(s): state and ZIP code, home type, year built, square footage, and the features each home has (e.g., "has a fireplace," "has a sump pump"). You can manage more than one home under one account.
An optional photo of each home if you choose to upload one.

Maintenance activity

The maintenance tasks on your checklist and what you do with them (complete, snooze, skip, mute), including optional details you add when completing a task: what it cost, whether you did it yourself or hired a pro, and an optional photo.
Custom tasks you create.

Project information

Renovation projects you create: names, notes, budgets, checklists, and due dates.
Names and phone numbers of people you add to a project (contractors, helpers, family). You are responsible for having their permission to store their contact details.
Files you upload to a project: photos, receipts, and documents. Receipts and documents may contain financial or personal information — we store them for you but never read, analyze, or share them.

Concierge service requests

When you ask us to help find a pro through the Concierge, we collect the details you provide about your request: what you need done, the rooms or areas involved, your budget range, your timing, and whether it's urgent.
Your contact details for that request: your email address and the phone number you enter. This is the only place the app collects your own phone number (elsewhere, phone numbers belong to project people you add).
See Section 4 for how these details are shared with the professional we match you to.

Push notifications

If you turn on notifications, we store a device push token so Apple can deliver them. The token identifies your device to Apple's push service; it is not your personal information and we delete it when you sign out or delete your account.

Diagnostics (crash and error reports)

We use Sentry, a third-party error-monitoring service, to tell us when the app crashes or hits an error so we can fix it. These reports contain technical information about what went wrong (the error, app version, device/OS type). They are deliberately configured to exclude your identity — no account ID, no email, and none of your content. Like any internet service that receives a request, Sentry's servers inherently see your device's IP address when a report is sent; we don't use it to identify you and it isn't linked to your account.

What we deliberately do NOT collect

No precise location (only the state/ZIP you type in).
No contacts access — you type in names and numbers yourself.
No advertising identifiers, no analytics or tracking SDKs, no behavioral profiles.
No payment card details — subscriptions are billed by Apple (in the iOS app) or processed directly by Stripe (on the web); see Section 6 of the Terms of Service. Card numbers go straight to Apple or Stripe and are never sent to or stored by us.

2. How we use your information

We use your information for exactly one purpose: to run Nestie for you.

Your email and sign-in method — to sign you in and send you the app's emails.
Your home details — to build a maintenance checklist personalized to each home's region, age, and features.
Your home's ZIP code — also to check weather conditions for your area, described in Section 4a.
Your activity (completions, costs, photos) — to keep your history and schedule the next occurrence of each task.
Your projects, people, and files — to show them back to you.
Your Concierge request and contact details — to understand what you need and to connect you with the right professional (see Section 4).
Crash and error reports — to find and fix bugs.

We do not use your information for advertising, we do not sell it or rent it, and we do not share it with data brokers. We may use aggregated, de-identified information (e.g., "X% of users have a sump pump") to improve the product; this never identifies you.

3. Emails and notifications we send

Password-reset links — sent when you request a password reset.
Maintenance reminders and product emails — notices about tasks coming due and important service announcements.
Push notifications — daily maintenance reminders, weekly digests, and weather-preparation alerts, if you enable them. Controlled entirely by you in iOS Settings.

4. Who we share information with (service providers)

We don't sell your data. We share it only with the vendors who physically run the service, and only so they can do that job:

Provider	What they do for us	What they handle
Supabase (hosted on AWS, United States)	Our database, authentication, and file storage	All the data described in Section 1
Resend	Sends our emails	Your email address and email content
Vercel	Hosts the application	Processes requests as you use the app
Apple	Delivers push notifications (if you enable them)	A device push token, not your personal data
Sentry	Crash and error monitoring	Technical error reports — configured to exclude your identity (see Section 1, Diagnostics)
Stripe	Processes subscription payments made on our website	Your email address and payment details, which you provide directly to Stripe on its secure checkout page — we never receive your card number
RevenueCat	Keeps track of whether your subscription is active, across Apple and web billing	Your account identifier and subscription status/transaction history — no card details, no app content

Each provider is bound to use your data only to provide their service to us.

4a. Weather data. To power weather-preparation alerts, we send the approximate center-point coordinates of your home's ZIP code — not your address, and no account information — to the U.S. National Weather Service, a government API, to look up conditions for your area. Nothing that identifies you leaves our systems for this feature.

4b. Sharing your Concierge request with a matched professional. This is different from the service providers above, and we call it out plainly: when you submit a Concierge request, you are asking us to connect you with a professional (for example, a contractor, interior designer, handyman, or realtor). To do that, we share the details of your request and your contact information (your email and phone number) with the professional we match you to, so they can follow up with you directly. These professionals are independent third parties, not Nestie; once we introduce you, how they use your contact information is governed by their own practices. We share your details only for requests you choose to submit — we never share your contact information with pros otherwise.

If Nestie is ever acquired or merges with another company, your information may transfer as part of that transaction; we would notify you before your data becomes subject to a different privacy policy.

We may disclose information if required by law (e.g., a valid subpoena), or to protect the rights, safety, or security of Nestie or others.

5. How your data is protected

All data is encrypted in transit (HTTPS) and encrypted at rest by our hosting providers.
Your photos, receipts, and documents live in private storage — they are never publicly accessible, and access requires a short-lived signed link generated only for you.
Our database enforces row-level security: the database itself is configured so a signed-in user can only read or write their own records.
If you set a password, it is hashed by our authentication provider (Supabase Auth) and never stored in plain text; you can also sign in with Apple or Google instead of using a password.

No system is perfectly secure, and we can't guarantee absolute security — but we designed the app so that the sensitive parts (your photos and documents) are private by default.

6. How long we keep your data

We keep your data as long as you have an account. When you delete your account (Section 7), your data is deleted immediately — we do not run a retention period on deleted accounts. Residual copies may persist briefly in encrypted backups maintained by our hosting provider before those backups age out.

7. Your choices and rights

Access and correction: everything the app stores about you is visible and editable in the app itself — your home profiles, tasks, projects, people, and files.
Deletion: you can delete your account yourself, in the app (Settings → Danger zone). This permanently deletes your account, homes, tasks, history, projects, people, uploaded photos, receipts, and documents. It cannot be undone. If you used Sign in with Apple, deleting your account also revokes Nestie's Apple sign-in grant and removes the stored Apple refresh token.

What we keep after you delete your account. We retain a minimal record of your legal acceptances (your email address, which document and version you accepted, and when) and of your deletion request (your email address and the request date) after your account is deleted. We keep these records only as necessary to comply with legal obligations and to establish or defend legal claims, and we never use them for any other purpose.

Email: to stop receiving non-essential reminder and product email, contact us and we will remove you; login-link emails are inherent to using the service.
Push notifications: controlled entirely by you in iOS Settings.
Questions or requests we haven't covered: email support@nestie-home.com.

Your privacy choices — same rights for everyone. We honor access, correction, and deletion for every user, in every state, as a product decision — not because a particular statute requires it. We do not sell personal information, we do not "share" it for cross-context behavioral advertising, and there is no advertising profile to opt out of. If a state privacy law (like the California Consumer Privacy Act) gives you specific rights, our answer is the same one we give everyone: your data is yours to see, fix, and delete, in the app or by emailing support@nestie-home.com.

8. Where your data lives

Nestie is a United States service for US users. Your data is stored in the United States. Nestie is not offered in the European Union, and we do not target EU residents.

9. Children

Nestie is for homeowners and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has created an account or given us personal information, email support@nestie-home.com and we will delete the account and its information.

10. Changes to this policy

If we change our data practices, we'll update this policy, change the effective date, and — for material changes — notify you in the app or by email before the change takes effect.