Privacy Policy
1. About this policy
This policy explains what Piggybank Ventures LLC d/b/a Nestora ("Nestora", "we", "us") collects through the Nestora iPhone app (the "App"), why, how long we keep it, and how you control it. It applies to users in the United States.
2. What stays on your iPhone
Nestora processes your email, the documents you scan, and the reminders and events it finds, on your iPhone. None of this is sent to us, except what section 3 describes. This includes email subjects and bodies, attachments, document text and images, and your contacts' names and addresses.
Your email. Nestora reads Gmail with read-only access. Mail Nestora reads is kept in an encrypted database on your iPhone. Disconnecting an account stops Nestora reading it; deleting your Nestora account removes it, and Nestora's other data, from your iPhone. Events and reminders Nestora added stay in Calendar and Reminders until you delete them. You can remove Nestora's access in your Google Account settings at any time.
iCloud Mail. If you connect iCloud Mail, the app-specific password you create is kept in your iPhone's Keychain and sent only to Apple to read your mail.
Calendar and Reminders. Nestora adds events to your Calendar and reminders to your Reminders list on your iPhone.
Your personal rules. Your personal rules are the sorting filters you approve, such as "hide promotions from this sender". They're saved to your own iCloud so they survive a reinstall. Nestora can't read them, and they're used only to sort your email on your iPhone.
3. What we receive
Your account. Your name, email address and an account ID, from Sign in with Apple or Google, and which version of these documents you agreed to, and when.
Two settings. "Share usage data" and "Help improve Nestora" are on unless you turn them off. You are asked about them once when you set up the App, and you can change them in Settings at any time. Turning one off stops what it sends and deletes anything waiting to be sent.
Usage data, under "Share usage data". Counts and fixed categories describing how the App works for you: whether email sync succeeded and how long it took, how email was sorted and reviewed, how documents were processed and viewed, what Nestora added and what you undid, how often each built-in sorting rule ran or was undone, and your iOS and Nestora versions. No email text, names or addresses.
Your answers to suggestions, under "Help improve Nestora". When Nestora suggests a rule and you answer, we receive the type of sender (for example, airline), the type of email (for example, gate change), the change, what prompted the suggestion, your answer, the month, your iPhone model, and the version numbers of iOS and Nestora. Never the email, your name or anyone's address.
How usage data and answers are stored. We store usage data and user responses exclusively in a de-identified form. This data is maintained without association to any personal identifiers, including your name, email address, or account information. To determine how many devices take part without compromising individual identity, our systems use a randomized monthly identifier that is stored apart from your responses. We maintain this data in a form that cannot reasonably be linked to you. We do not attempt to re-identify this data, and we require anyone who receives it to follow the same restrictions.
Diagnostic logs. If you email us a diagnostic log, our team reads it to fix the problem you reported. It holds message identifiers, sender domains, times and your device model, never message content.
4. Do you use AI, and does my data train it?
Nestora sorts your email with Apple's on-device model, on your iPhone. Your email, and anything derived from it, is never given to Apple or any other company to train or run AI models, by the app or by our team.
5. How we use what we receive
To run your account, keep the App working, find and fix problems, and improve Nestora's sorting rules. We do not sell your information, use it for advertising, or build profiles of you.
6. Who we share it with
Amazon Web Services hosts the account details, usage data and answers in section 3. Google Workspace hosts our email, including diagnostic logs you send us. Both process this data only on our instructions and must keep it secure.
Authorities, when the law requires it.
A buyer, if Nestora is sold or merged. The buyer must keep these promises.
Nestora does not track you across other apps or websites, and no other company collects information about your activity across apps or websites through Nestora. Because there is no such tracking, a Do Not Track signal changes nothing in the App.
Gmail. Nestora's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your Gmail messages stay on your iPhone; only what sections 2 and 3 describe leaves it. Nothing from Gmail is sold, used for advertising or used to train AI models.
7. How long we keep it
Your account details: until you delete your account.
Sign-in records, which hold your email address: 30 days.
Usage data and answers: deleted 365 days after the end of the month we receive them.
Diagnostic logs and support email: deleted 90 days after the problem is resolved.
Privacy requests: kept 3 years.
When you delete your account in Settings, we delete your account details at once, and the App removes your rules from your iCloud. Sign-in records expire within 30 days. Usage data and answers are stored without your name, email or account, so we cannot find yours to delete them; they expire on the schedule above.
8. Your choices
Turn off "Share usage data" or "Help improve Nestora" in Settings.
Disconnect an email account at any time.
Remove Nestora's access in your Google Account.
Delete your account in Settings.
Ask us what data we hold about your account, correct it, or withdraw your consent, by writing to privacy@nestora.ai.
9. Children
Nestora is not for anyone under 13, and we do not knowingly collect their data. If we learn a child under 13 has an account, we delete it.
10. Security
We take reasonable measures to protect your information from loss, misuse and unauthorized access, including encryption in transit and at rest. No system is perfectly secure.
11. Changes
We will tell you by email and in the App at least 30 days before a material change to this policy takes effect. Before we use your data in a new way or for a new purpose, we will ask for your agreement in the App.
12. Contact
Piggybank Ventures LLC d/b/a Nestora
Privacy: privacy@nestora.ai
Legal: legal@nestora.ai
Support: support@nestora.ai