Nestpic Privacy Policy

Last updated: 22 September 2026

Nestpic helps parents share photos of their child without showing other people’s children. Because this is about photos of children, the app is built to process as little data as possible, and never to let photos or faces leave your phone. Nestpic exists for iPhone and for Android; this policy covers both.

Who we are

Nestpic is published by Monto bleu BV, Heidebergstraat 14, 3120 Tremelo, Belgium, company number BE 0543.842.970. Send privacy questions to support@nestpic.app.

What stays on your phone

Finding and hiding faces happens entirely on your phone. None of the following ever reaches us or anyone else:

• The photos you open or take in Nestpic. You pick them yourself, through your phone’s own photo picker: Nestpic cannot look through your library on its own.
• The faces Nestpic finds in a photo.
• What Nestpic remembers about who you keep sharp, and only if you say yes: the app asks once, after the first photo you share, and you can switch it off again at any time under “Who stays sharp”. It is a few measurements of the face (a series of numbers), small crops of that face from photos you shared, and the name if you enter one. Nestpic uses them to point that face out in your next photo. This is stored encrypted inside the app, is left out of backups (iCloud on iPhone, Google’s backup on Android), and is gone as soon as you remove the face there or delete the app.

On Android, Nestpic finds and recognises faces with two open face models that run on the phone itself. The library that runs them (ONNX Runtime, by Microsoft) is able to send usage reports of its own; in Nestpic that is switched off.

What you share yourself

A photo only leaves your phone when you share it, and only to the app or person you choose. Before sharing, Nestpic removes location, date, device details and other hidden data (EXIF) from the photo.

Nestpic saves photos to your photo library: photos you take with the Nestpic camera, and photos you choose to save. On iPhone the app only asks for permission to add photos, not to read them; on Android, adding a photo to your library needs no permission at all.

Usage statistics (TelemetryDeck)

To improve the app we use TelemetryDeck (TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany). The app sends short signals about how it is used, for example “a photo was shared”, “the purchase screen was shown” or “recognition was corrected”. Values are always categories, such as the number of hidden faces as a range (e.g. 2 to 3) or the kind of app a photo was shared with (e.g. WhatsApp).

TelemetryDeck’s software adds a set of standard details to each signal:

• your device: model (on Android also the brand and processor type), the version of iOS or Android, screen size, density and orientation;
• the app: version, and where it came from (the App Store, TestFlight or Google Play; on Android also whether it was installed from outside a store);
• your settings: language, region, time zone, light or dark mode, text size and other accessibility settings;
• your usage: day and hour of the signal, how many sessions and on how many different days you used the app, and the average length of a session;
• for a purchase: which product, the store’s country, the currency and the price;
• a hashed identifier that cannot be reversed, so that consecutive signals can be counted together.

A signal never contains a photo, a face, a name or anything else about what is in your photos. We cannot link this data to you as a person.

Legal basis: our legitimate interest in running and improving the app (Article 6(1)(f) GDPR). TelemetryDeck stores no IP addresses and keeps the signals no longer than this purpose needs; because the signals are anonymous, there is no point at which they could be traced back to you.

Purchases (Apple, Google and RevenueCat)

Payment is handled by Apple on iPhone and by Google Play on Android; we never see your payment details. To unlock Premium and restore it on another device, we use RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, United States). RevenueCat processes your purchases (which product, when, whether a subscription is active) together with an anonymous customer ID created by the app. No account, email address or name is needed.

On Android, purchases go through Google Play’s billing library, which also sends diagnostic data of its own to Google; Google’s privacy policy covers that.

Legal basis: performance of the contract when you buy Premium (Article 6(1)(b) GDPR). RevenueCat is based in the United States. That transfer is covered by the European Commission’s standard contractual clauses, which RevenueCat offers in its data processing addendum. RevenueCat keeps the purchase data for as long as our agreement with them lasts and deletes it afterwards.

What we don’t do

• No account, no login, no cloud storage of photos.
• No ads, no tracking across apps and websites, no selling of data.
• No face recognition anywhere but on your own phone.

Children

Nestpic is meant for parents and other adults who share photos of children. The app does not collect data from children: your child’s face measurements stay on your phone, as described above.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to data portability. Because photos and face measurements only exist on your phone, you manage them yourself: remove a child in the app, or delete the app. For data held by TelemetryDeck and RevenueCat, contact us at support@nestpic.app.

You can also lodge a complaint with a supervisory authority: the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be). If you live in another EU country, you can also turn to your own authority.

Changes

If the way Nestpic processes data changes, we will update this policy and the date at the top.