Nestmatch Privacy Policy

Introduction

This Privacy Policy explains how Nestmatch, a home-design app for couples developed by Idion, collects, uses, and protects your information. It applies specifically to the Nestmatch app on iOS and Android, not to other Idion products.

Nestmatch is built around a nest that two people share: the rooms, photos, looks and plan in a nest are meant to be seen by both of you, while your individual votes and your quiz answers stay private to you. This policy says exactly what that covers. By using Nestmatch, you agree to the practices described in this policy.

Information we collect

Account: an anonymous account id created when you first open the app, and, only if you choose to save your account, your email address. Your password is held only as a secure hash by our authentication provider.

Profile: the first name you enter, which is shown to your partner, and the date you agreed to room photos being processed by AI.

Nest: the nest's name, currency and invite code, who its members are, and when each member finished the style quiz.

Style quiz: your swipes on the quiz's style cards, the style profile calculated from them, and, once both of you have finished, the reveal written for the two of you.

Rooms: each room's name, type and optional budget; the photos of it you take or choose; and the looks generated from them, with the style, the options and any instructions you gave the designer.

Votes: your likes and passes on looks and pieces. They are visible only to you. Your partner learns that you voted and whether it matched, never how you voted.

Plan: the pieces listed from a look you both liked (name, category, colour, material, an estimated price range and a shopping search), the pieces either of you adds (name, category, price, note, a web link and a photo), and whether each one has been bought.

Notifications: if you allow notifications, a push token for your device.

Invite protection: when an invite code is entered, we record the account, its IP address and whether the code was right, so invite codes cannot be guessed.

Usage: which screens you reach and which actions you take, and a record of each AI request made for your account (its type and time) so daily limits can be applied, all stored in our own database.

Subscription: whether you or your nest has Nestmatch Pro, which plan, and when it renews or expires, as reported by our subscription provider.

Shared with your partner: your first name and everything in the nest (rooms, photos, looks, budgets, pieces, notes and the plan) is visible to the other member of your nest. That is how Nestmatch works, and it is why someone joins a nest only with its invite code or link.

This is the complete list of what Nestmatch collects today. If that changes as the app grows, this policy will be updated first, and the "last updated" date above will reflect it.

What we do not collect

To be specific rather than leave this to inference: Nestmatch does not collect your contacts, your precise or approximate location, health or medical records, government-issued identification, advertising identifiers, or biometric data. It does not use face recognition, and room photos are not used to identify anyone. Photos are re-encoded on your phone before they are uploaded, without their location metadata.

Nestmatch reads only the photos you pick, never the rest of your photo library. It does not sell furniture, earn commission on purchases, or see what you browse or buy after you tap "Find it". We do not collect or store your payment card details; the app store handles payment.

If any of this changes in a future version of the app, we will update this policy before that change ships, not after.

Accounts and identifiers

Nestmatch can be used without signing up. When you start, we create an anonymous account id so your nest stays in sync between your phone and your partner's.

If you later save your account, we collect your email address. Saving upgrades your existing anonymous account rather than replacing it, so your nest, your style profile and any subscription stay with you. Your email address is used to sign you in, to reset your password, and to contact you about the service. It is not shown to your partner and it is not used for marketing unless you separately ask us to.

Camera

Nestmatch asks for access to your camera only when you choose to photograph a room, or a piece you found, so it can be restyled or shown to your partner.

The camera is never activated automatically or in the background, and nothing is recorded except the photo you take. The photo is cropped and resized on your phone, then uploaded to your nest's private storage. If you decline, you can choose a photo you already have instead, and everything else in Nestmatch works as normal.

Photo library

To use a photo you already have, Nestmatch opens the system photo picker. You choose one photo, and only that photo is shared with the app. Nestmatch does not scan, index or access the rest of your library, and never in the background.

When you share a look or your shared-style card and choose to save the image, your device asks for permission to add it to your photos. Nestmatch only adds the image you asked to save. If you decline either request, everything else in Nestmatch works as normal.

Notifications

Nestmatch uses two kinds of notifications. Push notifications tell you when your partner does something that concerns you: joining or leaving your nest, finishing the style quiz, new looks ready for a room, a match, or a piece they found for you to vote on. If you allow them, we store a push token issued by Apple or Google for your device so we can deliver them. The token identifies the device, not you. The notification text, which can include your partner's first name, a room name and a piece name, passes through Expo's push service and Apple's or Google's delivery service to reach your phone.

The reminder that picks are waiting for your vote is a local notification, scheduled by the app on your own device at the hour you choose. Nothing about it leaves your phone.

We ask for notification permission in context, for example after you invite your partner or when your first looks arrive, never on first launch. We do not use notifications for marketing or promotional messages. You can turn the reminder off in Settings, and all notifications off in your device settings, at any time.

How we use information

We use the information described above to run Nestmatch: to keep your nest in sync for both of you, to calculate your style profiles and the style you share, to restyle your rooms, to list the pieces in a look you both like, to build your plan, to deliver notifications, to apply daily limits, to manage your subscription, to answer support requests, and to find and fix problems.

We do not use your information for purposes beyond operating and improving Nestmatch, and we do not use it to build advertising profiles.

Usage analytics

We record which screens you reach and which actions you take, such as adding a room, starting a restyle or joining a nest, so we can see where the app is confusing and fix it. These events are stored in our own database, linked to your account id. We do not use any third-party analytics service and we do not use any advertising service, so this information is not shared with anyone and is not combined with data from other apps.

AI processing

Nestmatch uses Google's Gemini models, called from our servers, never from your device, and our access key is never included in the app. They are used in three places:

Restyling a room: the room photo you chose, the type of room, the style and options you picked, and any instructions you typed for the designer are sent to Gemini, which returns three new images of the room. No room photo is sent until you have agreed to this on the consent screen in the app, and our servers refuse to send one without that agreement.

Listing pieces: when you both like a look, that generated image, not your original photo, is sent to Gemini to list the pieces in it with estimated prices in your nest's currency.

The reveal: when both of you have finished the style quiz, your first names and your quiz results (your leading styles with their scores, and four measures of the feel you prefer) are sent to Gemini to write your shared-style summary. Your individual swipes and your photos are not sent.

Email addresses and account ids are never sent. What is sent is used only to produce that result, it is not used to identify you, and it is not used to train the model provider's systems.

AI-generated looks, pieces and reveal

The looks of your rooms are images generated by AI and are labelled as AI renders in the app. They show a design idea, not a product you can buy. The pieces listed from a look, and their prices, are AI estimates of similar items, and the reveal is an AI-written summary of your quiz results. All of them are stored in your nest and visible to both of you. See our AI Policy for how this works and what its limits are.

Automated decision-making

Your style profile and the compatibility score in the reveal are calculated automatically from your quiz swipes, to shape the looks and the reveal. They are used only inside Nestmatch, they are shown only to you and your partner, and they do not make decisions about you that produce legal effects or similarly significantly affect you. They are not used for any other form of profiling.

Subscriptions and payments

If you subscribe to Nestmatch Pro, we receive your subscription status through our subscription management provider, RevenueCat. Payment itself is handled entirely by the Apple App Store or Google Play. We never see or store your payment card details.

Nestmatch Pro covers the whole nest: while either member subscribes, both get Pro, so your partner can see that your nest has Pro.

Service providers

We rely on a limited number of providers to operate Nestmatch: Supabase (sign-in, database, private file storage, live sync and server functions), RevenueCat (subscription status), Google (the Gemini models behind restyles, piece lists and the reveal), Expo (relaying push notifications), and Apple and Google (app distribution, payments and notification delivery). They process information on our behalf, under confidentiality and data protection commitments, and only to the extent needed to provide their service to us.

When you tap "Find it" on a piece, your browser opens a Google Shopping search for similar items, or the link your partner added. That site is not operated by us and its own privacy policy applies; nothing about what you do there comes back to Nestmatch.

We do not sell your information to third parties, and we do not share it with third parties for their own independent marketing purposes.

Security

We apply reasonable technical and organisational measures to protect your information from unauthorised access, loss, or misuse. Data is encrypted in transit. Database access rules let each record be read only by your own account or by the members of the nest it belongs to, and your votes only by you. Room photos and looks are kept in private storage and reach your phone only through short-lived links issued to the members of that nest. No system is perfectly secure, but security is a priority in how we build Nestmatch, not an afterthought.

If we become aware of a security incident that affects your information, we will notify you and take appropriate action as required by applicable law.

Data retention

We keep your information for as long as your account is active and as needed to provide Nestmatch's features. A room's photos, looks and pieces are kept until either of you deletes the room.

Because a nest is shared, its rooms, looks and plan stay with your partner if you leave the nest or delete your account. When you leave, your votes in that nest and the reveal written for the two of you are deleted, and your style profile comes with you. When you delete your account, we delete your information as described on our Data Deletion page, except where retention is required by law or for the limited purposes described there.

International transfers

Your information may be processed in countries other than your own, including the United States, where some of our providers operate. Where this happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, so that it receives a level of protection consistent with applicable data protection law.

Your rights

Depending on where you live, you may have rights to access the information we hold about you, correct it, delete it, export it in a portable format, restrict or object to certain processing, or withdraw consent where processing is based on consent. You can correct most of it yourself in the app, and you can withdraw your agreement to AI processing of room photos by writing to us; no new photo is then sent. A copy of your data is available free of charge by writing to [email protected].

If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with its own data protection law, you may have additional or more specific rights under that law. These are not reduced by anything in this policy. You can also complain to your local data protection authority; in Spain, the Agencia Española de Protección de Datos.

See our Data Deletion page to request deletion, or contact us using the details on our Contact page for any other request. We will respond within the timeframe required by applicable law, and in any case within a reasonable time.

Children's privacy

Nestmatch is not directed at children, and we do not knowingly collect information from children under the age required by applicable law to consent to data processing on their own behalf. If you believe a child has provided us with information, please contact us so we can remove it.

Changes to this policy

We may update this policy as Nestmatch evolves. We will update the "last updated" date above when we do, and for material changes we will make a reasonable effort to notify you.

Contact

Questions about this policy can be sent to [email protected]. Nestmatch is published by Idion, Roc Boronat, 138, 08018, Barcelona, Spain, which is responsible for your information. See our Contact page for other ways to reach us.