Privacy policy
Your spaces stay yours
Nestor helps you explore interior design ideas. You can use the app without creating an account. Projects, room photos, designs, favorites, and your stylist conversation are stored on your device. They are not synced between devices. Uninstalling the app or clearing its data can remove them. Export anything you want to keep.
When you use AI
Only after you allow AI processing, Nestor sends selected content through our processing server to third-party AI services. BytePlus ModelArk uses Seed 2.0 Mini for room audits, palettes, and visible photo observations. Kie.ai provides GPT 6 Luna for stylist replies and plans, and GPT Image 2.5 for image generation and editing. Stylist requests include your instructions, relevant preferences, brief, recent conversation, and photo observations. Image requests include the selected room photo, instructions, and any furniture reference or selection mask. Do not upload sensitive documents, people, or images you do not have permission to use.
Provider updates
The provider details above describe the updated Nestor release. Earlier app versions use BytePlus for stylist replies and image generation as well as room analysis. Kie.ai processing is introduced with an updated app and renewed AI permission. Your earlier BytePlus-only permission does not authorize sharing content with Kie.ai. Declining or withdrawing permission prevents future AI requests; you can continue to browse styles and use saved projects.
Processing and retention
Our application server processes photo and chat content in memory and does not maintain a database of that content. For image generation, photos and references are uploaded to temporary Kie.ai file hosting and the resulting image is downloaded to your device. Kie.ai describes uploads as temporary, but its upload documentation lists both 24 hours and three days; immediate deletion is not guaranteed. Its task documentation says generated download links typically expire after 24 hours. Kie.ai and its upstream services process requests under their own policies; we do not promise a specific chat retention period or processing region. See kie.ai/privacy-policy and docs.kie.ai/file-upload-api/upload-file-base-64. BytePlus states that customer data is not used for model training without authorization and may retain safety-flagged inputs and outputs for 180 days in Malaysia. ModelArk processing may occur in Malaysia, Indonesia, or the EU/EEA depending on the service region. See docs.byteplus.com/api/docs/ModelArk/BytePlus_ModelArk_Data_Processing.
Permissions and diagnostics
Camera access lets you photograph a room. The system photo picker lets you select an image. Saving an exported design to Photos requests permission only when needed. We do not access your contacts, precise location, or microphone. We do not include advertising trackers or sell your personal information. Our backend and usage counters are hosted on Railway. Infrastructure logs may include IP addresses, request times, response codes, and error diagnostics for security and operation. To prevent abuse and limit AI costs, a Redis service stores a daily hashed network identifier and request counts for at most 25 hours. It does not store raw IP addresses, photos, or messages. Photo and chat request bodies are not intentionally logged by the app server.
App updates
Updated releases of Nestor can download software fixes and app assets through Expo's EAS Update service. Expo receives your IP address, a random installation identifier, device platform, app runtime and update identifiers, and update or launch-error diagnostics to deliver compatible updates and recover from failures. OTA update delivery does not upload your room photos, design instructions, or stylist conversation to Expo. See expo.dev/privacy. Earlier app builds without OTA support do not make these update requests.
Subscriptions and purchase records
Apple processes subscription payments. RevenueCat validates purchases, manages subscription access, and provides purchase analytics for Nestor. We send a random app identifier, purchase and renewal records, product identifiers, and subscription status to RevenueCat; its SDK also processes device and app information and IP addresses to provide this service. We do not receive your payment card details or Apple Account password. Purchase records are retained to restore access, support customers, prevent fraud, and meet legal obligations. See revenuecat.com/privacy-policy. Our server checks subscription status to determine Free or Pro access. Redis stores hashed device, network and subscription identifiers and allowance counts for up to eight days, without photos or messages. A private credential stored in your device Keychain identifies your Free allowance and proves access to your subscription identifier. Clearing local projects does not reset your allowance, cancel your subscription or erase records Apple and RevenueCat need to administer it.
Your choices and rights
You can withdraw AI permission in Settings, delete individual projects, clear your stylist conversation, or erase all local Nestor data. Withdrawing permission stops future AI requests; it does not undo processing already completed. Depending on where you live, you may have rights to access, correction, deletion, restriction, objection, or portability, and to complain to your local data-protection authority. Contact us using the support details below. Because we have no user accounts or server-side photo archive, we may not be able to locate data solely by your name.
Children and policy changes
Nestor is intended for adults and is not directed at children under 13. Household settings for children or pets are design preferences, not safety certifications. We may update this policy when the app or processing practices change. Material changes to AI data sharing will require renewed permission.