Legal
Privacy policy
Effective 7 October 2026
Nest Scan is built so that your pregnancy details stay on your phone. This policy explains what the app sends to us and to the services we use, why, and for how long.
In short
- No account or email sign-up. The app uses an anonymous ID.
- Your due date, pregnancy week, gestational diabetes answer and carb targets stay on your phone. They are never sent to us, to analytics or to the AI service.
- Label photos are sent only when your phone can't read the text, and only to read it. We don't store them.
- We don't sell your data or use it for advertising, and we don't track you across other apps or websites.
- You can delete everything from Settings in the app.
Who we are
Nest Scan is provided by Vaiz Production ("we", "us"). Contact us about privacy at privacy@docusmarter.com.
What stays on your phone
Due date and pregnancy week, your answer about gestational diabetes, your carb targets, your saved shelf of products, consent choices, unit settings and the count of free scans used today. Deleting the app or using Delete all my data removes them.
What the app sends, and why
| Data | Why | Kept for |
|---|---|---|
| Anonymous app ID and an app-integrity check (Firebase Authentication, App Check) | To count free scans fairly and block abuse | Until you delete your data |
| Text the phone read from an ingredient label | To read the ingredients when on-device reading isn't enough | Not stored by us after the answer is returned |
| A label photo, only if the phone couldn't read the text and you allowed AI reading | To read the ingredients | Not stored by us; see Google below |
| Barcode numbers | To look up the product in Open Food Facts, Open Beauty Facts and our shared product cache | Not linked to you |
| Product label data (ingredients, nutrition) read with high confidence | Shared product cache so others can look up the same barcode. Contains no personal data | 180 days |
| Daily scan counts | Free-plan limit | 3 days |
| Wrong-result reports you send: what the app read, the reason and your note (never a photo) | To fix ratings and product data | Up to 12 months |
| Purchase records from Apple or Google (transaction IDs, product, expiry) | To unlock paid features and restore them | While the purchase can be restored, or until you delete your data |
| Usage events, such as "scan completed" or "paywall viewed", from an allow-list that excludes all health data | To understand which features help | Up to 12 months |
Services we use
- Google Cloud and Firebase (United States): our servers, anonymous sign-in, app integrity checks and database.
- Google Gemini API: reads label text or photos. We use the paid service. Under Google's terms, Google does not use this content to improve its products, but keeps it for a limited period to detect abuse.
- Open Food Facts and Open Beauty Facts: receive the barcode only.
- Apple App Store and Google Play: handle payments. We never see your card details.
- PostHog: product analytics, receiving only the allow-listed usage events above.
Legal bases (UK and EU)
We process label text and photos with your consent, which you give in the app and can withdraw by switching to barcode-only scanning. We process purchase records to perform our contract with you, and scan counts, integrity checks and usage events for our legitimate interest in running a fair and secure service.
Consumer health data (US states)
Some US state laws, such as Washington's My Health My Data Act, treat the fact that you use a pregnancy app as consumer health data. We collect it only as described above, linked to an anonymous ID, to provide the app. We don't sell it or share it for advertising. You can access or delete it by writing to us or using Delete all my data.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Because we only know your anonymous ID, the fastest way is Settings, Delete all my data. For anything else, email privacy@docusmarter.com. You can also complain to your data protection authority.
Children
Nest Scan is meant for adults and is not directed to children under 16.
International transfers and security
Our servers are in the United States. Where UK or EU data is transferred, we rely on the safeguards our providers offer, such as Standard Contractual Clauses. Data is encrypted in transit, and our database can't be read directly by the app or the public.
Changes
We'll update the date above and, for significant changes, tell you in the app.