NestStock

NestStock provides an encrypted Insurance Vault designed to store sensitive home assets, electronics serial numbers, and valuation records. To safeguard this vault, NestStock integrates with Apple’s official LocalAuthentication framework (NSFaceIDUsageDescription).

When you unlock the Insurance Vault, the operating system prompts you for authentication and returns a simple cryptographic boolean token (Success or Failure) to the app. If biometrics are declined or unavailable, you can unlock the vault using your in-app PIN passcode.

NestStock requests camera and photo permissions only when you explicitly tap a scanning or attachment button:

• Barcode Scanner (UPC / EAN): NSCameraUsageDescription is used on-demand to read physical barcodes on consumer goods, groceries, and cleaning supplies, automatically matching them against regional catalogs.
• Receipt OCR Ingestion: The camera allows you to photograph paper receipts to parse line items, quantities, and dates into your pantry without manual entry.
• Smart Box QR Scanner: The camera reads generated QR labels attached to tote bins and storage boxes in closets, attics, or garages.
• Photo Library Access: NSPhotoLibraryUsageDescription and NSPhotoLibraryAddUsageDescription are invoked only if you choose to attach proof-of-purchase receipts or serial number photos to your vault, or save a generated QR label to your camera roll.

The camera is never accessed in the background and shuts down immediately when you exit the scanning modal.

In accordance with Apple App Store Review Guidelines and the Apple Privacy Manifest specification (PrivacyInfo.xcprivacy):

• Tracking: NSPrivacyTracking: false in our Apple Privacy Manifest. We do not track users across third-party websites or applications for cross-context behavioral advertising. We disclose third-party processors including affiliate link conversion via Skimlinks and aggregated operational product telemetry.
• Email Address (NSPrivacyCollectedDataTypeEmailAddress): Collected when creating an account for authentication, password recovery, and household invite code validation. Linked to your account; not used for marketing tracking.
• Photos or Videos (NSPrivacyCollectedDataTypePhotosorVideos): Stored only when you deliberately upload receipt snapshots or item photos to your inventory or vault. Linked to your household; never shared publicly.
• Required System Reason APIs: We access CA92.1 (UserDefaults) to preserve your offline cache, visual theme, and cart preferences; C617.1 (FileTimestamp) to reconcile sync conflicts; E174.1 (DiskSpace) to ensure sufficient offline storage; and 35F9.1 (SystemBootTime) for local sync timing.

To provide inventory synchronization, real-time AI scanning, automated receipt capture, voice briefings, and merchant restock checkout, NestStock engages trusted third-party service providers and data processors:

• Skimlinks: Converts outbound merchant cart links into affiliate links. When you tap to restock items at retailers (such as Walmart or Target), referral identifiers may be attached to support development without sharing your personal inventory records.
• Google Gemini (Google Cloud Vertex AI): Processes camera vision snapshots, multi-item bounding boxes, and bidirectional audio streaming for Live Scan and automated item recognition. Video frames and audio are streamed in real time only with affirmative user consent.
• ElevenLabs: Synthesizes natural audio speech for morning household briefings, vitality summaries, and voice confirmations. Text prompts are transmitted via encrypted TLS.
• OpenAI: Serves as an alternative/fallback artificial intelligence inference engine for complex recipe generation and ingredient taxonomy categorization.
• ipwho.is: Consent-gated client-side IP geolocation lookup used solely to infer local timezone and default regional supermarket catalogs when granted by the user.
• freeipapi.com: Consent-gated secondary fallback IP geolocation provider utilized only when primary geolocation lookup is unavailable.
• Stripe: Processes payment card transactions for NestStock Standard, Vault Premier, and Founding Lifetime subscriptions. Financial card details are handled directly by Stripe and never touch NestStock servers.
• Supabase: Provides managed PostgreSQL database infrastructure, Row-Level Security (RLS) data persistence, user authentication, and secure encrypted file storage buckets.
• Firebase (Google LLC): Facilitates identity authentication, Firebase App Check anti-abuse attestation, cloud push notifications, and high-availability document storage.
• Inbound Receipt Email Parsing (Notify@neststockapp.com): Ingests forwarded digital store receipts (e.g. Walmart, Target grocery receipts) to parse line items, pricing, and purchase dates into household pantries.

Affiliate Link Conversion & Aggregated Product Telemetry: While NestStock does not engage in cross-app behavioral ad brokering, outbound restock clicks route through commercial affiliate networks (including Skimlinks) to support our infrastructure, and we collect aggregated product interaction telemetry (e.g. popular restock SKU counts) to improve catalog accuracy.

Depending on your state of residency, you may have specific privacy rights under applicable state comprehensive privacy laws, including the California Consumer Privacy Act (as amended by CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), and Florida Digital Bill of Rights (FDBR):

• Right to Know & Access: You may request disclosure of the specific pieces and categories of personal information collected, sources, business purposes, and third parties with whom data is shared.
• Right to Delete: You have the right to request deletion of personal information collected from you, subject to legal record retention requirements (exercisable self-serve in App Settings).
• Right to Correct: You may request correction of inaccurate personal records maintained by NestStock.
• Right to Opt-Out of Sale or Targeted Advertising: NestStock does not sell personal information or share personal data for cross-context behavioral advertising. Outbound affiliate links operate solely on merchant routing without profiling.
• Right to Non-Discrimination: We will never discriminate against you, alter service tiers, or degrade application functionality for exercising any privacy rights.

To exercise state privacy rights, submit a verified consumer request to support@neststockapp.com.

NestStock recognizes and honors universal opt-out preference signals, including the Global Privacy Control (GPC). Because NestStock does not engage in cross-site behavioral tracking or sell user data, GPC signals are natively respected across all web endpoints. Standard browser “Do Not Track” (DNT) header signals are similarly acknowledged to prevent non-essential telemetry collection.

NestStock is intended exclusively for individuals aged 13 and older (or 16 and older in jurisdictions where state or European law requires higher age consent thresholds). NestStock is not directed to children under 13, and we do not knowingly solicit, collect, or process personal data from children under 13.

If we discover that a child under 13 has provided personal credentials or inventory data without verified parental consent, we will take immediate steps to purge such information from our databases. Parents or guardians who believe their child has registered an account may contact us at support@neststockapp.com for immediate removal.

NestStock provides interactive AI features requiring real-time audio, vision, and biometric access:

• On-Device Biometrics (Face ID & Touch ID): Processed exclusively inside Apple's hardware Secure Enclave. NestStock does not capture, store, or transmit biometric identifiers, face geometry, or fingerprints.
• AI Audio Streaming: Interactive voice commands and conversational agent sessions stream audio packets over TLS directly to Google Gemini or ElevenLabs. An affirmative in-app consent gate must be accepted before audio input or streaming begins. Audio is processed transiently to generate responses and is not retained to train foundation models.
• Camera Vision & Snapshot Processing: Live Scan camera feeds and item photos are transmitted to Google Gemini vision endpoints for item categorization, barcode reading, and bounding box analysis. The camera operates strictly on-demand during active scanning and ceases immediately upon closing the scanner.

NestStock uses Supabase cloud infrastructure protected by enterprise security standards:

• Transport Security: All client-to-cloud communication is secured via TLS 1.3 / HTTPS with strong forward-secret cipher suites.
• Encryption at Rest: Database records and asset attachments are encrypted using industry-standard AES-256.
• Row-Level Security (RLS): Every household record, inventory item, and vault asset is strictly bound to your verified household ID. Users cannot query, view, or modify records belonging to other households.

In strict compliance with Apple App Store Review Guideline 5.1.1(v), NestStock provides simple, immediate, and self-serve account deletion:

What happens upon deletion: Your account credentials, household associations, pantry inventory items, insurance vault records, receipts, and photos are permanently and irreversibly purged from our database and storage buckets. Local device tokens and caches are cleared immediately.

You may also email us directly at support@neststockapp.com with the subject “Account Deletion Request”. Requests sent via email are processed within 48 hours.

Smart Wall Calendar Hubs: NestStock supports family wall displays (Skylight Calendar, Hearth Display, DAKboard, and Cozyla Calendar). Hub syncing occurs strictly through authenticated API or grocery pull mechanisms. Hub data is never shared with third parties.

Regional Shopping Carts: NestStock provides restock cart links to major retailers (Amazon, Walmart, Target, Kroger, Tesco, Woolworths). When you export a shopping cart, NestStock opens the retailer URL with your product list query. NestStock does not transmit your personal financial credentials or payment methods to retailers.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Data Protection Team:

Operating Entity: The One Guy Pondering LLC (DBA That One Guy Pondering • ThatOneGuyPainting Ecosystem)
State Filing: State of Florida Sunbiz Document #L26000523238
Federal EIN: 43-2491477
Principal Office: 4864 Leyland Lane, Crestview, FL 32536
Direct Phone: +1 (850) 612-2312
Founder: Jimmie Davis
Support & Data Protection Desk: support@neststockapp.com • NestStock@neststockapp.com
Website: https://neststockapp.com
App: NestStock: Home & Vault (v4.8.0)