Nestio Privacy Policy
Edition dated 17 October 2026. Version 1.0.
1. About this Policy
This Policy describes personal data processing in the Nestio application, including the AppGallery version, and the web interfaces at lk.nestio.ru and chat.nestio.ru. Processing is carried out by the Administrator of nestio.ru, identified in section 8.
Processing is governed by the laws of the Russian Federation, including Federal Law No. 152-FZ of 27 July 2006, On Personal Data. Data is processed to enter into and perform the user agreement, on the basis of consent where required, and to fulfil statutory obligations. Reading or acknowledging this Policy does not replace consent: where consent is required, it is obtained separately.
2. Data processed and its purposes
Processing concerns users, family workspace members, including children, and people contacting support. Data comes from the user, their parent, other family members, the device and the selected sign-in service. The data involved depends on the features used.
| Data | Purpose |
|---|---|
| Email address, name, avatar, language and time zone; password hash, account and sign-in identifiers, session data | Registration, sign-in, access recovery, preferences and account protection. Passwords are not stored in plain text |
| Family name, members' names and dates of birth, roles, invitations and access rights | Family workspaces and shared features |
| Tasks, events, notes, lists, family motivation records, messages and attachments; audio and video during calls and technical connection information | Selected communication and planning features, synchronization and member access |
| Coordinates supplied when a location feature is used | Location sharing, map display and weather requested by the user |
| IP address, device, operating-system and app-version information, device and installation identifiers, activity timestamps, error and security logs, push-notification token | Service operation and protection, fault diagnosis and delivery of service notifications |
| Email address and request contents | Responding to the request and resolving the reported issue |
The Administrator of nestio.ru collects, records, stores, updates, uses, discloses in the circumstances described in this Policy, and deletes data, primarily by automated means. Handling requests may also involve non-automated processing. Users may add information about other people only where they have a lawful basis to do so.
3. Device permissions and children's data
The camera and microphone are used for capturing media, voice messages and calls; selected photos, videos, audio and documents are used for attachments. Location access is requested for the relevant feature, and notification permission for notification delivery. Permissions can be granted and withdrawn in device settings. Refusal limits the related feature.
For system biometric authentication, Nestio receives only the verification result, not biometric templates. Web interfaces use necessary cookies and local storage for sign-in, preferences and service operation. Disabling them may prevent sign-in or affect individual features.
Children under 18 may join only through a parent acting as their legal representative. Processing a child's data requires a proper legal basis. Where parental consent is the basis, it must be obtained separately, and the Administrator of nestio.ru must verify the parent's authority. The parent manages the child's participation and may request correction or deletion of the child's data.
4. Access and external services
Family workspace data is available to members according to roles and visibility settings; messages and attachments are available to the selected recipients. Service emails are sent by nestio.ru.
The following external services are used for the corresponding features:
| Service | Purpose and data processed |
|---|---|
| HUAWEI ID | Optional sign-in: profile information, email address, external account identifier and authentication tokens are received through Huawei's interface |
| Firebase Cloud Messaging (Google) | Push delivery on supported devices: the delivery token, installation identifiers, technical information and notification payload are transmitted through Google's service |
| Google STUN | Establishing internet calls: the service receives the IP address and network connection parameters |
| Open-Meteo | Weather forecasts: the service receives the selected location's coordinates and technical request parameters |
| MET Norway Locationforecast | Fallback weather forecasts in supported regions: the service receives the selected location's rounded coordinates and technical request parameters |
| AppGallery Connect / HUAWEI Analytics (AppGallery build only) | HUAWEI ID operation and integration diagnostics: app and installation identifiers, app version, OS and device version, technical events and errors |
| GlitchTip through a Sentry-compatible SDK | Crash diagnostics: app version, technical device and OS information, stack trace and error context are sent to the Nestio-managed bt.nestio.ru server in Russia |
| Stream WebRTC Android (library without the GetStream cloud service) | Audio and video call transport between participants; the library processes media streams, IP addresses and network parameters, while signaling is handled by Nestio servers |
To label a selected location, the app may send coordinates to the device's system geocoder. The service provider depends on the operating system and device settings.
Infrastructure and technical-service providers receive access only as needed for their tasks, on a lawful basis and subject to confidentiality and data-protection obligations. Information is disclosed to public authorities in circumstances provided for by law.
Nestio servers, databases, file storage and backups are located in the Russian Federation. Requests to the external services listed above may involve processing outside Russia. Cross-border transfers are permitted only in compliance with Article 12 of Law No. 152-FZ and data-localization requirements; the service's functional purpose does not itself create an exemption.
5. Retention, deletion and security
Data is retained while necessary for the stated purposes: account data and content for providing the service, requests for handling them, and technical logs for operation and security. Once a purpose has been fulfilled, data is destroyed within the statutory time limits unless an independent lawful basis for further processing exists.
Account deletion is available in the app at More → Account and family → Account → Delete account, or by contacting hello@nestio.ru. Account ownership must be verified.
Following a deletion request, the account is deactivated and active sessions are terminated. Data is retained with restricted access for 30 calendar days to allow restoration at the user's explicit request. Unless the deletion request is cancelled, account data and associated content are destroyed no later than the end of that period. Restoration is impossible after destruction.
Backups are retained for no more than 30 calendar days. This does not extend the account-data deletion deadline: data subject to deletion is also destroyed in backups within 30 days of the request.
Shared materials may remain available to other members only where an independent lawful basis exists. Personal data of the deleted user that is no longer necessary is removed from them; removing only a reference to the account is insufficient. Where the law requires specific records to be retained, only those records are kept for the prescribed period. Any shorter mandatory deadline for stopping processing or destroying data applies regardless of the restoration period.
Security measures include access controls, secure connections, password hashing, session controls and backups. Error diagnosis runs on Nestio infrastructure. Session information, preferences and cache may be stored on the device for app operation.
6. User rights
Users may obtain information about processing and access their data, request correction, blocking or destruction on statutory grounds, withdraw consent and request that processing stop. Requests should be sent to hello@nestio.ru. Identity or a representative's authority may need to be verified to protect the data.
Information about processing is provided within 10 working days of receiving a request; an extension of no more than 5 working days is permitted with a reasoned notice. At the user's request, processing stops within 10 working days, with a possible reasoned extension of no more than 5 working days, except where continued processing is permitted by law. Confirmed inaccuracies are corrected within 7 working days. Following withdrawal of consent, processing stops and data for which no other lawful retention basis exists is destroyed within 30 calendar days. Any shorter statutory deadline takes precedence.
Users may challenge the Administrator of nestio.ru's actions or inaction before Roskomnadzor, the Russian data-protection supervisory authority, or a court.
7. Changes to this Policy
The current edition is available in the app and at the Russian and English policy addresses. Users are notified through the app or by email of changes affecting data processing. Where new processing requires consent, it is obtained separately before that processing starts.
8. Administrator definition and contact
Administrator of nestio.ru means Andrey Vladimirovich Valegzhanin (Валегжанин Андрей Владимирович), a natural person, the developer of Nestio and the personal data operator for users of the website and application. Location: Moscow, Russian Federation.
Personal data contact: hello@nestio.ru.