Privacy Policy
Nestlava ("we", "us", "our") is an independent software studio based in Switzerland, operated by Amir Maroufi. This Privacy Policy explains how we handle your information across our website and our applications.
1. Privacy at a Glance — What Each App Collects
| Data / feature | HelveTalk | Resetra | AquaDry |
|---|---|---|---|
| Account & email | No — no account required | Yes — Sign in with Apple or Google (email) | No — no account required |
| Works offline | Yes — fully offline | Partly — cloud sync when signed in | Yes — fully offline |
| On-device data (progress, settings) | Yes — stored only on your device | Yes — stored on your device | Yes — settings & cleaning history, stored only on your device |
| Cloud sync / backup | No — nothing leaves your device | Yes — encrypted backup & sync | No — nothing leaves your device |
| Nestlava backend (Supabase) | No — the app never contacts a Nestlava server | Yes — Supabase, used only for sign-in and encrypted backup | No — the app never contacts a Nestlava server |
| Microphone | No | No | Live sound-level (dB) meter only — analysed in real time on your device; no audio is recorded, saved, or uploaded |
| Camera | No | Live preview only — used during the Emergency Call feature; no photos are taken, stored, or uploaded | Live preview only — shown behind the Sound Meter; no photos or video are taken, stored, or uploaded |
| Photos | No | Optional profile picture chosen from your gallery — stored on your device only and never uploaded | No |
| Local notifications / reminders | Yes — on device | Yes — on device | Yes — on device |
| Purchases & subscriptions | Yes — via the app stores | Yes — via the app stores | Yes — optional, via the app stores |
2. Information We Collect
We follow a privacy-first approach and collect as little data as possible. Depending on the app, this may include:
- On-device data: your app progress, streaks, history, and preferences. Wherever possible this is stored locally on your device and is not transmitted to us.
- Account data (apps with sign-in, e.g. Resetra): when you create an account using Sign in with Apple or Google, we receive your email address and, if provided, your name. This is used to identify your account and sync your data.
- Synced content (apps with cloud backup, e.g. Resetra): the data you create in the app is backed up to our cloud in encrypted form so you can restore it if you reinstall or change devices. For Resetra this includes your profile name, the goal or habit you are working on, your streaks and history, your daily check-ins (such as mood and urge ratings), journal entries, personal reflections, and in-app preferences. Because Resetra is a recovery and wellbeing app, some of this is sensitive personal information about your health and habits; we treat it accordingly and never sell it or use it for advertising.
- Camera (Resetra and AquaDry): some apps can show a live camera preview. Resetra uses a front-camera preview during its Emergency Call feature; AquaDry can show a live camera preview behind its Sound Meter so you can point the phone at what you are measuring. In both cases this is a real-time preview only — no photo or video is captured, saved, or transmitted — and the camera is only active while you are on that screen.
- Microphone (AquaDry): AquaDry's optional Sound Meter uses the microphone to measure the ambient sound level (in decibels). The audio is analysed in real time on your device to compute a loudness reading; no audio is recorded, stored, or transmitted, and the microphone is only used while the Sound Meter is running.
- Photos (Resetra): Resetra lets you set an optional profile picture from your photo library. The picture is copied into the app's own storage on your device and is never uploaded — not even to your encrypted backup. Removing the picture, or uninstalling the app, deletes it.
- Data you provide: if you contact us by email, we receive the information you choose to share.
- Purchase data: in-app purchases and subscriptions are processed by the Apple App Store or Google Play. We do not receive or store your payment card details.
Apps that operate fully offline — currently HelveTalk and AquaDry — do not require an account, have no Nestlava backend, and do not transmit your personal data to us. HelveTalk keeps every lesson, word, streak and setting in local storage on your device. AquaDry generates all of its tones on your device and works with no network connection at all. Resetra is the only app that sends data to a backend of ours, and only when you choose to sign in.
3. How We Use Information
We use information only to:
- operate, maintain, and improve our apps and their features;
- provide account sign-in and sync your data across your devices (for apps that offer this);
- process purchases and manage subscriptions;
- send the reminders and notifications you enable;
- respond to your support requests.
We do not sell your personal data, and we do not use it for advertising.
4. Third-Party Services
Depending on the app, we rely on a small number of trusted providers that process limited data on our behalf:
- Apple & Google — app distribution, sign-in, and payment processing, under their own privacy policies.
- RevenueCat (all apps — HelveTalk, Resetra and AquaDry) — manages in-app purchases and subscription status. It processes an app-specific user identifier and purchase information, not your payment details. Using it does not create a Nestlava account and does not give an app a backend of ours.
- Supabase (Resetra only) — the secure cloud backend behind Resetra's sign-in and encrypted backup. HelveTalk and AquaDry do not use Supabase and have no backend of ours.
We do not use third-party advertising SDKs or cross-app tracking in any of our apps. Where an app uses privacy-respecting crash reporting, it is solely to improve stability and quality.
5. Data Storage & Security
For offline apps (HelveTalk and AquaDry), your data stays on your device and uninstalling the app removes it — there is nothing for us to store, export, or lose. For Resetra, the only app with cloud backup, your backup is encrypted on your device using AES-256 before it is uploaded, transmitted over secure (TLS) connections, and stored in encrypted form at rest on our backend (Supabase). While no method of storage or transmission is completely secure, we take reasonable measures to protect your information and we never sell it.
6. Data Retention & Deletion
On-device data exists only for as long as the app is installed — for HelveTalk and AquaDry, uninstalling is a complete deletion, and there is no account to close. For Resetra, we keep your account data until you delete your account. You can delete your account and associated cloud data from within Resetra's settings, or by emailing us at info@nestlava.com and we will action your request.
7. Children's Privacy
Our apps are not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us.
8. Your Rights
Depending on your location (including under the Swiss FADP and the EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the email below.
9. Changes to This Policy
We may update this Privacy Policy from time to time, including as we release new apps and features. Material changes will be reflected by updating the date at the top of this page.
10. Contact
Questions about this policy or your data? Email us at info@nestlava.com.