Your privacy matters to us. This policy describes how Nestlogue ("the Application") collects, uses, and protects information when you use our mobile apps on iOS and Android.
1. Information we collect
No account required for v1. We do not require you to create a username, password, or email address to use the Application.
Catalog on your device. Items you catalog (names, places, photos, documents, purchase / return / warranty dates, owners, and related notes) are stored locally on your device. Voice memos you choose to record are saved as item attachments on the device; Nestlogue accesses the microphone only while you actively record. Voice recordings are not uploaded to ThinkAI servers. Full backups you create include the recordings. ThinkAI does not operate cloud servers that store your Nestlogue catalog in v1.
Settings on device. Preferences such as onboarding completion, find presets, and similar options are stored locally.
Purchases. Subscription and purchase status is processed by Apple App Store, Google Play, and our subscription provider (RevenueCat). We receive entitlement status to unlock catalog growth past the free item cap — not your full payment card details.
Support ID. The Application may show an anonymous Support ID from our subscription provider so we can grant promotional access when you contact us. This is not your payment card information.
Campaign attribution. If you open the Application through a campaign link, it may store that link's campaign ID and source, medium, and campaign labels on your device. When available, these labels are shared with RevenueCat to help associate subscription activity with the campaign. They do not include your catalog, photos, or email address.
Optional campaign activation measurement. In app versions where the setting is available, you may choose to share one campaign-attributed activation with Marketworks. This sends the campaign ID, event time, app platform, and a random installation code. It does not send an account ID, catalog, photos, or email address. The setting is off unless you turn it on, and the feature is unavailable when the optional Marketworks service is not configured. An event already sent cannot be recalled by turning the setting off.
Optional promotional-code redemption. If you enter an offer code in Settings, the code and a random retry ID are sent to Marketworks for product eligibility checks, one-time redemption enforcement, and campaign reporting. Marketworks temporarily uses the network address of the request to limit repeated attempts and stores a receipt containing the offer and redemption time. Your catalog, photos, and email address are not sent. This feature is available only when Marketworks is configured and never blocks ordinary local use of Nestlogue.
Optional receipt product lookup. While reviewing a receipt-created item, you may choose “Find product online” and confirm a notice before each search. Nestlogue sends only the store name and that item's receipt-line text to our Nestlogue website service, which forwards a search query to Brave Search. It does not send the receipt image, full receipt, purchase date, price, or catalog. Search results are public-web suggestions, not verified facts; nothing changes unless you select a result. Brave may retain submitted API queries for up to 90 days for billing and troubleshooting. Vercel processes the request as our website host. Our rate-limit service receives a keyed hash of the request address (not the raw address) and a daily count; these expire within 48 hours. You can skip lookup and continue using the receipt draft locally.
Optional inbox receipt import. If you choose to connect a supported mailbox, Nestlogue requests read-only mail access so it can search for receipts. The provider permission is broader than any individual search; Nestlogue narrows each search to retailer names and a date range you enter. Search uses message metadata such as sender, subject, and date. In ordinary searches, message content is retrieved when you select a result. If you turn on “Search forwarded emails,” Nestlogue also checks text from retailer-matching candidate messages on your device during search so it can use the forwarded message’s original date; supported attachments are fetched only after you select a result. Email text and selected receipt attachments are processed on your device in the app’s private storage and memory, protected by the mobile operating system’s app sandbox. If you add items, the receipt you choose is saved locally as an item attachment. Gmail access uses the read-only `gmail.readonly` permission; it does not let Nestlogue send, modify, or delete your messages. Gmail and Microsoft Outlook sign-in use their providers’ native authorization flows. The app uses the resulting access token on your device to call the provider’s API over HTTPS; the token is not sent to Nestlogue servers. iCloud Mail connects over encrypted IMAP using an Apple app-specific password that you create; Nestlogue stores it only on your device in platform-protected storage (iOS Keychain or Android Keystore-encrypted storage). Yahoo Mail is not currently enabled for users. You can disconnect a supported provider in the import screen and revoke access in provider account settings. This feature is optional; photo, PDF, and manual entry remain available without it.
On-device receipt assistance. Where available, Nestlogue may use Apple’s on-device model or Gemini Nano to suggest purchased items and item types from receipt text. This is inference for the receipt feature; receipt and mailbox content are not sent to an AI service for this processing. Google user data is not used to train, develop, or improve generalized AI/ML models. AI suggestions may be unavailable on some devices and must be reviewed before you save an item. Basic local receipt reading remains available when on-device AI is unavailable.
Protection of Google user data. Nestlogue sends Gmail API requests directly from your device to Google over HTTPS/TLS. The app uses the Google access token on-device for those requests. For inbox search and import, Nestlogue does not send the token, mailbox content, or message identifiers to ThinkAI or Nestlogue servers, analytics, crash-reporting services, or AI services. If you separately choose “Find product online” and confirm, the store name and one item line may be sent as described in Section 3. Search results and message text are held in the app while you search or review a receipt and are not stored as a mailbox archive. If you save receipt details or an attachment, that selected information is stored in Nestlogue’s private app storage, which is isolated by the iOS or Android app sandbox. Nestlogue excludes its iOS receipt-document directory from device backups and disables Android app backup. Protection of locally stored data also depends on the security of your device; use a device passcode and keep its operating system up to date. A full backup that you intentionally create and share may include receipt attachments, and you control where that export is stored or sent.
2. How we use information
We use information solely to provide Application functionality: cataloging belongings, finding items by place, duplicate warnings, return / warranty reminders, export / import backups, and managing your subscription tier.
3. Third-party services
App stores & billing. Apple, Google, and RevenueCat process payments and subscription status according to their own privacy policies.
No cloud sync. Nestlogue does not upload your catalog or item photos to ThinkAI servers for storage or synchronization. Receipt text and mailbox content are processed on-device, including optional on-device AI inference.
Optional campaign measurement. When you explicitly enable the in-app setting in a version where it is available, the limited activation information described above is sent to Marketworks for campaign measurement. This does not enable cloud sync or upload catalog content.
Optional promotional-code redemption. If configured in your app build, code validation and receipt tracking are provided by Marketworks. A request address is used temporarily for abuse prevention; the saved redemption record contains the offer receipt, not your app account or catalog. You may simply leave the code field unused.
Optional receipt product lookup. If you explicitly confirm a lookup, our Nestlogue Vercel service sends the store name and one item line to Brave Search and returns source-linked candidates. It does not send receipt images, full receipt text, purchase dates, prices, or catalog data. Brave's API privacy notice describes query retention (up to 90 days for billing and troubleshooting). Nestlogue's temporary abuse-prevention counters use a keyed address hash and expire within 48 hours. The feature is optional and receipt capture continues to work if lookup is unavailable.
If the item line came from an email receipt, it is sent for product lookup only after you separately choose “Find product online” and confirm the lookup notice. This optional request is not part of mailbox search or import; you can skip it and keep the receipt data on your device.
Optional inbox receipt import. Google and Microsoft authenticate the currently supported mailboxes and provide the read-only mail APIs used by this feature. Nestlogue processes message text on-device when you select a message and, in forwarded search, checks candidate message text locally to find the original receipt date. It fetches supported attachments only after you select a result. No inbox content, message identifiers, search terms, or OAuth tokens pass through Nestlogue's servers for inbox search or import. Google's restricted Gmail permission requires app verification before general public access; until approval is complete, Gmail import may be unavailable outside an approved test audience. Yahoo Mail is not currently enabled for users. You can disconnect a supported provider in the app and revoke authorization in provider account settings.
Google Limited Use commitment. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements . We use this data only to provide the receipt import functionality and the user-directed follow-up described in this policy. We do not sell it, use it for advertising, or transfer it to third parties except as needed to provide or improve user-facing features with your direction. We do not use Google Workspace data to train, develop, or improve generalized AI/ML models, and do not send it to third-party AI/ML services for model training. Nestlogue does not collect or transfer aggregated or anonymized Google mailbox data.
Website analytics. When enabled on nestlogue.com, Vercel Web Analytics provides aggregate page-view and referral reporting. Vercel describes this service as storing anonymized data without cookies. This applies to visits to the website, not to your in-app catalog or app activity.
Optional Google Analytics. Google Analytics 4 is not loaded unless you choose “Allow analytics” in the website privacy choices. If enabled, it measures website visits, referral and campaign information, and clicks to the App Store and Google Play. It may use analytics storage or cookies and sends website measurement data to Google. We disable Google Signals and advertising personalization. Rejecting or later withdrawing consent stops future Google Analytics collection; previously collected data is not recalled. This website setting does not change how the mobile app works.
4. Data retention
Local app data remains on your device until you delete the app, clear app data, or replace your catalog via import. Message text inspected during search is used transiently on-device and is not retained as a mailbox archive. If you choose to save a receipt, its selected text or attachment remains locally with the item until you delete that item or its attachment, delete the app, clear app data, or replace the catalog via import. Disconnecting a provider removes Nestlogue's saved authorization where applicable but does not delete receipt attachments you previously chose to save. Optional ZIP exports you create and share are under your control. Nestlogue does not modify, mark, move, or delete Gmail messages. Disconnecting Nestlogue or revoking its Google permission stops future mailbox access; it does not delete the original messages from Gmail or locally saved receipt details. To remove a saved receipt from Nestlogue, delete its item or attachment in the app. To remove an original email, use Gmail. Nestlogue does not have permission to delete it on your behalf. You can also delete the app or clear its app data to remove Nestlogue's locally stored catalog and receipt files. Any ZIP backup you previously exported remains under your control and must be deleted from the location where you saved or shared it.
5. Your choices
- You can export a catalog-only or full (with photos) backup from Settings.
- You can delete the app to remove locally stored data.
- You can disconnect Gmail or Microsoft in the email import screen and revoke its authorization in your Google or Microsoft account settings.
- You can manage subscriptions through your Apple ID or Google Play account, and restore purchases from Settings.
- On nestlogue.com, use “Privacy choices” in the footer to allow or reject optional Google Analytics, or change your choice later. Your choice is stored in this browser.
6. Children
The Application is not directed at children under 13, and we do not knowingly collect personal information from children.
7. Changes
We may update this Privacy Policy from time to time. Continued use of the Application after changes constitutes acceptance of the updated policy. The effective date at the top will be revised when we make material updates.
8. Contact
Questions about privacy: info@thinkaillc.com · Support