Privacy Policy

Effective date: October 25, 2026 · App: NestClip (iOS and Android, app.ezbuilder.nestclip)
This policy is available in English and Korean (한국어). For all other languages, this English version applies. If the versions differ, the version in the language of your store listing region is interpreted consistently with this English text.

1. Information kept only on your device

The following stays in the app's private storage or the operating system's secure storage and is never sent to us. It is deleted when you delete the app (except files you exported or uploaded to your own cloud or NAS).

• Library files: media you saved and their thumbnails. App lock restricts access to the app; it does not encrypt the files themselves.
• Browser data: tabs, bookmarks, history (regular tabs only), search engine choice, cookies and site data (web view storage). Private tabs do not keep history.
• Download job data: file name, source address and progress. Signed source addresses needed to resume a job are kept in secure storage; request details from private tabs are not stored.
• App lock: your PIN is stored as a salted hash in secure storage (iOS Keychain, Android Keystore-backed storage). Face ID and fingerprint checks are handled by the operating system; the app never receives biometric data.
• NAS settings: host, port, path and user name are kept in app settings; the password only in secure storage.
• Google Drive connection: the connected account's email address and the ID of the folder the app created. Access tokens are managed by the Google Sign-In library in the system's secure storage.
• In-app diagnostics: the app contains a diagnostics recorder that only counts event types, formats and outcomes. It is off by default, and even when on it stays in memory and is never written to disk or transmitted.

2. Information sent off your device

2.1 Browsing websites

NestClip is a web browser. Like any browser, it sends requests (IP address, device and browser information, cookies, etc.) to the websites you open and the servers they load. Those websites' own privacy policies apply. Text typed into the address bar as a search is sent to the search engine you selected. Ad and tracker blocking is decided on your device using public filter lists; the addresses you visit are not sent to us.

2.2 Entitlement and save-credit server

• Data: a random anonymous install ID created on first launch, app version and platform, store purchase verification data (purchase token or transaction identifier), ad reward verification results, remaining saves and usage records. Your IP address may appear in server access logs as part of the connection.
• Purpose: verifying and restoring Lifetime Premium, granting rewarded-ad credits (5 saves per completed ad), deducting saves, and preventing duplicate grants and abuse.
• The install ID is not linked to your name, email or the device advertising identifier.
• Retention: kept while we provide your entitlement and credits, and deleted on request (builder.ez@gmail.com), unless the law requires longer retention (for example, transaction records). Server access logs are kept for a rolling window (oldest entries are deleted once logs exceed 15 MB).

2.3 Rewarded ads (Google AdMob)

Ads load only when you choose to watch one to earn free saves. Google may then collect device information, IP address, advertising identifiers (Android advertising ID; on iOS the IDFA only if you allowed tracking) and ad interaction data to deliver and measure ads and prevent fraud. The reward is confirmed to our server through Google's server-side verification (SSV), which carries the anonymous install ID. See How Google uses information from sites or apps that use its services and the Google Privacy Policy. Ad personalization: off (non-personalized ads only). You can reset your advertising ID or opt out of tracking in your device settings.

2.4 In-app purchase

Lifetime Premium is processed by the Apple App Store or Google Play. We never receive your card or other payment details; we only receive what is needed to verify the purchase, checked by the server in 2.2.

2.5 Google Drive upload (optional)

• Google sign-in is requested only when you connect Google Drive in Settings. The only scope requested is drive.file, which allows access only to files and folders created by NestClip; the app cannot see your other Drive files.
• Only files you choose to upload are sent directly from your device to Google, into the NestClip folder in your Drive. They never pass through our servers.
• Google user data is used only to provide the upload feature. It is not used for advertising and is not sold or transferred to others. NestClip's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Disconnecting revokes the app's Google access. Files already uploaded remain in your Drive.

2.6 NAS upload (optional)

Files are sent only to the FTP/FTPS server you configured. FTP is not encrypted, so FTPS is recommended. NAS details are never sent to us.

2.7 Connection helper (optional, off by default)

Works only if you turn it on. Domain name lookups (DNS) for sites opened inside the app are encrypted and sent to Cloudflare's DNS-over-HTTPS service (cloudflare-dns.com), and connections are split by a local proxy running on your device. It is not a VPN and does not change your system DNS, certificates or IP address. See Cloudflare's 1.1.1.1 privacy policy.

3. Permissions

4. Sharing and processors

We do not sell personal information and share it only as follows.

5. International transfers

These recipients may process data in the United States and other countries. Entitlement server location: Malaysia (Kuala Lumpur). If you do not want this, you can avoid rewarded ads, Google Drive and the connection helper, but the related features (such as free saves) will not be available.

6. Children

NestClip is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age in your country, such as 14 in Korea or 16 in some EU countries).

7. Your choices and rights

• On-device data: clear history, close private tabs, delete library files in the app, or delete the app.
• Google Drive: disconnect in Settings or revoke access in your Google Account settings.
• Entitlement server data: request access, correction, deletion or restriction at builder.ez@gmail.com. Deleting your install ID removes remaining free saves; Lifetime Premium can be verified again with the store's Restore Purchases.
• Residents of the EU/UK (GDPR), California (CCPA/CPRA) and other regions may exercise rights under local law and may complain to a supervisory authority. Legal bases: contract (entitlements, uploads you request), legitimate interests (abuse prevention, security) and consent where required (ads, tracking).

8. Security

Connections use HTTPS with TLS certificate validation. Passwords, PINs and tokens are kept in the system's secure storage and never written to logs or state files. The server keeps minimal data with restricted access.

9. Changes

We will announce changes on this page and in app update notes at least 7 days before they take effect (30 days for changes that materially affect your rights).

10. Contact

Operator: ezBuilder
Privacy contact: ezBuilder (builder.ez@gmail.com)
Email: builder.ez@gmail.com