Privacy policy
Last updated: 27 October 2026
Controller
Pascal Amsler, Spycherweg 3, 8957 Spreitenbach, Switzerland
E-mail: kontakt@nestcal.app
What Nestcal stores
- Account: e-mail address, password (only as an encrypted hash), name, language.
- Household: household name, invitation code, members with role (admin/user) and colour.
- Events and tags you enter in Nestcal (title, time, place, notes, participants, answers).
- Device identifier for notifications (push token), language and platform of the device.
This data is only visible to the people in your household. We use it solely to make the app work.
Where the data is stored
- Supabase (database and sign-in), data centre in Switzerland (Zurich).
- Resend (sending e-mails with confirmation codes), sent from the EU.
- Notifications are delivered via the Expo push service and Apple (APNs) or Google (Firebase Cloud Messaging). The push token and the notification text are transmitted.
- Cloudflare runs this website and the invitation links.
Data processing agreements are in place with all providers; transfers outside Switzerland/the EU rely on standard contractual clauses.
Calendar on your phone
If you turn on sync with your phone calendar (e.g. iCloud, Google or Microsoft 365), Nestcal writes confirmed events into the chosen calendar on your device. Under “Show phone events” you decide for each calendar whether its events appear in Nestcal: “Only me” (stays on your device), “Busy” (only the time goes to your household, without title, place or notes) or “Share all” (title, time, place and notes go to your household). Without this choice, no events from your phone calendar are sent to our server. Nestcal has no access to your Microsoft or Google account.
Camera
The camera is only used to scan an invitation QR code. No images are stored or transmitted.
No tracking, no ads
Nestcal contains no advertising, no analytics or tracking tools, and does not sell any data.
Retention and deletion
Data is kept as long as your account exists. You can delete your account in the app at any time (see Delete account). Your data is then also removed from backups within 30 days.
Your rights
You have the right to access, rectification, erasure, restriction and data portability, and the right to lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: the authority of your country). Write to kontakt@nestcal.app.
Children
Nestcal is not directed at children under 13.