Privacy Policy
This policy explains how e2 apps handles information when you use Nestcut, a cut list optimiser for sheet goods and lumber. You can use Nestcut without creating an account or giving us your name or email.
In short: your projects are stored so they're backed up and can follow you to a new phone. Voice and photo entry send a recording of what you said (or the words your phone heard) or the photo you took to AI services to read the dimensions, and nothing is kept. We don't sell your information, we don't show ads, and you can delete everything from inside the app.
1. Information we process
Your account
When you first open Nestcut, it creates an anonymous account identifier for you with Google Firebase. It isn't linked to your name or email. If you choose to sign in with Apple or Google, so your projects can follow you to a new phone, we receive the email address and account identifier that Apple or Google provides. With Apple you can choose to hide your email, in which case we receive a private relay address.
Projects and settings
Your projects (materials, stock sizes, parts, dimensions, quantities, edge banding and notes) and your app settings (units, blade kerf, preferences) are stored in Google Firebase, linked to your account identifier, so they're backed up and available when you're offline. Cut plans are calculated on your device.
Voice and photo entry
Voice and photo entry are optional, and Nestcut asks before you use them for the first time.
- Voice. While you speak, your phone's built-in speech recognition (Apple or Google) shows the words on screen. Where on-device recognition isn't available, your phone's speech service may process the audio under Apple's or Google's own terms. On iPhone, Nestcut also records what you say (up to 60 seconds, only while the microphone screen is open) and, when you tap Done, sends the recording to our server to be transcribed by a speech-to-text service, which hears numbers and woodworking terms more reliably; the words your phone heard are sent with it as a backup. On Android, only the words your phone heard are sent, never a recording. The recording is deleted from your phone once it's sent, and isn't kept by us or the speech-to-text service.
- Photo. When you photograph or choose a cut list or sketch, the image is resized on your device before it's sent.
A voice recording is sent from our server through OpenRouter to a speech-to-text model (currently Microsoft's MAI-Transcribe, hosted on Microsoft Azure, with ElevenLabs as the backup) and turned into text. The text or photo, together with your project's units and material names, is then sent through OpenRouter to Anthropic's Claude models to read the parts and dimensions. The parts it suggests, and the words they were read from, are shown to you to check before anything is added. We don't keep the recording, text or photo after the request finishes. We keep only a count of how many times you've used these features, to apply usage limits. We only route these requests to endpoints that don't retain them or use them for training (zero data retention). OpenRouter, Microsoft, ElevenLabs and Anthropic process them under their commercial terms.
Purchases and subscriptions
Apple or Google processes your payment. We don't receive or store your card details. RevenueCat receives your purchase history, subscription status, product identifiers and your Nestcut account identifier, so the app can provide and restore Pro access and we can understand subscription performance.
App analytics
If you leave "Share anonymous usage data" switched on (Settings → Privacy), PostHog receives events about how features are used, for example "cut plan created" or "PDF exported". It also receives your pseudonymous account identifier, app version, device and operating-system information, language, and a broad region inferred from your IP address. Analytics events don't contain your project names, part names or dimensions. You can switch analytics off at any time; Nestcut then stops sending them.
Crash and diagnostic data
Firebase Crashlytics processes crash reports and diagnostics, including stack traces, app state, app version, device model, operating-system version and an installation identifier. We use these to find and fix faults.
App integrity
To protect our server from abuse, Firebase App Check asks Apple (App Attest) or Google (Play Integrity) to confirm that requests come from a genuine copy of Nestcut. This uses device and app attestation data handled by Apple or Google.
Exports
PDFs and labels are created on your device. They go only where you choose to send or save them.
Information you send us
If you email us, we receive your email address and whatever you choose to include.
2. Service providers
We use these providers to run Nestcut. They process information under their own terms and privacy commitments.
- Google Firebase: anonymous accounts and sign-in, project storage, our server functions, crash reporting, app integrity checks and hosting this page. Firebase privacy information.
- OpenRouter: routes voice recordings, text and photos to the AI models, without retaining them. OpenRouter privacy policy.
- Microsoft (Azure) and ElevenLabs: turning voice recordings into text, through OpenRouter, without retaining them. Microsoft privacy statement and ElevenLabs privacy policy.
- Anthropic: reading parts and dimensions for voice and photo entry. Anthropic privacy policy.
- RevenueCat: purchase validation, Pro access and subscription analytics. RevenueCat privacy policy.
- PostHog: product analytics, if you allow it. PostHog privacy policy.
- Apple and Google: app stores, payments, sign-in, speech recognition and app integrity. Apple privacy policy and Google privacy policy.
These providers may process information in Australia, the United States, Europe or other countries where they operate. We use providers that publish contractual and technical safeguards for international transfers.
3. Why we process information
- Store, back up and sync your projects, and move them to a new phone when you sign in.
- Read parts from your voice or photo when you ask us to.
- Provide, validate and restore purchases and Pro access.
- Understand which features are useful, if you allow analytics.
- Find crashes, diagnose faults and keep the service secure.
- Answer support requests, and meet legal, tax, security and store-policy obligations.
Where the law requires a legal basis, we rely on performing our contract with you (providing the app and the features you use), our legitimate interests in operating, securing and improving Nestcut, your consent where required (for example analytics in some regions), and compliance with legal obligations.
We don't sell or share personal information for advertising. We don't use your information for advertising, credit or insurance decisions, or for automated decisions with legal or similarly significant effects.
4. Retention and security
Projects and settings are kept until you delete them or delete your data. Voice recordings, transcripts and photos aren't kept by us after a request completes. Usage counters, analytics, crash data and purchase records are kept according to the providers' settings, our legitimate needs and legal requirements. Support emails are kept only as long as needed to help you and keep a reasonable record.
Data is encrypted in transit between the app, our server and our providers. Access to your projects is restricted to your own account by security rules. No system is completely secure, so we can't guarantee absolute security.
5. Your choices and rights
- Delete everything: Settings → Data → Delete all my data removes your projects, settings and account from your phone and our servers.
- Analytics: switch off Settings → Privacy → Share anonymous usage data.
- Voice and photo: they're optional; you can always type parts instead.
- Subscriptions: manage or cancel them in your Apple or Google account settings.
- Your rights: depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of your information, or to data portability. Contact us to use them. Because Nestcut accounts are anonymous unless you sign in, we may need your in-app account identifier (shown in Settings) to find your data.
Nestcut isn't directed at children under 13 (or the age required in your country), and we don't knowingly collect information from them.
If we make material changes to this policy, we'll update the date above and, where appropriate, tell you in the app.
6. Contact
For privacy questions or requests, email hello@e2apps.com.