Privacy policy

Effective date: 6 November 2026

This policy explains what data the QueenNest app (Android and iOS) processes, why, who it is shared with and how you can exercise your rights. It follows the Brazilian General Data Protection Law (LGPD) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are

The controller of the personal data processed by the app is QueenNest. For any privacy matter, including exercising your rights, write to contato@vicleviit.com.br.

2. Data we collect

Account: e-mail and password, managed by Firebase Authentication (Google). The app never sees or stores your password.
Sign in with Google: if you choose this option, Firebase Authentication receives your name, e-mail address and Google account identifier from Google. The app only requests the basic openid, email and profile scopes and never receives your Google password.
Profile: display name and preferences (language, region, time zone, theme and alerts).
Household data created by the family: tasks, routines, calendar, rooms, pantry, shopping, recipes, meal plan, education, children’s names and birth years, and kids mode progress (stars and goals).
Family photos: 256 × 256 pixel thumbnails, cropped and compressed on the device before being saved, visible only to active household members.
Data kept only on the device: the kids mode PIN (as a salted hash), the Google Calendar selection and event cache, and other local preferences.

3. Google Calendar (optional)

Scope: read-only (https://www.googleapis.com/auth/calendar.readonly), requested only when an adult taps “Connect Google Calendar”. The Google account used for the calendar may differ from the one used to sign in to QueenNest.
What we read: the list of your calendars and, in the calendars you choose, the events from the previous month to the next month, with only identifier, status, title, start and end. We do not read descriptions, locations or attendees.
What we use it for: solely to show those events to you in the app, alongside the family calendar and in your daily plan. The app never creates, changes or deletes events in Google.
Where it is kept: the access token is obtained on the device and sent only to Google (www.googleapis.com). The calendar selection and an event cache are kept only in your device’s local storage. Calendar data is not stored on our servers, is not sent to Firestore, to the AI server, to Analytics or to advertisers, and is not shared with anyone, not even with the other adults in the household.
How to revoke: in Google Calendar settings, tap “Disconnect Google Calendar” to delete the selection and cache from the device. You can also remove access at any time at myaccount.google.com/permissions.

Limited Use. QueenNest’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Calendar data for advertising, do not sell it, do not transfer it to third parties, do not allow humans to read it and do not use it to develop, improve or train artificial intelligence or machine learning models.

4. Voice

The microphone is used only when an adult taps the voice button. Recognition happens on the device or through the operating system’s speech recognition service. The app does not record or store audio and does not send the transcript to its own servers or to Analytics. If you use your voice to ask the AI for something, the recognised text follows the rules in section 7.

5. Technical data

Crash reports (Firebase Crashlytics): device and app data at the time of the error (model, OS version, app version and stack trace) and the internal account identifier, so we can find and fix crashes.
Aggregated usage (Google Analytics for Firebase): screen names and product events, with no personal data and no family text.
Remote configuration (Firebase Remote Config): technical app and device data to enable or adjust features.

6. Ads (free plan only)

Google AdMob receives the device advertising identifier, technical data and ad interaction data to serve and measure ads and prevent fraud. Where the law requires it, we ask for your consent through Google’s consent form (UMP); without consent for personalisation, only non-personalised ads are shown. No family, task or child data is sent to AdMob, and kids mode shows no ads. For the optional rewarded ad, only the account identifier and a random session code are sent to validate the AI credit reward. Premium subscribers see no ads. Learn how Google uses data from partner apps at policies.google.com/technologies/partner-sites.

7. Artificial intelligence (optional)

When you tap “Ask AI” or “Import recipe”, the typed or spoken text, or the recipe link and page content, is sent to the app’s server (Cloudflare Worker). When importing, the server first reads the page’s structured data without AI; AI is used only if you confirm. AI processing is done by a provider through OpenRouter, with routing restricted to providers that do not retain the data or use it for training (data_collection: deny).

Only the minimum data for the request is sent: the sentence, the date, the time zone and, if you mention a family member, only their first name and whether they are an adult or a child. Full names, photos, e-mail addresses and other children’s data are not sent.
The server does not keep the text. It only keeps the household’s monthly credit count and a per-user rate counter.
Nothing is saved without your confirmation. The app keeps a history of AI-created actions in the household (type, title, cost, author and date), which lets you undo the last one.
The app shows a notice on first use and again whenever this text changes.

8. Recipe search

Recipe search runs directly from your device against the sites on an allow-list. Those sites receive the search term and the normal technical data of any request, such as the IP address. Nothing from the search is stored by the app or on our servers before import. When you import and save a recipe, the household keeps only the name, ingredients, method and servings; the photo and source link are not stored.

9. Purposes and legal bases

Providing the service (contract): creating the account, syncing the household between adults, alerts, AI and subscriptions.
Legitimate interest: stability, security, fraud and abuse prevention and aggregated usage metrics.
Consent: personalised ads (where required by law), microphone access and Google Calendar access. You can withdraw consent at any time.
Compliance with legal obligations, where applicable.

We do not sell family data. We share data only:

with the active adults of the same household, who see the household data;
with Google Firebase (authentication, database, crash reports, metrics and configuration), as a processor;
with Cloudflare and OpenRouter (and the AI provider it selects), as processors for AI processing, when you use that feature;
on the free plan, with Google AdMob for advertising (advertising identifier and ad interaction data);
with Google Play, the App Store and RevenueCat, if you subscribe to Premium (section 15);
with authorities, when required by law.

11. Storage and security

Account and household data are stored on Google Cloud (Firebase) in the southamerica-east1 region (São Paulo, Brazil), encrypted in transit and at rest. Access is restricted by security rules that only grant household data to its active members. Some processors (Cloudflare, OpenRouter and AI providers, RevenueCat and Google’s metrics services) may process data outside Brazil, under appropriate contractual safeguards.

12. Children

The app is intended for adults. Children’s data (name, birth year, optional photo, tasks and stars) is entered by their parents or guardians and is visible only to household members. Kids mode is opened and closed by an adult with a PIN and shows no ads.

13. Retention and deletion

We keep data while the account exists. You can delete your account and data at any time in the app or request deletion by e-mail; see how on the Delete account page. Deletion in the app is immediate. E-mail requests are handled within 30 days. Crash reports and aggregated metrics follow Google’s retention periods, and technical server counters (credits and rate limits) expire automatically.

14. Your rights

You can request confirmation of processing, access, correction, anonymisation, portability, deletion, information about sharing and review of automated decisions, and you can withdraw consent and object to processing. Most data can be viewed, corrected and deleted directly in the app. For other requests, write to contato@vicleviit.com.br. You can also complain to the Brazilian data protection authority (ANPD) or to the authority in your country.

15. Subscriptions

Premium payments are processed by Google Play or the App Store and managed by RevenueCat; the app never receives card data. RevenueCat receives the account identifier and the household identifier to link the subscription to the household. The app’s server (Cloudflare Worker) receives purchase, renewal and expiration notices from RevenueCat and stores only the household’s plan, without keeping the content of the notice.

16. Changes and effective date

We may update this policy. Relevant changes will be announced in the app or on this page, with the new effective date. This version is effective from 6 November 2026.