Privacy Policy
In short: Nesora has no account and no Nesora server that stores your photos. Face recognition, grouping, text reading and other analysis run on your device. Face data is kept only on your device. A photo leaves your device through Nesora only when you choose to share or export it. There are no ads, no analytics or tracking SDKs, and we never sell data. On Android, Google ML Kit sends Google limited diagnostic information (never your photos, faces or text) — details below.
1. Who we are
Nesora (“Nesora”, “the app”) is published by NextAI (nextaivn.com) (“NextAI”, “we”, “us”). Legal entity: [To be confirmed: legal entity name], [To be confirmed: registered address].
This policy explains what the Nesora mobile app (iOS and Android) and this website do with information. Questions about privacy: lienhe@nesora.app.
2. No account
Nesora does not have accounts, sign-up or login. We do not run a server that receives or stores your photos, faces, names, notes or other content you create in the app. Because of this, we generally have no access to that information and cannot see, recover or hand it over.
3. What Nesora processes and where
This table describes the current version of the app.
| Information | Where it comes from | Where it is stored | Does it leave your device? |
|---|---|---|---|
| Photos in your library | Your device’s Photos permission (all photos, or only those you select) | Originals are not copied. Nesora creates small preview images (WebP, at most 1080 px) in the app’s private folder. | Only when you share or export |
| Photos imported from a ZIP file, scanned paper photos | Files you pick, or the document scanner | A copy in the app’s private folder | Only when you share or export |
| Photo metadata: date taken, GPS coordinates stored in the photo (EXIF), dimensions | Your photo library | Local database on your device | No. Nesora does not use your device’s location and does not look up maps or addresses online. |
| File fingerprints (MD5, perceptual hash) and sharpness scores, used to detect duplicates | Calculated on your device | Local database | No |
| Face data: face box, 5 facial landmarks, quality score, 128-number face vector (SFace), “not a real person” score (for statues, posters, cartoons) | Apple Vision (iOS) or Google ML Kit (Android) plus the SFace model, all running on your device | Local database | No |
| Person profiles: name, date of birth, date of death, memorial setting, memorial notes | You type them in | Local database | No — unless you export a photobook that includes names |
| Personal recognition model (face samples, thresholds, adjustments learned from your confirmations) | Learned on your device from your confirmations | Local database | No |
| Text read from images (OCR), notes, Archive drawers | Apple Vision (iOS) or Google ML Kit Text Recognition (Android), plus PaddleOCR models bundled in the app for scripts these do not read (Cyrillic, Thai and Arabic on Android; Devanagari on older iOS) — all on your device | Local database and local search index | No |
| Pro status | App Store or Google Play | A flag in the local database | Payments are processed by Apple or Google; Nesora never receives your card details |
| Face ID / Touch ID / fingerprint used for App lock | Your device’s operating system | Nesora never receives biometric data — only a yes/no result from the system | No |
Nesora does not have: accounts, a Nesora server for your content, advertising, advertising/analytics/tracking SDKs (such as Firebase Analytics or Crashlytics), or any sharing of data with third parties for marketing.
4. On-device processing
Face detection and recognition, grouping faces, reading text (OCR), classifying screenshots and documents, calculating ages and detecting duplicates are performed on your device. Nesora does not send your photos anywhere to be analysed. Nesora never modifies your original photos: dates you change are stored in Nesora’s own database.
Large libraries may be processed in the background (for example, while your phone is charging) using the operating system’s background task features. This processing also runs on your device.
5. Face data
In many places, information derived from faces is treated as biometric or sensitive personal data. Nesora uses it only to provide the features you use: grouping photos of the same person, People profiles, ages, Generations Mirror, Two Timelines and Face time-lapse.
- Face vectors, landmarks and the personal model learned from your confirmations are stored only on your device. Nesora never uploads them, and we never receive them.
- We do not use face data to identify people against any outside database, to advertise, or for any purpose other than the features in the app.
- If an encrypted backup feature is offered in the future, face data will not be uploaded; it would be recalculated on your device after restoring (see section 18).
- You can delete face data at any time (see section 11). Uninstalling the app also removes it from the device.
Your photos may show other people, including family members and children. Please use Nesora with care and respect for them.
6. Permissions
Nesora asks your operating system for these permissions. You can change them at any time in your device settings.
- Photos — to read your photos and build your timeline. You can allow all photos or only selected photos (“limited access” on iOS, “selected photos” on recent Android). With limited access, Nesora only sees what you choose.
- Add to Photos (iOS) — only to save images you create in Nesora, such as a Generations Mirror image, to your library.
- Camera — to scan old paper photos and documents. Scanning uses the system document scanner (VisionKit on iOS; Google Play services ML Kit Document Scanner on Android).
- Face ID / biometrics — only if you turn on App lock or lock a profile. The system checks your face or fingerprint and tells Nesora only whether it succeeded.
- Media location (Android: ACCESS_MEDIA_LOCATION) — to read the GPS coordinates already stored inside your photos (EXIF), used for places in the app. Nesora does not request your device’s location.
- Background processing — to continue scanning a large library in the background, for example while charging.
7. Network connections
Nesora works without an account and its core features work offline. These are the connections that can happen:
| Component | What is sent | Notes |
|---|---|---|
| Google ML Kit — Android only (face detection, text recognition, image labelling) | Device information (manufacturer, model, OS version, ML hardware accelerator), app package name and version, and performance metrics, for diagnostics and usage statistics. Sent over HTTPS. | Your photos, faces and text are not sent. See Google’s ML Kit data disclosure. |
| Document scanner (Android: Google Play services ML Kit Document Scanner; iOS: Apple VisionKit) | Scanning is processed on your device | On Android, the scanner module may be downloaded through Google Play services. |
| Apple Vision — iOS | Nothing by Nesora; recognition runs on the device | iOS does not use Google ML Kit. |
| App Store / Google Play billing | Purchases are handled by Apple or Google | Governed by Apple’s or Google’s privacy policies. |
| System share sheet | Only the files you choose to share | They go to the destination you pick. |
Apple and Google may also give us aggregated statistics about the app (for example, downloads or crash rates) under their own policies and your device settings. These do not include your photos or face data.
8. No ads, no tracking, no selling
Nesora shows no ads and contains no advertising, analytics or tracking SDKs. We do not track you across apps or websites, and we do not sell or share personal data for advertising.
9. Sharing and exports
A photo or other content leaves your device through Nesora only when you choose to: sharing with the system share sheet, or exporting (for example a PDF photobook or a Story image). Where it goes is your choice, and what happens to it there is governed by that service.
10. Retention
Information created by Nesora stays on your device until you delete it in the app, delete the related profile, or uninstall the app. We do not keep copies.
11. Deleting your data
- Everything: in the app, go to Settings › Privacy › Delete all Nesora data. This deletes Nesora’s database (faces, profiles, notes, OCR text, drawers), previews and the imported or scanned photos Nesora keeps. It does not delete the original photos in your library.
- One person or one face: from that person’s profile.
- Uninstalling the app makes the operating system delete Nesora’s private folder.
See Delete your data for step-by-step instructions.
12. Device backups
Your phone’s own backup (for example iCloud Backup on iPhone, or Google backup on Android) may include Nesora’s private folder, depending on your settings. These backups are made and stored by Apple or Google under your account and their policies — not by Nesora. You manage them in your device settings.
13. Security
Nesora’s data lives in the app’s private storage, which the operating system protects from other apps. You can add App lock or lock individual profiles with Face ID, fingerprint or your device passcode. Keep your device protected with a passcode and up to date. No method of storage is perfectly secure, but keeping data on your device and off our servers greatly reduces the risk.
14. Children
Family photos often include children. Nesora is made for adults managing their family’s photos; it is not directed at children and has no accounts. Face data about anyone in your photos, including children, stays on your device and is not received by us. If you believe a child has contacted us and shared personal information, write to lienhe@nesora.app and we will delete it.
15. International users and legal bases
Nesora is available in many countries. Because analysis happens on your device and we do not collect your content or face data, many obligations that normally apply to a company holding such data do not arise in the same way. Where privacy laws do apply to us, we aim to meet them:
- European Economic Area, UK and Switzerland (GDPR / UK GDPR): the limited personal data we do handle (for example, emails you send us) is processed to answer you (our legitimate interest, or steps at your request). Face features are used only on your device, by your choice, and you can delete that data at any time. You may complain to your local data protection authority.
- Vietnam: we handle personal data in line with Vietnamese personal data protection law, including Decree 13/2023/NĐ-CP on personal data protection and the rules that replace or implement it. Face-derived data is treated as sensitive personal data and is processed only on your device.
- United States: we do not sell or share personal information for cross-context behavioural advertising (as defined in California law, CCPA/CPRA). We do not collect, store, sell or disclose biometric identifiers or biometric information; such data is created and kept on your device under your control, which is relevant to state biometric laws such as Illinois BIPA, Texas and Washington.
This section is a general statement. It is not a claim of certification or a guarantee of compliance with any specific law.
16. Your rights
Depending on where you live, you may have rights to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. For data stored by Nesora on your device you can exercise these directly in the app — view and edit profiles, delete a person, or delete everything. For anything you have sent us (such as an email), contact lienhe@nesora.app. We will not treat you differently for exercising your rights.
17. This website and contacting us
- Website: nesora.app uses no cookies, no analytics and loads no third-party resources. Your language choice is saved in your browser’s local storage only. Our hosting provider may process technical data such as IP addresses in server logs to deliver and protect the site.
- Email: if you write to us, we receive your email address and whatever you include. We use it only to reply and keep it only as long as needed to handle your request.
18. Future features
Sharing family albums, end-to-end encrypted cloud backup and phone-to-phone transfer are not available today. If we add them, we will update this policy and its effective date before release, and ask for your clear consent in the app before any such feature is turned on. Face data would still not be uploaded.
19. Changes to this policy
We may update this policy as the app changes. We will change the “Last updated” date above and, for significant changes, tell you in the app or on this website before they take effect.
20. Contact
Email: lienhe@nesora.app
NextAI — nextaivn.com · [To be confirmed: legal entity name and registered address] · [To be confirmed: EU/UK representative, if required]