PRIVACY POLICY - NESTAI

Last Updated: July 17, 2026

1. INTRODUCTION AND SCOPE

This Privacy Policy ("Policy") is issued by LEAP GAME COMPANY LIMITED ("we," "us," or "our"). It governs the data practices for our mobile application, NestAI (the "App"), and all related services (the "Services").

About NestAI: NestAI is an AI-powered design application created to help you visualize and explore new interior and exterior design possibilities for your living spaces. Using advanced artificial intelligence, our App allows you to upload images of your rooms or home and instantly generate creative redesigns, helping you find inspiration and reimagine your environment. This Privacy Policy explains how we handle your data to provide this service.

This Policy is a legally binding agreement. By downloading, installing, or using our Services, you acknowledge that you have read, understood, and agree to the data practices described herein. If you do not agree with this Policy, you must not use the Services.

For the purposes of applicable data protection laws, such as the EU General Data Protection Regulation (GDPR), we are the Data Controller of your Personal Data.

2. OUR PRIVACY COMMITMENT

Our approach to privacy is founded on the following core principles:

Transparency: We are committed to being open and clear about how we handle your data, especially in the context of our AI-powered features.
Purpose Limitation: We will only collect and process your data for the specified, explicit, and legitimate purposes articulated in this Policy.
Data Minimization: We adhere to the principle of collecting only the data that is strictly necessary to provide and improve our services.
Responsible AI: We are committed to the ethical use of artificial intelligence. A core tenet of this commitment is that we do not use your personal content to train our AI models.
Security by Design: We integrate robust security measures to protect the confidentiality, integrity, and availability of your Personal Data.

3. DATA WE COLLECT AND PROCESS

To provide and improve our Services, we collect several categories of data.

User-Provided Content (Processed Ephemerally for AI Functionality)

This is the data you provide to enable the core design features of the App. We have engineered our systems to treat this data with the highest level of privacy.

What we collect:

Images: Photographs or images of interior or exterior spaces that you upload to the App for redesign or style analysis ("User Images").
Text Prompts: Descriptive text you may input to guide the AI's creative process ("User Prompts").

How and why we process it:

When you use a feature, your User Images and User Prompts are transmitted to our servers for the sole purpose of real-time processing by our AI models to generate your requested design.
Immediate Deletion from Servers: After the AI processing is complete and the result is delivered to you, the source User Images and User Prompts are immediately and permanently deleted from our servers. They are not stored, cached, or logged on our server infrastructure.
Local Storage of Prompts: For your convenience, your User Prompts are saved locally on your device, allowing you to easily reuse or modify them. This data is removed if you uninstall the App.

Technical & Usage Data (Collected Automatically for Service Operation and Advertising)

To ensure our App functions correctly, to resolve technical issues, and to support our advertising-based model, we automatically collect certain technical data.

What we collect:

Device and Network Information: Your IP address, device manufacturer and model, operating system version, screen dimensions, time zone, network state (e.g., Wi-Fi), and system language.
Application and Advertising Identifiers: Your device's advertising identifier (e.g., Google Advertising ID on Android), the App's version, and unique device identifiers.
Usage and Interaction Data: Information about your interactions with the Services, such as app launches, features used, time spent on pages, and clicks. This also includes information about your interaction with advertisements shown to you.

Why we collect it: To maintain and improve our Services, analyze usage trends, ensure security, and to facilitate our advertising monetization.

Communications Data (Voluntarily Provided)

When you voluntarily contact us for customer support or to provide feedback, we collect your email address and the content of your communications. This data is used exclusively to respond to your inquiries.

4. OUR USE OF ARTIFICIAL INTELLIGENCE (AI)

Transparency in our use of AI is a cornerstone of our commitment to you.

AI Functionality: The core purpose of our App is to use generative AI to create new interior and exterior design concepts based on your input.
No Training on Your Data: We state unequivocally that your User Images and the resulting AI-generated designs are not used to train or improve our AI models. Your content is your own, and we do not use it for our model development.
Third-Party AI Providers: To provide specific features, we may utilize specialized AI models from third-party providers.
Google Gemini: For our "Style Match" feature, we use the Google Gemini API. When you upload a reference image for style analysis, that specific image is sent to Google's API to interpret its design elements and generate a descriptive prompt. This data is processed according to Google's API Terms of Service and Privacy Policy, which you can review here: here and here. This process is isolated to the style analysis feature.

5. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

We only process your Personal Data when we have a valid legal basis for doing so under applicable data protection laws like the GDPR. The table below outlines the purposes for which we process your data, the data categories involved, and the legal justification for each activity.

Purpose of Processing	Categories of Data Used	Primary Legal Basis and Justification
To Provide Core AI Design Functionality	User Images, User Prompts	Performance of a Contract. We process this data to fulfill our core service of providing you with the AI-generated designs that you have requested by using the App. The processing is ephemeral and essential to deliver the result.
To Maintain and Improve the Services	Technical & Usage Data	Legitimate Interest. We have a legitimate interest in analyzing usage data to resolve technical issues, fix bugs, and inform the development of new features, ensuring our App functions correctly and provides an optimal user experience.
To Enable and Personalize Advertising	Technical & Usage Data (primarily Advertising Identifiers)	Consent and/or Legitimate Interest. Where required by law (e.g., in the European Economic Area), we rely on your consent to process data for personalized advertising. In other jurisdictions, processing data for contextual advertising is based on our legitimate interest in funding our free services.
To Ensure Security and Prevent Fraud	Technical & Usage Data	Legitimate Interest. We have a legitimate interest in processing data to monitor malicious activity, prevent fraud, and protect the security and integrity of our Services.
To Comply with Legal Obligations	All relevant data categories are required.	Legal Obligation. We may be required to process your Personal Data when necessary to comply with a legal requirement, such as responding to lawful requests from government authorities.

6. THIRD PARTY SERVICES AND PARTNERS SDKS

We integrate third-party Software Development Kits (SDKs) to provide and maintain the full functionality of our Services, including our core AI features and advertising. These partners may collect data directly from your device and typically act as independent "Data Controllers." We strongly encourage you to review their privacy policies to understand their data practices.

Our primary partners include:

AI Service Providers

Google (Gemini API): Used specifically for our "Style Match" feature to analyze reference images and generate descriptive prompts. Their policies govern the data processed by this service.
- Google AI API Terms of Service
- Google Privacy Policy

Advertising & Analytics Partners

Google (AdMob & Firebase): https://policies.google.com/privacy/
Meta (Facebook Audience Network & Analytics): https://www.facebook.com/about/privacy/
AppLovin: https://www.applovin.com/privacy/
Adjust: https://www.adjust.com/terms/privacy-policy/
AppsFlyer: https://www.appsflyer.com/legal/privacy-policy/
Vungle: https://vungle.com/privacy/
InMobi: https://www.inmobi.com/privacy-policy/
Pangle: https://ad.oceanengine.com/union/media/privacy
Mintegral: https://www.mintegral.com/en/privacy/
Unity: https://unity3d.com/legal/privacy-policy/
IronSource: https://developers.is.com/ironsource-mobile/air/ironsource-mobile-privacy-policy/
Revenue Cat: https://www.revenuecat.com/privacy/

By using our App, you acknowledge that these third parties may collect and process your data as described in their respective privacy policies.

7. APPLICATION PERMISSIONS AND THEIR PURPOSES

Our App requests only the minimum permissions necessary to provide its features. You are in complete control of these permissions and can manage them at any time through your device's settings menu. We believe in transparency, so this section explains exactly which permissions the App may request and why we need them.

Permission Name	Why We Need It
android.permission.CAMERA	Allows you to take new photos of your room or house right in the App, and get the user's image to use as a base for an AI redesign (Core feature).
android.permission.INTERNET	Allows the app to access the internet.
DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION	Default app setting, not required to declare.
android.permission.ACCESS_NETWORK_STATE	Check the current state of the internet connection for the app's functionality.
android.permission.WAKE_LOCK	Keeps the screen on during using the app to ensure continuous operation.
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE	Default app setting, not required to declare.
com.google.android.gms.permission.AD_ID	Used by Google Ads to collect and manage advertising identifiers.
android.permission.ACCESS_ADSERVICES_ATTRIBUTION	Utilized for Google Ads to support advertising attribution.
android.permission.ACCESS_ADSERVICES_AD_ID	Used for Google Ads to facilitate advertising functionality.
android.permission.POST_NOTIFICATIONS	Enables sending notifications to users.
com.google.android.c2dm.permission.RECEIVE	Default app setting, not required to declare.
android.permission.FOREGROUND_SERVICE	Default app setting, not required to declare.
com.android.vending.BILLING	Enables in-app billing for purchasing items within the app.
android.permission.USE_FULL_SCREEN_INTENT	Used to display important notifications in full-screen format, reminding you not to miss key features of the app.
android.permission.RECEIVE_BOOT_COMPLETED	To restore your scheduled reminders and background tasks after your device restarts, so notifications continue working without you needing to reopen the app.

By understanding why these permissions are necessary, you can make an informed decision about your data. Your privacy and control are our priorities.

8. INTERNATIONAL DATA TRANSFERS

We operate globally, and your Personal Data may be transferred to, stored in, and processed in jurisdictions outside your country of residence (such as the United States), where our third-party partners operate. We ensure that all such transfers comply with applicable data protection laws by using legally-recognized transfer mechanisms like Standard Contractual Clauses (SCCs).

9. YOUR PRIVACY RIGHTS AND CHOICES

You have rights concerning your Personal Data, subject to limitations provided by law.

Opt-Out of Personalized Advertising: You can limit ad tracking by resetting your device's advertising identifier through your device settings (e.g., On Android: Settings > Privacy > Ads). This will limit, but not eliminate, the ads you see.
Formal Rights Requests: Depending on your jurisdiction, you may have the right to Access, Rectify, or Erase the Personal Data we hold about you. Because we do not store your User Images, erasure requests will primarily apply to Technical Data and Communications Data associated with you. To exercise any of your rights, please submit a formal request to the email address provided in Section 14.

10. JURISDICTION-SPECIFIC PROVISIONS

For Residents of the European Economic Area (EEA), UK, and Switzerland (under GDPR): You have the rights detailed in Section 10, as well as the right to data portability and the right to lodge a complaint with a supervisory authority. The legal bases we rely on are detailed in the table in Section 5.
For Residents of California (under CCPA/CPRA): You have the right to know what personal information is collected, to delete it, and to opt-out of the "sharing" of your personal information for cross-context behavioral advertising. Our use of third-party advertising SDKs may be considered "sharing." You can exercise your right to opt-out by managing your device's advertising ID as described in Section 10. We do not "sell" your data for monetary consideration.

11. CHILDREN'S PRIVACY

These Services are not directed to anyone under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personally identifiable information from children. If we become aware that a child has provided us with Personal Data, we will take steps to delete such information immediately.

12. CHANGES TO THIS POLICY

We may update this policy from time to time. If we make material changes, we will provide notice through the App or by other means to allow you to review the changes before they become effective. Your continued use of the Services after a revision becomes effective constitutes your acceptance of the updated terms.

13. CONTACT INFORMATION

For any questions, concerns, or requests relating to this Privacy Policy, please contact us:

Company: LEAP GAME COMPANY LIMITED
Website: https://leapstud.io
Support Email: support.productai@leapstud.io