Your family stays in the loop.
What Nesto saves
After you complete family vault setup, names, birthdates, conversations, files, preferences, and detailed usage are saved encrypted. Only authorized family devices hold the decryption keys. Parent email and sign-in credentials remain in restricted account storage. Nesto keeps the identifiers, age bands, safety settings, quotas, and device records needed to operate the service.
Google sign-in
If you choose Google, Nesto receives your verified email address and Google account identifier to sign you in. It does not request Gmail, Drive, contacts, or calendar access, and does not retain Google access, refresh, or ID tokens after sign-in. Google sign-in cannot unlock saved family content; you still need your enrolled passkey, private password, or recovery kit. Nesto records the privacy-policy version and time accepted when you create an account.
How questions are answered
Questions and relevant conversation history are sent through Vercel AI Gateway to AI providers to generate and check replies. Attached homework is included when you send it. Voice recordings are sent for transcription and are not saved by Nesto; you can edit the resulting text before sending it. Nesto uses age and parent settings to guide these responses. Avoid sharing addresses, school names, passwords, or other sensitive details.
What encryption does and does not cover
Nesto and its processing providers temporarily receive the question, selected history, and attachments needed to answer. Encryption protects saved content; it does not hide account relationships, traffic timing, or activity volume, and cannot prevent an operator from changing the web application. Historical plaintext backups may remain until their retention period expires. Platform reports contain only fixed weekly aggregates and suppress small or dominated groups.
What parents can do
Parents can review conversations, change learning settings and daily message limits, disconnect devices, download family data, and delete profiles or the whole account. Deleting a child removes their conversations from the active application database. Their private files are queued immediately for deletion by daily cleanup. Unsent attachments are removed at the next daily cleanup after they are a day old. Failed file deletions are retried by later cleanups.
AI needs adult involvement
Nesto checks text replies before displaying them and checks image prompts before generation. Generated images do not receive a separate visual safety review. AI and automated checks can make mistakes. Nesto is a learning tool, not a person or a substitute for family, teachers, professional advice, or emergency help.
Access and recovery
A compatible passkey or private password signs you in and unlocks your saved data. Keep the required recovery kit somewhere private; Google or email access alone cannot recover encrypted content. Parents approve each child device for seven days. Disconnecting a device blocks future access, but cannot erase content or keys it already received.