NestSafeX is built so that we never see your data. This page explains exactly what that means, and the short list of information that does reach us.
The short version
Everything you put into NestSafeX stays on your own device. Your passwords, bills, documents and family records are encrypted on your computer or phone before they are saved, using a key derived from your master password. There is no NestSafeX server holding your vault, no account to create, and no copy of your data anywhere we can reach. We could not read your vault if we wanted to, and we could not hand it over if we were asked to.
That is the design of the product, not a promise about how carefully we guard a database. There is no database. The rest of this page explains the small amount of information that does reach us — almost all of it because you bought something.
Who we are
NestSafeX is made by BlueJeera Inc., a company based in Ontario, Canada.
Postal address: [ BUSINESS ADDRESS — replace this ]
Email: info@bluejeera.com
If you have a question about this policy or about information we hold, email us and a person will answer.
Your vault data
When you create a vault, NestSafeX derives an encryption key from your master password using PBKDF2 with 200,000 iterations, then encrypts your data with AES-256-GCM. The encrypted result is written to your browser's local storage on your device, or to a file you choose to save.
- Your master password is never transmitted, and never leaves the device you typed it on.
- Your vault contents are never transmitted to us or to anyone else.
- We hold no key, no recovery mechanism and no backdoor.
What this means if you forget your password
We cannot help you. There is no reset link, no support process, and no technical route back in. The data is unrecoverable. This is the direct consequence of the guarantee above, and it is the trade you accept when you use the product. Keep a written copy of your password somewhere safe, and export a backup regularly.
What we actually receive
| Information | Why, and who handles it |
|---|---|
| Purchase details | Your name, email address and billing country when you buy a licence. Payment is processed by Lemon Squeezy, who act as Merchant of Record for the sale. Your full card details go to them and their payment processors, never to us. We see the order record and your email address. |
| Licence activation | When you activate a key, the app sends the licence key and a short generated device label (for example “NestSafeX · Windows · a1b2c”) to Lemon Squeezy's licence service. This is what enforces the three-device limit. No vault content is sent — only the key and that label. |
| Website server logs | Our web host records standard request logs when you visit bluejeera.com: IP address, browser user-agent and timestamps. These are used for security and troubleshooting, and are not linked to any vault. |
| Email address, for updates | Customers are added to our announcement list, run through Lemon Squeezy. Every email carries an unsubscribe link that works immediately. |
| Support emails | If you write to us, we keep the correspondence so we can follow up. Please never send us your master password or an unencrypted export. |
Third parties
We keep this list deliberately short, and it is the whole list:
- Lemon Squeezy — checkout, payment, licence keys and customer email. They are the Merchant of Record for every sale.
- Our web hosting provider — serves bluejeera.com and keeps the server logs described above.
- YouTube (Google) — the demo video embedded on the NestSafeX page is hosted by YouTube. Playing it loads content from Google's servers and may set cookies, governed by Google's own privacy policy. The video is the only third-party content on the page.
What we do not do
- No analytics tools. No Google Analytics, no Plausible, no Fathom, nothing counting your visit.
- No advertising, no tracking pixels, no fingerprinting, no session recording.
- No selling, renting or sharing of personal information. Ever, to anyone, for any price.
- No profiling and no automated decision-making about you.
How long we keep things
Order and invoice records are retained for as long as Canadian tax and accounting rules require, currently six years. Your email stays on the announcement list until you unsubscribe, after which it is removed. Support correspondence is kept for up to two years. Server logs rotate within a few months.
Your rights
Under Canadian privacy law (PIPEDA), and under the GDPR or UK GDPR if you are in the EU or the UK, you can ask us to show you what we hold about you, correct it, delete it, or send it to you in a portable form. You can also withdraw consent for marketing email at any time.
Email info@bluejeera.com and we will respond within 30 days. There is no charge. Note that we can only act on the information listed above — your vault is not ours to produce or delete, it is on your device and under your control alone.
If you are unhappy with how we handled a request, you may complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority in the EU or UK.
Children
NestSafeX is sold to adults managing a household. It is not directed at children and we do not knowingly collect information from anyone under 16.
Changes to this policy
If this policy changes we will post the new version here with a new effective date. If a change materially affects what we collect or how we use it, customers on our list will be told by email before it takes effect.