Privacy Policy

We collect the following categories of information, and only these:

• Account information. Your email address, used only for passwordless (“magic link”) sign-in, and an internal account identifier.
• Household & pregnancy information. If you set it, the last menstrual period (LMP) date used to calculate your due date and pregnancy week — this is sensitive reproductive health information. We also store optional personalization details you provide (budget range, home space size, vehicle size, travel frequency, whether this is your first baby, and whether you're expecting twins), used to tailor Registry recommendations.
• Care & Journey content. Appointments you log, Journey milestones and memories you record, and any photos or videos you attach to them.
• Registry activity. Items you favorite or mark as approved in the Registry.
• Baby name preferences. Names you like or skip. If you and your partner both like the same name, we record that as a “match” so you can both see it — we do not reveal your individual likes/skips to your partner, only mutual matches.
• Reminders. Reminder content and completion history you create (e.g. vitamins, supplements, habits).
• Push notification token. A device-specific push token and platform (iOS or Android), used solely to deliver reminder and Ask Nest notifications to your own device.
• Purchase records — no card details. If your household buys the Full Roadmap unlock, we store a record of the purchase: which platform it was made on (web, iOS, or Android), a product identifier, the payment processor's transaction id, the amount and currency charged, and when it happened. We never receive or store your full card number or other payment credentials — those are handled directly by Stripe (web) or by Apple/Google through their in-app purchase systems (iOS/Android). See Section 5 for how each processor is used.
• Ask Nest questions — processed, not stored by us. When you ask Ask Nest a question, the question text (and, where relevant, the Registry category and product context) is sent to our AI provider to generate an answer. We do not save your questions or answers on our servers. Your Ask Nest conversation history is stored only in local storage on your own device and is never transmitted to or synced with Nestyk servers. See our AI Disclaimer for details.

• We do not use any third-party analytics or advertising SDK (no Segment, PostHog, Google Analytics, or similar). Nothing about your usage is tracked for advertising purposes, and Nestyk does not track you across other companies' apps or websites.
• We do not store your full payment card number, bank account details, or other payment credentials. Full payment details for a Full Roadmap purchase are handled directly by Stripe (web) or by Apple/Google through their in-app purchase systems (iOS/Android) — we only ever receive the limited purchase record described in Section 1.
• We do not sell your personal information, and we do not share it with data brokers or advertising networks.

We use the information above solely to operate the app for you and your household partner, specifically to:

• Authenticate you and keep your account secure.
• Calculate your pregnancy week and due date, and personalize your roadmap and Registry recommendations.
• Sync Care, Journey, Registry, Reminders, and Baby Names content between you and your connected partner within the same household.
• Generate Ask Nest responses to your questions via our AI provider.
• Deliver reminder and app push notifications to your device.
• Enforce rate limits and prevent abuse of the service.
• Comply with legal obligations and resolve disputes.

Nestyk households consist of at most two members (one “mom” role and one “dad” role), connected only when both people share the same private invite code. Our database enforces this at the row level (Row Level Security): a household member can only read data belonging to their own household, never another household's data. Some content is intentionally private even from your own partner — for example, your individual Baby Names likes/skips are visible only to you until they form a mutual match, and your push notification token is never readable by your partner.

Nestyk staff do not routinely access your personal content. Limited, logged access may occur to investigate abuse, provide support at your request, or comply with law.

We use a small number of infrastructure and service providers to operate Nestyk. None of them are permitted to use your data for their own advertising purposes:

• Supabase — our database, authentication, and file storage provider. Your account data, household data, and uploaded photos/videos are stored here. Uploaded media is stored in private storage buckets and is never publicly accessible; it is only ever retrieved through short-lived, signed links (valid roughly 24 hours).
• OpenAI — processes Ask Nest questions to generate answers. Each request contains only your current question (plus relevant Registry context, if any) — never your account identity, email, or prior conversation history.
• Apple Push Notification service / Firebase Cloud Messaging — used to deliver push notifications to iOS and Android devices respectively.
• Stripe — processes Full Roadmap purchases made on the web via a Stripe-hosted checkout page. Stripe handles your full payment details directly; we receive back only a transaction id, amount, and currency.
• RevenueCat — processes Full Roadmap purchases made in the iOS or Android app, validating the purchase with Apple/Google on our behalf. To keep the unlock shared across your household regardless of which partner or device purchased it, we identify you to RevenueCat by your household id rather than your individual account id.
• Affiliate retail partners — Registry links may take you to Amazon, Target, Walmart, Babylist, or buybuy BABY. We do not share your Nestyk account data with these retailers; see our Affiliate Disclosure.

We keep your account and household content for as long as your account exists, so the app continues to work. Certain operational logs are automatically deleted on a fixed schedule: rate-limiting logs after 7 days, and internal administrative audit logs after 365 days. A minimal record that an account was deleted (which account, when, and whether the whole household was removed) is retained for 730 days for fraud-prevention and accounting purposes, after which it is purged.

• Export your data. From Profile → “Export my data,” you can download a JSON file containing your account, household, appointments, Journey milestones, Registry activity, name matches, reminders, and push token records, with time-limited links to any photos or videos. (Ask Nest chat history is not included because it is stored only on your device — export or clear it there.)
• Delete your account. From Profile → “Delete my account,” you can permanently delete your account. If you are the only member of your household, your entire household — including Care, Journey, and Registry data and uploaded media — is deleted. If you have a connected partner, only your own account, your own uploaded media, and your own personal data are removed; shared household records your partner relies on remain with them. This action cannot be undone.
• Access or correction requests. Most of your data can be viewed and edited directly in the app. For anything else, contact us at support@nestyk.app.

Nestyk is intended for use by expecting and new parents. It is not directed at children, and we do not knowingly collect information from children. Information about your baby (e.g. Journey milestones) is provided and controlled by you, the parent.

We may update this Privacy Policy as the app changes. We will update the effective date above when we do, and material changes will be communicated in-app.

Questions about this Privacy Policy or your data can be sent to support@nestyk.app.