Nestli Privacy Policy

Last updated: 13 April 2026

This Privacy Policy describes how Nestli ("we", "our", or "the app"), a mobile application for tracking baby care activities, collects, uses, stores, and shares information about you when you use the app.

1. Information We Collect

We collect the following categories of information:

• Account information — email address, username, and password (stored in hashed form) provided during sign-up.
• Baby profile data — baby name, date of birth, sex, and cover photo that you voluntarily enter.
• Care logs — feeding, diaper, sleep, growth, and health records that you create in the app.
• Photos — images you choose to upload from your device camera or photo library.
• Usage data — basic, non-identifying information about how the app is used (e.g. feature interactions) for reliability and improvement.

2. Camera and Photo Library Access

Nestli requests access to your device camera and photo library solely so that you can capture or select photos of your baby to attach to your records. Camera access is used only when you explicitly invoke a photo-taking feature inside the app. Photos are uploaded to our secure storage (see section 4) and are never shared publicly or with third parties.

You can deny or revoke camera and photo library permissions at any time via your device settings. Denying these permissions will disable photo features but will not affect other parts of the app.

3. How We Use Information

• To provide the core features of the app — storing and displaying your baby care records.
• To authenticate you and keep your account secure.
• To send transactional emails such as email verification, password reset, and family invites.
• To provide the optional AI assistant feature, which sends a summary of recent log activity (not raw data) to a third-party AI provider to generate responses to your questions.
• To diagnose problems and improve reliability.

We do not sell your personal information. We do not use your data for advertising.

4. Data Storage and Security

Your data, including photos, is stored on Supabase, a third-party backend provider, using encrypted connections and row-level security so that only you and the family members you explicitly invite can access your baby records. Photos are stored in a private bucket and served via short-lived signed URLs.

5. Third-Party Services

• Supabase — authentication, database, and file storage.
• Resend — transactional email delivery (verification, password reset, invites).
• OpenAI — optional AI assistant. Only aggregated log summaries (not raw logs or photos) are sent when you explicitly ask a question.

6. Family Sharing

You may invite other users (for example, a partner or caregiver) to view or edit records for a specific baby. Invited members only gain access after accepting an invite code or email invitation. You can revoke their access at any time from the app.

7. Children's Privacy

Nestli is designed for use by adult caregivers to record information about their own children. The app is not directed at children under 13, and we do not knowingly collect personal information directly from children.

8. Your Rights

You can:

• Access, update, or delete your records from within the app.
• Delete your account, which will remove your profile and associated records from our systems.
• Contact us to request a copy or deletion of your data.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal information and uploaded photos are removed from live systems. Routine backups may retain data for up to 30 days before being purged.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or by email. Continued use of Nestli after a change constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or your data can be sent to:
privacy@nestli.clarechen.com.au