Privacy Policy

Last updated: March 30, 2026

1. Introduction

NourishNest ("we," "our," or "us") operates the NourishNest mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting the privacy of our users and their children. By using NourishNest, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

CategoryExamplesPurpose
Account DataName, email address, passwordAccount creation, authentication, communications
Child DataChild's name (alias allowed), birth month/yearAge-appropriate food safety recommendations
Dietary PreferencesDietary style, allergies, breastfeeding statusPersonalized meal planning, allergen tracking
Usage DataMeal plans saved, recipes viewed, grocery listsProviding and improving the Service
Marketing DataEmail address, waitlist signup sourceNewsletters, product updates (with consent)

2.2 Information Collected Automatically

When you access our Service, we may automatically collect:

2.3 Children's Privacy & COPPA Compliance

๐Ÿ›ก๏ธ Important: NourishNest is designed exclusively for adults โ€” parents, legal guardians, and authorized caregivers aged 18 and older. This Service is not directed to children under 13, and we do not knowingly collect personal information directly from children.

2.3.1 Age Attestation

By creating a NourishNest account, you represent and warrant that you are at least 18 years of age and are the parent, legal guardian, or authorized caregiver of any child whose information you provide to the Service. If we learn that an account has been created by a person under 18, we will terminate the account and delete all associated data promptly.

2.3.2 Parent-Provided Child Data

The only child-related data we collect is information voluntarily provided by the parent/guardian account holder:

We practice data minimization โ€” we do not collect photos, precise geolocation, social media identifiers, biometrics, or any other data about your child beyond what is listed above.

2.3.3 How Child Data Is Used

Child data is used exclusively to:

Child data is never used for advertising, marketing, profiling, or any purpose unrelated to the core meal planning service.

2.3.4 Third-Party Sharing of Child Data

Child data is never shared with advertisers, data brokers, or any third parties for marketing purposes. Child data is only processed by our infrastructure provider (Supabase) under strict contractual data protection obligations, solely for the purpose of storing and delivering the Service.

2.3.5 Parental Rights

As a parent or guardian, you have the right to:

Upon deletion of a child profile, all associated data (name, birth date, allergen records, meal plan history linked to that child) is permanently and irreversibly removed from our systems within 24 hours.

2.3.6 Child Data Retention

Child data is retained only while the associated baby profile exists on an active account. When a baby profile is deleted or when the parent account is deleted, all child data is permanently removed immediately. We do not retain anonymized child data after deletion.

3. How We Use Your Information

We use collected information for the following purposes:

4. How We Share Your Information

We do not sell your personal information. We may share data only with:

4.1 Third-Party Service Providers

ProviderPurposeData Shared
SupabaseDatabase, authentication, hostingAccount data, usage data
ResendEmail deliveryEmail address, name
CloudflareWebsite hosting, CDNIP address, request data
Expo/EASApp distribution, updatesDevice identifiers

Each provider is contractually obligated to protect your data and use it only for the stated purposes.

5. Data Retention

We retain your personal information only for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

6. Your Privacy Rights

6.1 All Users

Regardless of where you live, you have the right to:

You can exercise these rights directly in the app (Profile โ†’ Privacy) or by emailing [email protected].

6.2 GDPR Rights (EU/EEA/UK Residents)

Under the General Data Protection Regulation, you additionally have the right to:

Legal basis for processing: We process your data based on (a) contract performance (providing the Service), (b) consent (marketing emails), and (c) legitimate interests (service improvement, security).

6.3 CCPA/CPRA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

To submit a verifiable consumer request, email [email protected] or use the in-app deletion feature.

7. Data Security

We implement industry-standard security measures to protect your data:

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Cookies and Tracking

Our website may use essential cookies for functionality. We do not use third-party tracking cookies or advertising pixels. The NourishNest mobile app does not use cookies.

9. International Data Transfers

Your data may be processed in the United States where our servers are located. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes affecting your rights, we will provide notice via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights: