Privacy policy

Effective October 4, 2026. NestKeeps is operated by Bluegrass Digital Works LLC. For privacy questions or requests, email support@nestkeeps.com.

About NestKeeps

NestKeeps helps adult parents and authorized caregivers record and share a child's daily care. Children do not create accounts. Only enter information you are authorized to share with your household's caregivers.

Information we handle

• Account email addresses, authentication records, and caregiver names and titles.
• Household and child names; feeding, sleep, diaper, medication, growth, milestone, activity and note entries; timestamps and change history.
• Invitation recipient email addresses and codes, household memberships, synchronization information and app preferences.
• Security information for optional two-step verification, including authenticator enrollment records and recovery-code hashes. The recovery service stores hashes rather than readable recovery codes.
• Technical information processed by service providers, such as IP addresses, browser or device information, authentication events and security logs.
• Information you provide when contacting support.

Supabase handles password authentication. Signed-in credentials use the device's secure credential storage. Journal information is also stored on your device so the app can work offline.

How we use information

We use this information to operate accounts, synchronize journals, deliver caregiver invitations, share entries, provide reminders, protect accounts, prevent abuse, investigate faults, respond to requests and recover from data loss.

Sharing and service providers

Members of your household can access the shared journals for every child in that household. Household owners manage membership. A removed caregiver's disconnected device may retain information until it reconnects and checks access. Exports and other copies already made by caregivers cannot be remotely recalled.

We use Supabase for authentication and cloud data, Hostinger for the website and email, and Cloudflare Turnstile for bot protection. Turnstile processes security signals such as IP addresses and browser information; see Cloudflare's Turnstile Privacy Addendum. Encrypted recovery backups are stored on an operator-controlled device and Google Drive, with GitHub Actions used for backup processing. Providers process information to deliver their services, and information may be processed outside your state or country.

The current beta has no advertising, and we do not sell journal data. We may disclose information when required by law or necessary to investigate misuse and protect people or the service.

Your choices and deletion

You can correct or delete journal entries, export your journal, manage optional reminders, and change your password. In Household → Account and data, you can delete your account; household owners can also transfer ownership or delete their household. You must transfer or delete households you own before deleting your account.

Account deletion removes your login and memberships. Entries you contributed to another owner's household remain in that shared journal, including names or notes within those entries. Household deletion removes its cloud journal for all members. Contact us about personal information embedded in shared records.

If you cannot use the app, email support@nestkeeps.com from your registered address and describe your request. We verify identity and authority before acting. Never send passwords, authenticator setup keys or recovery codes. Depending on where you live, you may have additional rights concerning your personal information; contact us to make a request.

Where account-security alerts are enabled, Google Firebase Cloud Messaging processes device registration tokens and technical delivery information to send push notifications. Push messages contain a generic security notice, not child names or journal contents. You can control notification permission in your device settings. Security email notices may also be sent to your registered address.

Recent password changes or account recovery may require a 48-hour security waiting period before deletion. We verify identity and authority, provide a cancellation option before execution, and track response timelines from the original request receipt date. Security checks do not restart applicable legal deadlines.

Retention and backups

Account and journal information remains while needed to provide the service. Deleted entries can remain in synchronization records, change history and retained backups. Deleting information from the live service does not immediately erase every backup, exported file or offline device copy.

Our managed encrypted recovery backups expire 35 days after creation. Automated cleanup runs hourly and removes expired copies on its next successful run; service outages may delay cleanup. This limit applies to those managed archives, not to caregiver exports, provider-managed backups or logs, or separately retained incident or recovery copies. Provider retention follows the applicable service configuration and policies. Contact us about retained copies when making a deletion request.

Restoring a backup can restore information from before a deletion. Deletion requests require review during recovery; we do not promise automatic erasure from every restored or independently retained copy. Limited information may also be retained when legally required.

Security

We use encrypted network connections, account authentication, household access controls and encrypted recovery backups. Optional authenticator-based two-step verification provides additional account protection. NestKeeps is not end-to-end encrypted: authorized backend operations can process journal information. Local information depends on your device's protections, and no system is perfectly secure.

Changes and contact

We update this policy when practices change and provide appropriate notice of material changes. For questions, privacy requests or suspected unauthorized access, contact support@nestkeeps.com or visit Help and support.