Tiny Nest ("we", "our", or "us") is committed to protecting the privacy of our users and their families. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Tiny Nest mobile application.
1. Information We Collect
Account Information
- Email address (for account creation and login)
- Password (securely hashed, never stored in plain text)
Baby Profile Data
- Baby's name, date of birth, and gender
- Growth measurements (weight, height, head circumference)
Activity Tracking Data
- Feeding sessions (type, duration, amount)
- Sleep records (start time, end time, quality)
- Diaper changes
- Health logs and milestone tracking
- Vaccination records and appointments
Photos
- Baby photos you choose to upload (optional; stored with our image hosting provider, Cloudinary)
2. How We Use Your Information
- Provide core functionality: Track and display your baby's feeding, sleep, diaper, and health data.
- AI-powered insights: Generate personalized care suggestions and analysis based on your tracking data. AI queries are processed through secure server-side functions and are not used to train AI models.
- Reminders and notifications: Send timely reminders for feedings, medications, and appointments.
- Reports and trends: Generate weekly and monthly reports on your baby's patterns.
- Improve the app: Analyze anonymous usage patterns to enhance features and fix bugs.
3. Children's Privacy (COPPA Compliance)
Tiny Nest is designed for parents and caregivers, not for children. We do not knowingly collect personal information directly from children under 13. All data entered into the app is provided by the parent or caregiver about their child.
The baby care data you enter (feeding, sleep, health records) is treated as sensitive health information and is protected with the same security measures as your account data.
We require explicit consent before collecting any health-related data about your child. You can withdraw this consent and delete all data at any time.
4. Data Storage and Security
- All data is stored securely using Supabase (built on PostgreSQL) with row-level security policies.
- Data is encrypted in transit (TLS/SSL) and at rest.
- Authentication is handled via Supabase Auth with secure session management.
- API keys and sensitive credentials are stored server-side, never in the app bundle.
- We use security-definer database functions with strict access controls.
5. Data Sharing
We do not sell, rent, or trade your personal information. Your data may be shared only in these limited circumstances:
- AI processing: When you ask the AI assistant a question, your question and relevant baby-care context (such as recent sleep, feeding, and health summaries you have logged) are sent to a third-party AI provider (Anthropic Claude, Groq, or Google Gemini) via our secure server-side proxy, solely to generate the response. This happens only after you grant explicit health-data consent, and no account identifiers (such as your email) are included.
- Photo storage: Baby photos you choose to upload are stored and served by Cloudinary, our image hosting provider.
- Payment processing: Subscription management is handled by RevenueCat together with Apple and Google. We do not store payment card details.
- Legal requirements: We may disclose information if required by law or to protect the safety of our users.
6. Subscriptions and Payments
Tiny Nest offers free and premium subscription tiers. Subscriptions are processed through Apple's App Store and managed by RevenueCat. We do not have access to your payment card information. For refunds, please contact Apple directly through their App Store support.
7. Your Rights and Choices
- Access your data: View all your data within the app at any time.
- Delete your account: You can permanently delete your account and all associated data from the app's settings. This action is irreversible and removes all data from our servers.
- Export your data: Activity reports can be viewed and shared from within the app.
- Notification preferences: You can manage notification settings from within the app or your device settings.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our servers. Anonymous, aggregated analytics data may be retained for product improvement purposes.
9. Third-Party Services
Tiny Nest uses the following third-party services:
- Supabase - Database and authentication (supabase.com/privacy)
- RevenueCat - Subscription management (revenuecat.com/privacy)
- Cloudinary - Photo storage (cloudinary.com/privacy)
- Anthropic Claude / Groq / Google Gemini - AI processing (via server-side proxy only)
- Expo - Push notification delivery (expo.dev/privacy)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
Email: support@thabtech.com