PRIVACY Policy
Plain language summary: Nestling Notes collects only what it needs to provide the service — your account details, the content you create, and the information required to print and ship your book orders. We do not sell your personal data. Your journal entries, photos, and family memories belong to you.
Who We Are
Nestling Notes ("Nestling Notes," "we," "us," or "our") is a memory journalling application that helps parents and families document, preserve, and print their most meaningful moments as printed keepsake books.
This Privacy Policy explains how we collect, use, store, and share your personal information when you use our mobile application, website at nestlingnotes.com, and any related services (collectively, the "Services"). It applies to all users worldwide, with additional provisions for users in specific regions where required by law.
By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.
Data controller: Nestling Notes
Contact: privacy@nestlingnotes.com
Information We Collect
We collect information in three ways: information you provide directly, information generated automatically when you use our Services, and information from third parties where applicable.
Information You Provide
| Category | Examples | Purpose |
|---|---|---|
| Account details | Name, email address, password (hashed), profile photo | Creating and managing your account |
| Journal content | Photos, written entries, milestone notes, captions, journal prompts and responses | Core service functionality — storing and displaying your memories |
| Child information | Child's name, date of birth, developmental milestones you choose to record | Personalising chapters and milestone tracking within the app |
| Order & shipping details | Delivery name, postal address, country | Fulfilling printed book orders through our print studio network |
| Payment information | Card details, billing address | Processed by our payment provider; we do not store raw card numbers |
| Communications | Support messages, feedback, survey responses | Responding to enquiries and improving the service |
| Membership data | Subscription tier, discount code redemptions, order history | Managing membership benefits and purchase records |
Information Collected Automatically
- Device information: device type, operating system, unique device identifiers, app version
- Usage data: features accessed, pages viewed, session duration, in-app actions (e.g., prompts answered, pages built)
- Log data: IP address, browser type, referring URLs, timestamps, crash reports
- Analytics: aggregated, anonymised usage patterns to understand how the app is used
Information from Third Parties
- Sign-in providers: if you sign in with Apple or Google, we receive your name and email address from that provider, subject to your privacy settings with them
- Payment processors: confirmation of successful or failed transactions (not raw card data)
- App stores: anonymised download and install data provided by Apple App Store and Google Play
How We Use Your Information
| Purpose | Legal Basis (where applicable) |
|---|---|
| Providing, maintaining, and improving the Services | Performance of contract |
| Processing and fulfilling book orders (including transmission to print studios) | Performance of contract |
| Managing your account and membership | Performance of contract |
| Sending transactional communications (order confirmations, shipping updates, account notices) | Performance of contract |
| Sending marketing communications (newsletters, product updates) | Consent (you may unsubscribe at any time) |
| Personalising your in-app experience (chapter suggestions, milestone prompts) | Legitimate interests |
| Analysing usage to improve features and fix bugs | Legitimate interests |
| Complying with legal obligations and enforcing our Terms | Legal obligation / legitimate interests |
| Detecting and preventing fraud, abuse, or security incidents | Legitimate interests / legal obligation |
We do not use your journal content, photos, or child information to train AI or machine learning models, and we do not use this data for advertising purposes.
How We Share Your Information
We do not sell your personal data. We share information only in the following limited circumstances:
Print Studio Network
When you place a book order, we transmit the necessary order data — including your shipping address, book specifications, and the content of the ordered book — to a certified printing studio within our global network. Studios operate in 32 countries and will use your details solely for the purposes of production and shipping.
Service Providers
We work with trusted third-party vendors who process data on our behalf under strict data processing agreements. These include:
- Cloud hosting and storage providers
- Payment processors (e.g., Stripe)
- Email delivery services
- Analytics and crash reporting tools
- Customer support platforms
Legal Requirements
We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent in-app notice before your data is transferred and becomes subject to a different privacy policy.
Children's Privacy
Important: Nestling Notes is designed for parents and caregivers to document their children's lives. The Service is not directed at children and is not intended to be used by anyone under the age of 18 (or the applicable age of majority in your jurisdiction) as the account holder.
We collect information about children — such as names, dates of birth, photos, and developmental notes — only as entered by a parent or guardian who has created and holds an account. We do not knowingly allow children to create accounts or directly submit personal data through our Services.
Content relating to children (photos, entries, milestones) is stored securely and used only to provide the journalling and printing service. It is never shared with third parties for advertising, and is never used for AI training.
If you are a parent or guardian and believe that a child has submitted personal information to us directly without your consent, please contact us at privacy@nestlingnotes.com and we will promptly investigate and delete the information.
COPPA (United States)
Nestling Notes complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 as account holders. All personal information relating to children within the app is submitted by a parent or guardian. If you believe we have inadvertently collected information from a child under 13 without verifiable parental consent, contact us immediately.
GDPR (European Economic Area & UK)
For users in the EEA and UK, information entered about a child by a parent or guardian is processed under the lawful basis of performance of contract (to provide the journalling service) and legitimate interests (to personalise chapter content). We do not rely on a child's consent as a lawful basis for processing.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Services. You may delete your account at any time from within the app settings.
| Data Type | Retention Period |
|---|---|
| Account data (name, email) | Duration of account + 30 days after deletion request |
| Journal content (photos, entries) | Duration of account + 30 days after deletion request |
| Order records | 7 years (required for financial and tax compliance) |
| Payment records | 7 years (retained by payment processor; we retain reference IDs only) |
| Support communications | 3 years from last contact |
| Usage and analytics data (anonymised) | Up to 24 months |
| Legal hold data | Duration of any legal proceeding or regulatory requirement |
Upon account deletion, your personal data and journal content will be permanently deleted from our systems within 30 days, except where we are required by law to retain certain records.
Data Security
We take the security of your data seriously, particularly given the personal and sensitive nature of family memories stored within the app. We implement the following measures:
- Industry-standard encryption of data in transit and at rest
- Secure hashing of passwords (we never store plaintext passwords)
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security assessments and vulnerability testing
- Contractual security obligations with all service providers and print studio partners
Please note: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. If you suspect your account has been compromised, contact us immediately at privacy@nestlingnotes.com.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities in accordance with applicable law, within the timeframes required (e.g., 72 hours under GDPR).
Your Rights
Depending on where you live, you may have some or all of the following rights with respect to your personal data. We honour these rights for all users globally, regardless of whether they are legally mandated in your jurisdiction.
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete information.
Deletion
Request that we delete your personal data, subject to legal retention requirements.
Portability
Receive your data in a structured, machine-readable format to transfer to another service.
Restriction
Ask us to limit how we process your data in certain circumstances.
Objection
Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw Consent
Where processing is based on consent, withdraw it at any time without affecting prior processing.
Non-discrimination
Exercise your privacy rights without receiving a degraded level of service (CCPA/CPRA).
To exercise any of these rights, contact us at privacy@nestlingnotes.com. We will respond within 30 days (or as required by applicable law). We may ask you to verify your identity before processing certain requests.
EEA & UK Users — GDPR / UK GDPR
You have the rights listed above under the GDPR and UK GDPR. If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant data protection authority in your EU member state).
California Residents — CCPA / CPRA
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). We do not sell or share your personal information for cross-context behavioural advertising. You may submit a request to know, delete, or correct your data by contacting us at privacy@nestlingnotes.com or by submitting a request through the in-app settings menu.
Australian Users — Privacy Act 1988
Australian users may access and correct personal information we hold about them in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Complaints may be directed to the Office of the Australian Information Commissioner (OAIC) if unresolved.
Cookies & Tracking
Our website and app use cookies and similar technologies to enable core functionality and understand how the Services are used.
| Type | Purpose | Can be disabled? |
|---|---|---|
| Essential | Authentication, session management, security | No — required for the Service to function |
| Functional | Remembering preferences (language, theme) | Yes — via browser or in-app settings |
| Analytics | Understanding usage patterns to improve the Service (anonymised where possible) | Yes — via cookie preferences banner |
| Marketing | We do not use advertising or retargeting cookies | N/A — not used |
You can manage cookie preferences via your browser settings or our in-app cookie preference centre. Note that disabling certain cookies may affect the functionality of the Service.
International Data Transfers
Nestling Notes is a global service. When you place a book order, your order data is transmitted to a certified printing studio in our network, which operates across 32 countries. This means your personal data may be transferred to and processed in countries other than your own.
By using our Services, you acknowledge that your information may be transferred to and processed in countries outside your country of residence, including countries that may have different data protection laws. We take steps to ensure that any such transfer is conducted securely and in compliance with applicable law.
Third-Party Links
Our Services may contain links to external websites, social media platforms, or third-party services (such as Apple App Store or Google Play). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform.
We are not responsible for the privacy practices or content of third-party websites or services.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by:
- Sending an email to the address associated with your account
- Displaying a prominent notice within the app
- Updating the "Last updated" date at the top of this policy
Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree to the updated terms, you should discontinue use of the Services and may request deletion of your account.
We encourage you to review this policy periodically. Previous versions of this Privacy Policy are available upon request.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us. We are committed to resolving any concerns promptly and transparently.
get in touch
Privacy & Data Enquiries
Email: privacy@nestlingnotes.com
General support: hello@nestlingnotes.com
We aim to respond to all privacy-related requests within 30 days