Privacy Policy

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and password. If you sign up for a paid plan, payment is processed by Stripe and we do not store your credit card number.

Content you create: Photos, journal entries, voice memos, recipes, stories, family member profiles, messages, and other content you upload or create within your Family Nest.

Usage data: We collect basic analytics (page views, feature usage) through Vercel Analytics to improve the service. No personal data is sold or used for advertising.

2. How We Use Your Data

• To provide and operate the Family Nest service
• To share your content with the family members you invite
• To send transactional emails (welcome, password reset, notifications you enable)
• To send onboarding and product emails to help you get started and get the most out of Family Nest
• Occasionally, our founder may reach out personally to new or inactive users to offer help or ask for feedback
• To process payments via Stripe
• To improve the service through anonymized analytics

We do not sell your data, use it for advertising, or share it with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate Family Nest:

• Supabase — Database, authentication, and file storage (hosted in US data centers)
• Vercel — Application hosting and analytics
• Stripe — Payment processing (PCI-DSS compliant)
• Resend — Transactional email delivery
• OpenAI — Voice transcription and AI features (data is not used to train models)
• Google Maps — Family Map feature

4. Data Storage & Security

Your data is stored on Supabase servers in the United States with encryption at rest and in transit. We use row-level security (RLS) policies to ensure family members can only access their own family's data. All connections use HTTPS/TLS encryption.

5. Data Retention & Deletion

Your content is stored for as long as your account is active. You can delete individual entries at any time. Annual and Legacy plan members can export all data at any time using the data export feature in account settings.

To delete your account and all associated data, contact us at the email below. We will process deletion requests within 30 days.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data (available for Annual and Legacy plan members)
• Opt out of non-essential emails via notification settings

7. Cookies

We use essential cookies for authentication and session management only. We do not use advertising or tracking cookies. Vercel Analytics collects anonymized page view data without cookies. Because we only use strictly necessary cookies, no cookie consent banner is required.

8. Children's Privacy

Family Nest is designed for families of all ages. Kid accounts are created and managed by adult family members, which constitutes parental consent for data collection. We do not knowingly collect personal data from children under 13 outside of this parent-managed account structure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via email of any material changes at least 30 days before they take effect. Continued use of the service after changes constitutes acceptance.

10. Canadian Privacy Law (PIPEDA & CASL)

Family Nest operates under Canadian law. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). We only send commercial electronic messages with your consent, identify ourselves as the sender in all emails, and provide an unsubscribe mechanism in every non-transactional email. You may opt out of non-essential emails at any time via your notification settings.

11. Contact

For privacy questions or data requests, email us at privacy@familynest.io