Nestmate Privacy Policy

1. Data controller and scope

Bold Yazılım Tasarım ve Ticaret LTD ŞTİ is the data controller for personal data processed through Nestmate (“Nestmate,” “we,” “us,” or “our”). This policy applies to the Nestmate Services and related support interactions. Third-party stores and services process some data under their own privacy notices.

2. Data we collect

Depending on the features you use, we may collect:

• Account and caregiver data: name, email address, authentication identifiers, language, time zone, preferences, account status, and family role;
• Child data: name or nickname, date of birth or age, sex where provided, profile image, family relationship, care preferences, and other profile details;
• Care and wellness records: sleep, feeding, diapering, solid foods, activities, growth, temperature, symptoms you choose to record, milestones, schedules, reminders, notes, and related timestamps;
• Family collaboration data: invitations, caregiver membership, permissions, selected child, and records entered or edited by authorized family members;
• Content and communications: messages, prompts, feedback, support requests, attachments, survey responses, and other content you submit;
• Subscription and transaction data: plan, product, entitlement, renewal and expiration status, store transaction identifiers, promotion or invitation codes, and payment-related metadata. App stores generally process complete payment-card details;
• Device and technical data: IP address, device and operating-system information, app version, language, platform, notification token, logs, diagnostic events, security signals, and approximate region inferred from technical data; and
• Usage data: screens and features used, actions, session timing, performance, crash, and interaction events.

3. How we receive data

We receive data directly from you and authorized caregivers, automatically from the app or device, from app stores and authentication providers, and from service providers that help us operate Nestmate. If another caregiver adds you to a family, we may receive your invitation and role information from that caregiver.

4. How we use data

We use personal data to:

• create accounts, authenticate users, and maintain family and child profiles;
• store, synchronize, display, and summarize caregiver-entered records;
• provide schedules, reminders, reports, measurements, preferences, recommendations, and AI-assisted features requested by you;
• manage subscriptions, entitlements, purchases, promotions, and customer support;
• send transactional, security, service, and opted-in notification messages;
• protect children, users, accounts, systems, and legal rights; detect misuse and fraud; and investigate incidents;
• debug, monitor, analyze, and improve safety, reliability, accessibility, and product performance; and
• comply with law, enforce our agreements, and establish or defend legal claims.

We do not use Nestmate to provide medical diagnosis or treatment. Any AI-assisted processing is used to provide the feature you request, support safety and quality, or improve the Services as permitted by law and your settings or consent where required.

5. Legal bases

Where applicable law requires a legal basis, we process data as necessary to perform our contract with you, comply with legal obligations, protect vital interests in limited circumstances, and pursue legitimate interests such as security, support, fraud prevention, and service improvement. We rely on consent when required, including for certain notifications, sensitive data, device permissions, or optional processing. You may withdraw consent prospectively, but this does not affect earlier lawful processing.

6. Sensitive and child data

Some records may reveal health, development, or other sensitive information about a child or caregiver. Provide only information needed for the features you choose to use. By adding child data, you confirm that you have authority to do so. Nestmate is not directed to children for independent account creation, and we do not knowingly invite children to submit their own personal data.

If you believe a child has created an account or submitted data without appropriate adult authorization, contact us through in-app support so we can investigate and delete or restrict the data as appropriate.

7. Family sharing

Authorized caregivers in the same family may see child profiles, care records, reports, schedules, and the identity of the caregiver who created or changed a record. Family owners or authorized members may manage access. We do not control how another authorized caregiver uses information they lawfully receive outside Nestmate, so invite only trusted people.

8. Service providers and disclosure

We may share data with vetted providers that perform cloud hosting, storage, authentication, communications, push notification, analytics, customer support, security, payment verification, document generation, and AI-processing services on our behalf. They may process data only for contracted purposes and under appropriate confidentiality and security obligations.

We may also disclose data:

• when you direct us to share it or use a family-sharing feature;
• to app stores and payment partners to validate and support transactions;
• when required by law or reasonably necessary to protect a child, a person’s safety, our users, rights, property, or systems;
• to professional advisers under confidentiality obligations; or
• as part of a merger, financing, reorganization, or sale, subject to applicable safeguards and notice requirements.

We do not sell personal data for money.

9. International transfers

Our providers may process data in countries other than your own. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, contractual commitments, and security controls. Local privacy laws in a destination may differ from those where you live.

10. Retention and deletion

We keep personal data only as long as needed for the purposes described above, including while your account or family records remain active, and afterward where required for legal obligations, dispute resolution, fraud prevention, security, and financial recordkeeping. Retention depends on the data type, sensitivity, user settings, legal requirements, and operational backup cycles.

You may delete individual records using available controls and request account or data deletion through the app or in-app support. Deletion from active systems may not be immediate in encrypted backups, legal records, completed transaction ledgers, or data another authorized caregiver independently provided or lawfully retains. We delete or isolate backup copies according to their normal lifecycle.

11. Security

We use administrative, technical, and organizational safeguards designed to protect data, including access controls, authentication, encryption where appropriate, monitoring, and restricted provider access. No internet service can guarantee absolute security. Protect your device and credentials, use available security features, and report suspected unauthorized access promptly.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data; withdraw consent; and complain to a data-protection authority. You may also have rights concerning certain automated processing. Use available account controls or in-app support to submit a request.

We may verify your identity and authority over a child or family before completing a request. We will not discriminate against you for exercising a privacy right. Some rights are subject to lawful exceptions, including protecting another person’s rights and retaining records required by law.

13. Notifications and device permissions

You can manage push notifications and device permissions in Nestmate or your device settings. Disabling a permission may prevent the related feature from working. Essential account, security, purchase, and legal notices may still be delivered where permitted even if you opt out of promotional communications.

14. Third-party links

Nestmate may link to resources or services we do not control. This policy does not cover their independent processing. Review the privacy notice of a third party before providing data to it.

15. Changes to this policy

We may update this policy as our practices, Services, or legal duties change. We will post the updated version with a new effective date and provide additional notice or obtain consent when required by law.