Privacy Policy

Our commitment

Nestlings handles information about children — we treat that responsibility seriously. Our practices are designed to be PIPEDA-aligned. We collect only what the service needs, we never sell personal information, and we never use customer or children's data for advertising.

What we collect

• Account data — name, email, and password.
• Program data — entered by childcare providers: child profiles, attendance, daily activity records, photos, menus, plans, and invoices.
• Messages — conversations between providers and families.
• Device data — a push notification token, if you enable notifications.
• Usage analytics — anonymized product-usage events (e.g. screen views, feature taps) collected via PostHog, used to understand how the app is used and to fix problems. We do not send child profile data, photos, or message content to our analytics provider.

Photo storage

Photos are uploaded to a private storage bucket, organized by organization and child, and are never publicly listable or guessable by URL. The app displays photos through short-lived signed links generated on request — a link expires and cannot be reused or shared outside the app. Only a child's own guardians and their program's staff can generate a link for that child's photos.

Who can see what

Access is enforced at the database level with row-level security, not just in the app's interface. Staff see only their own program. Parents see only their own children's records and the program's shared content (menus, calendar, published lesson plans). Providers control what is visible to families on every record.

Where data lives & who processes it

Program and account data is hosted on Supabase, in Supabase's Canada Central region — a SOC 2 Type II-audited infrastructure provider. Card payments are processed by Stripe — card numbers never touch Nestlings' servers. Push notifications are delivered through Apple and Google's notification services, which receive only a device token, never message content. Product analytics are processed by PostHog, and crash/error diagnostics by Sentry (configured to exclude personal data by default). These are the only third parties we share personal information with, and each acts under contract to protect it — we do not sell personal information to anyone, for any reason. See our data residency & sub-processors page for the complete, itemized list.

How long we keep data

We retain program records for as long as the provider maintains an active account, so daily records stay available for the length of a child's enrollment and beyond, matching typical provincial licensing retention expectations. If a provider closes their account, we delete program data within 90 days, except where we're required to retain financial records (e.g. invoices) for tax purposes. Deleted photos are removed from storage promptly and are not recoverable after deletion.

If something goes wrong

If we become aware of a breach that creates a real risk of significant harm, we will notify affected providers and, where required, the Office of the Privacy Commissioner of Canada, without unreasonable delay, and support providers in meeting their own notification obligations to families and licensing bodies.

Your rights

You may access, correct, or delete your personal information. Parents and staff can delete their account directly in the app (Settings → Delete my account), which erases their personal data and unlinks them from all records. Records about children belong to the childcare provider, who is responsible for their retention policy. For questions, requests, or complaints, contact hello@nestlingsapp.ca — we aim to respond within 30 days. You can also use our account deletion request page. You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

Children's privacy

Children never use Nestlings directly and have no accounts. Information about children is entered and controlled by their childcare provider with the consent of parents or guardians as required by their licensing obligations.

Changes to this policy

If we make material changes to how we handle personal information, we'll update the date at the top of this page and, for significant changes, notify providers by email or in-app notice.