NestPilot 1. Who we are
NestPilot AI is operated by NestPilotAI LLC ("we", "us", "our"). This policy covers the NestPilot AI app for iPhone and iPad and the website at nestpilotai.com (together, the "Service").
2. Who the app is for
NestPilot AI is for parents and guardians aged 18 or older. Children do not create accounts or use the app directly. Information about a child is entered by the parent or guardian who holds the account.
3. Information we collect
Information you give us
- Account details: your name, email address and how you sign in (Sign in with Apple, Google Sign-In, or a one-time code sent to your email). If you use Sign in with Apple and choose to hide your email, we receive Apple's relay address instead.
- Family profiles: children's first names, ages, allergies and dietary needs, school details, routines, and notes you choose to add.
- Things you create in the app: AI Copilot conversations, meal plans and grocery lists, scanned school documents, behavior notes, baby logs (feeding, sleep, diapers), medication reminders and private journal entries, including any photos you attach.
- Co-parent workspace content: messages, custody calendar entries and change requests, shared expenses, reimbursement requests, receipt images and record exports you create in a workspace you share with a co-parent you invite.
- Photos and documents: images you take or choose for school scanning, fridge and meal scanning, or receipts.
- Support messages: anything you send to our support address.
Information collected automatically
- Push notification token: if you allow notifications, we store your device's push token so we can send the alerts you've turned on, such as co-parent updates and reminders.
- Technical and security data: app version, request timestamps and IP address in server logs, used to run the Service, limit abuse and investigate security issues.
- Crash reports: if you've chosen to share analytics with app developers in your iPhone settings, Apple may give us anonymized crash reports.
The app does not contain advertising or third-party analytics SDKs, and it does not track you across other companies' apps or websites.
Device permissions
- Camera and photos: only when you scan a document, fridge or receipt.
- Calendar: only to add family events to your phone's calendar when you ask. We do not upload your existing calendar.
- Notifications: only if you allow them.
Payments
Subscriptions are purchased through Apple. We never see or store your card details. Our subscription provider, RevenueCat, tells us whether your subscription is active, which plan you have and when it renews or expires.
4. How we use your information
- To provide the Service: store your family data, sync your co-parent workspace, and generate AI responses you ask for.
- To sign you in and keep your account secure.
- To manage your subscription and unlock Pro features.
- To send emails you need, such as sign-in codes, co-parent invitations and workspace notices.
- To send push notifications you've enabled.
- To respond to support requests.
- To prevent fraud and abuse, keep a security audit log, and meet legal obligations.
We do not sell your personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
5. AI processing
NestPilot AI uses Google's Gemini API to power the AI Copilot, Emergency Mode guidance, meal planning, school document scanning, behavior insights, and co-parent message tools (tone rewrite and summaries).
- We ask first. Before any AI feature works, the app explains what is sent and asks for your permission. You can turn this off later in Account → Privacy & AI. The rest of the app keeps working without AI.
- What is sent: the text or image you submit and the family context the feature needs, such as a child's age or allergies.
- How it is handled: requests go to Google over an encrypted connection. Google processes them as our service provider to return a response.
- What we keep: we save your AI Copilot conversations so you can return to them (see Retention). Generated meal plans and scan results are saved to your account when you keep them.
AI responses can be wrong. They are for general information and organization only. They are not medical, legal, mental-health or emergency advice. In an emergency, call 911 or your local emergency number.
6. How we share information
- With your co-parent: content you add to a shared workspace (messages, calendar, custody requests, expenses, receipts, shared journal entries) is visible to the people you invite to that workspace. Private content, such as your journal and AI chats, stays private unless you choose to share it.
- With service providers who help us run the Service, listed below. They may use your data only to provide their service to us.
- For legal reasons: if required by law, subpoena or court order, or to protect the safety of a person.
- In a business transfer: if we are acquired or merge with another company, your information may transfer. We will notify you before it becomes subject to a different privacy policy.
7. Service providers
| Provider | What they do | Data involved |
|---|---|---|
| Google (Gemini API) | Generates AI responses | Text, images and family context you submit to AI features |
| Google (Sign-In) | Sign-in, if you choose Google | Google account ID, name, email |
| Apple | Sign in with Apple, App Store payments, push notification delivery | Apple user ID, name and email (if shared), purchase records, push token |
| RevenueCat | Subscription management | An app-generated user ID and purchase status |
| Railway | Hosts our servers and database (United States) | Account, family and workspace data |
| Supabase | File storage | Receipt images, journal photos and scanned documents you save |
| Resend | Sends transactional email | Your email address and the email content (sign-in codes, invitations) |
| Expo | Routes push notifications to Apple | Push token and notification content |
8. Retention and deletion
- Account and family data are kept while your account is active.
- AI Copilot conversations are kept for 365 days after you last use a conversation and then deleted automatically. You can delete them sooner in the app.
- Photos sent only for AI scanning are not stored by us unless you save the result, for example a receipt.
When you delete your account
You can delete your account in the app at any time (see how to delete your account). When you do, we:
- delete your profile, children's profiles, AI chats, meal plans, grocery lists, school scans, baby logs, reminders, journal entries and reimbursement requests;
- delete your saved receipt and photo files from storage;
- sign you out on every device and remove your linked sign-in identities.
Some information is kept, for these reasons:
- Shared co-parent records. Messages, expenses, custody requests and calendar events you posted in a shared workspace stay visible to your co-parent, marked as coming from a deleted account. They are part of a shared record your co-parent relies on, and they can matter in custody matters.
- Security audit log. A tamper-evident log of account and workspace actions is kept to protect the integrity of shared records and investigate abuse. It is used for nothing else.
- Legal holds. If a shared workspace is subject to an active legal hold, deletion is paused until the hold is released. Contact us if this affects you.
Deleting your account does not cancel an App Store subscription. Cancel it in iPhone Settings so you are not charged again.
9. Security
All traffic between the app and our servers is encrypted with TLS. Access to your data requires a signed, expiring session token, and deleting your account or signing out revokes your sessions. We rate-limit our services to prevent abuse and require you to sign in again before your account can be deleted. No system is perfectly secure, but we work to protect your information and will notify you of a breach as required by law.
10. Your choices and rights
- Access and export: download your data from Account & Data Settings in the app, or ask us for a copy.
- Correct: edit your profile and family details in the app.
- Delete: delete your account in the app, or email us.
- AI sharing: turn AI features off at any time in Account → Privacy & AI.
- Notifications: turn them off in iPhone Settings.
Email support@nestpilotai.com to make a request. We respond within 30 days and may need to confirm your identity first.
11. California residents
Under the CCPA as amended by the CPRA, California residents can ask to know what personal information we collect, use and disclose; ask us to delete or correct it; and not be discriminated against for using these rights. We do not sell or share personal information as those terms are defined, and we use sensitive information (such as information about your children's health) only to provide the Service you request. Make a request at support@nestpilotai.com. We respond within 45 days, which the law lets us extend once by 45 days with notice.
12. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children. Information about a child is entered and controlled by the parent or guardian and is used only to personalize the Service for that parent. If you believe a child has given us personal information directly, email support@nestpilotai.com and we will delete it.
13. International users
We operate in the United States and store data there. If you use the Service from another country, your information will be transferred to and processed in the United States.
14. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.
15. Contact
NestPilotAI LLC
Email: support@nestpilotai.com
Website: nestpilotai.com