Privacy Policy

This policy applies to the Nestory app for iPhone, iPad and Apple Watch and to the support, feedback, purchase-verification and sync services connected to it.

The service provider identified as the seller or developer of Nestory on the App Store is the “controller” of personal data that reaches Nestory’s server infrastructure. Apple acts as a separate controller for the App Store, iCloud, CloudKit, HealthKit and Apple Account services under its own terms and privacy policy.

Privacy requests can be sent through the Nestory support link at the bottom of this page.

• No Nestory account or login is needed to use the App’s core features.
• We use no advertising, cross-app tracking, data brokers or behavioural analytics.
• We do not sell, rent or use personal or health data for advertising.
• We do not use your content to train artificial-intelligence models.
• Each network-dependent feature uses only the minimum data needed for its purpose.

Most of what you enter in Nestory is stored in Apple’s SwiftData store on your device. For example:

• cycle, period, fertile-window, basal body temperature, ovulation-test, symptom and mood entries;
• pregnancy dates, due date, fetal movement, contractions, visits, test results, growth measurements and birth preparation;
• postpartum recovery, postpartum mood, PMDD and perimenopause self-assessments, bleeding, pain, medication, supplements, blood pressure, weight, glucose, water and other health and wellness entries;
• a child’s name, date of birth, feeding, sleep, diaper, growth, vaccine, medication and neonatal-care entries, milestones, memories, journal notes and the photos you select;
• contact details you enter yourself, such as a doctor, clinic or emergency contact;
• language, units, colour theme, reminder and other app settings.

When you select a photo, the App may read that photo’s location metadata, if present, to add it to a memory. When it turns coordinates into a place name, they may be processed by Apple Maps’ geocoding service. Nestory does not track your device’s location continuously or in the background.

The App’s main store lives on your device. In the current version, iCloud sync is on by default and, when your Apple Account is available, syncs through Apple CloudKit to your other devices. You can turn iCloud sync off in Nestory’s Settings. Turning it off stops future syncing but does not automatically delete the copy already in iCloud.

The “Delete All Data” action attempts to delete Nestory’s on-device store, the Apple Health records Nestory created, its private and family-sharing CloudKit zones, temporary export files, and the copy on a paired Apple Watch. If the device is offline, sync is paused until the cloud deletion is confirmed and retried the next time you are online.

If you deliberately turn on family sharing and invite a specific person by Apple Account, that participant can view and, within the permitted scope, edit the shared data: child profiles, care logs, some pregnancy tracking, checklists, notes and family tasks. Sharing is invitation-only, never a public link. Until you revoke the invitation or leave the share, a participant may keep control of data they have already seen or copied. Whether the family’s Premium plan is active is also stored in the shared space so that an invited participant can use Premium features.

Whether to use HealthKit is your choice. iOS asks for permission separately for each data type, and you can change permissions at any time in Settings → Privacy & Security → Health.

With your permission, Nestory can read basal body temperature, menstrual flow, sleep, ovulation-test results and cervical mucus from HealthKit. When two-way sync is on, it can write menstrual flow, basal body temperature, ovulation-test results, cervical mucus, weight, blood pressure, blood glucose and water intake to Apple Health.

Data obtained from HealthKit is never used for advertising, marketing analytics or data mining and is never sent to Nestory’s server infrastructure — unless you deliberately include it yourself in feedback text or an attachment.

Diagnostics sharing is currently on by default. You can turn it off at any time in Settings → System → Privacy → Share Diagnostics; after that, no new MetricKit data is sent to Nestory’s servers.

Feedback and diagnostics submissions are verified with Apple App Attest to confirm they come from a genuine copy of the App. Images you choose to attach to feedback are stored separately in a non-public area of a contracted cloud-storage service. Network providers may process your IP address transiently while a connection is open; Nestory does not build behavioural profiles from it.

Subscriptions and one-time purchases are processed by Apple’s StoreKit and the App Store. Nestory never receives your card number, bank details, billing address or Apple Account credentials. The App checks only the product identifiers, transaction status, expiry, refund, revocation and entitlement information needed to unlock access, and it does so on the device.

Apple’s processing is governed by Apple’s Privacy Policy.

• Performing our contract with you: running the App’s core features, access unlocked by a purchase, sync and the services you ask for.
• Your consent: HealthKit permissions, the photos and attachments you select, family sharing, the email address and device details you volunteer with feedback, and any other processing for which the law requires consent.
• Legitimate interests: keeping the App secure, App Attest, fraud prevention and crash diagnosis — interests that do not override your rights, with an option to turn diagnostics sharing off.
• Legal obligations: complying with applicable law, court orders, tax and financial requirements and lawful requests from competent authorities.

We rely on the following main sub-services:

• Apple Inc.: App Store, StoreKit, iCloud, CloudKit, Apple Account, HealthKit, push notifications, MetricKit and crash reports.
• A contracted cloud-infrastructure and data-processing provider: server-side processing of feedback, non-public attachment storage, diagnostics and App Attest verification records.

These providers process data only for the stated purposes, under their own privacy and security terms and data-processing agreements. We do not give data to advertising networks, data brokers or social networks. Where the law requires it, you can ask us for the provider’s name, processing location and contractual safeguards.

• Device data: until you delete it, reset the App or uninstall it.
• iCloud and family-sharing data: until you delete the zone or share, remove it from your Apple Account, or Apple’s retention period ends.
• Apple Health records: until you delete them in Apple Health or use Nestory’s “Delete All Data”.
• Feedback and attachments: as soon as they are no longer needed after your request is resolved, and in any case no longer than 24 months, unless a legal dispute or security investigation requires otherwise.
• Diagnostics: for as long as needed to analyse crash and frequency trends, at most 12 months.
• App Attest records: for as long as needed to verify request authenticity and prevent abuse; no longer than 24 months after the last activity unless the law requires more.
• App Store data: for Apple’s and the legally required retention periods.

Nestory uses technical and organisational safeguards including iOS data protection, file encryption tied to your device passcode, Apple CloudKit access controls, encryption in transit, row-level permissions on server data, server-only credentials, non-public storage, request rate limiting and Apple App Attest.

No system is entirely free of risk. Protecting your device with a passcode or biometrics, using two-factor authentication on your Apple Account, sending family invitations to the right person and keeping exported files safe are an important part of your own protection.

At any time you can:

• view, correct and export your data inside the App;
• delete individual entries, photos or profiles, or delete everything;
• turn off iCloud sync, HealthKit, notifications, diagnostics and family sharing;
• request a copy, correction, deletion or restriction of feedback or other data held on our servers;
• withdraw consent, and object to processing based on legitimate interests;
• exercise these rights without being treated differently for doing so.

Depending on where you live, you may also have rights under laws such as the EU and UK GDPR, the California Consumer Privacy Act, Japan’s Act on the Protection of Personal Information, Korea’s Personal Information Protection Act, Vietnam’s Decree 13/2023/ND-CP, Mongolia’s Law on Personal Data Protection and China’s Personal Information Protection Law — including the right to complain to your local supervisory authority. So that requests are handled safely, we may ask for the minimum information needed to confirm who you are and that a request relates to your own feedback.

Nestory is intended for adults who are pregnant, parents, guardians and adult caregivers; it is not directed at children. When you enter a child’s profile, health or care information, you are responsible for having a guardian’s authority or the consent needed.

We do not knowingly collect personal data directly from children. If you believe a child has sent us data through feedback or another network-dependent feature, contact Nestory support and ask for it to be deleted.

Apple and the contracted cloud-infrastructure provider may use infrastructure, staff and sub-contractors in countries other than the one where you live. Such transfers rely, as required, on the law of that country, contractual safeguards, standard contractual clauses for international transfers and the provider’s data-protection obligations.

Nestory makes no automated decisions about you that have legal or similarly significant effects. Cycle predictions, pregnancy-week calculations, reminders and health guidance are informational only. We do not use your health data to build research cohorts, assess insurance risk, create advertising or marketing profiles, or train artificial intelligence.

When we change this policy we update the “Last updated” date. New data types, new purposes, new providers or changes that materially affect your rights will be announced clearly in the App or on this page before they take effect, and we will ask for fresh consent where the law requires it.

Send privacy questions, rights requests and security concerns through the Nestory support link at the bottom of this page. We will acknowledge your request as soon as we reasonably can and reply within the time the applicable law allows.

You also have the right to lodge a complaint with the data-protection authority in your country. In Mongolia, that is the National Human Rights Commission of Mongolia.