Nanny & Me

Privacy Policy

Last updated: 28 April 2026

Welcome to Nanny & Me (the “App”) and nanny-me.com (the “Website”). We care deeply about privacy. This policy explains what we collect, how we use it, and your rights. Nanny & Me is designed to work offline‑first; most functionality does not require an account or an internet connection.

Who we are

For the purposes of data protection laws (including South Africa’s POPIA, the EU/UK GDPR, and similar laws), the controller is Nanny & Me. You can contact us at [email protected].

What data we collect

Data you enter (App)

  • Baby profile: name, birth date, optional photo, and profile details.
  • Multiple child profiles with separate logs and settings.
  • Activity logs: sleep, feeds, diapers, pumping, activities, health updates, notes, timestamps and durations.
  • Growth and supply details such as weight, length, head circumference, and diaper inventory.
  • Settings: reminders, categories, widgets, preferences.
  • Local reminder notifications: schedules you configure for feeds, naps, or other care tasks.

Default storage: These items are stored locally on your device. No account is required.

Optional cloud sync data

  • Account info (if you sign up): email and profile name where provided.
  • Synced activity and profile data to enable multi-device use.
  • Technical metadata for sync reliability (device IDs, timestamps).

Cloud sync is optional and can be turned off at any time. When enabled, your data is transmitted and stored securely in our cloud database (Supabase) for backup, account access, and sharing across devices.

Purchases and subscriptions

  • Purchase receipts, product identifiers, and anonymized device identifiers processed by RevenueCat to validate, manage, and restore your purchases.
  • We do not receive your full payment card details; Apple processes payments and RevenueCat confirms entitlements.

Website and diagnostics

  • Basic logs for security and performance (e.g., IP address, user-agent, error diagnostics).
  • PostHog website analytics only after you allow analytics on the Website. PostHog stores pseudonymous event data such as page views, device type, and browser details so we can improve the Website.
  • Cookies and local storage are used only where necessary for site functionality and the optional analytics described above. We do not use invasive tracking.

How we use data

  • Provide and improve the App (e.g., saving your logs, restoring purchases, troubleshooting).
  • Sync and store data in Supabase when you enable cloud backup.
  • Validate subscriptions and restore purchases via RevenueCat.
  • Measure Website performance with PostHog analytics, when you allow it, so we can prioritize fixes and understand which Website content is useful.
  • Enable optional features like cloud backup and shared caregiver access.
  • Respond to support requests and communicate important updates.
  • Protect our users, investigate abuse, and comply with legal obligations.

Legal bases (where applicable)

  • Performance of a contract – to provide the App and sync services you request.
  • Legitimate interests – to secure our services and improve reliability.
  • Consent – for optional Website analytics, cloud sync, or marketing emails (where used). You can withdraw consent at any time.
  • Legal obligation – to comply with applicable law.

Sharing of data

We do not sell your personal information. We may share data with:

  • Service providers under contracts that protect your data, including Supabase (cloud database/auth), RevenueCat (purchase validation), and PostHog (product analytics).
  • Caregivers you invite (when you enable sharing/sync) so they can view and add logs.
  • Law enforcement only when legally required.

Data retention

  • On‑device data: remains until you delete it from the App or uninstall the App.
  • Synced data: retained while your account is active. You can request deletion at any time (see “Your rights”). We may keep minimal records necessary for legal compliance and fraud prevention.

Your rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data. In South Africa (POPIA) and the EU/UK (GDPR), you also have the right to object to certain processing and to lodge a complaint with your regulator.

  • To exercise your rights, contact [email protected].
  • If you use cloud sync, you can also request account and data deletion.

Children’s privacy

Nanny & Me is intended for use by adults to log data about their children. We do not knowingly collect personal data directly from children without parental consent.

Security

We use technical and organizational measures to protect data, including transport encryption (HTTPS) and access controls. No method of transmission or storage is 100% secure, but we continually work to improve our safeguards.

International transfers

Where data is processed outside your country, we rely on appropriate safeguards (such as contractual clauses) to protect your information in line with applicable laws.

Third-party links & platforms

The Website may link to third-party sites such as the App Store. Their privacy practices are governed by their own policies. We also rely on PostHog for analytics (posthog.com/privacy), Supabase for hosting and sync (supabase.com/privacy), and RevenueCat for purchase validation (revenuecat.com/privacy).

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App or via email.

Analytics preferences

You can change your Website analytics preference at any time.

Contact us

If you have questions or requests, email [email protected].