1. Introduction
Welcome to OurNest. Your privacy is fundamental to our mission of building a safe space for families. This Privacy Policy explains how OurNest ("we", "us", or "our") collects, uses, and protects your information when you use our web platform and mobile applications.
By using OurNest, you are agreeing to the practices described in this policy. We designed our architecture to minimize data collection and maximize user control, ensuring that your family's private moments stay private.
2. Data Collection
To provide the OurNest experience, we collect a limited amount of information:
- Account Information: Name, email address, and profile picture provided during registration.
- Family Data: Names of family members, shared calendars, lists, and media content uploaded by your group.
- Usage Data: Anonymous diagnostic data to help us improve app performance and stability.
- Device Information: Browser type, operating system, and IP address for security auditing.
3. Family Privacy & Siloing
The core of OurNest is the "Nest" — an isolated digital environment for your family. We implement strict data siloing protocols:
- Data uploaded to one Nest is never accessible by members of another Nest.
- Even our staff cannot access your private photos or messages; these are encrypted using keys managed at the Nest level.
- We do not sell your family's data to advertisers or data brokers. Your information is not a product.
4. Security Protocols
We employ industry-leading security measures to protect your data:
- Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
- Two-Factor Authentication: Optional (but highly recommended) 2FA for all adult accounts.
- Regular Audits: We conduct quarterly third-party security audits to identify and fix vulnerabilities.
5. Third Parties
We only share data with third parties essential for providing our service:
- Cloud Hosting: We use secure infrastructure providers located in the United States and EU.
- Payment Processing: All payments are handled by Stripe; we never store your credit card information.
- Customer Support: Tools used to manage your support requests only have access to account metadata, never your private Nest content.
6. Your Rights
You have full control over your data. At any time, you may:
- Request a copy of all data associated with your Nest in a machine-readable format.
- Correct or update any personal information.
- Delete your entire Nest and all associated data permanently. Once deleted, this information cannot be recovered.
Have questions about your privacy?
Our Data Protection Officer is here to help you understand our practices.