Privacy Policy

Our Privacy Principles

Nurly is built on these fundamental privacy principles:

• Local-first: All data is stored on your device by default. Cloud sync is optional and controlled by you.
• Family isolation: Each family's data is completely separate. Family members can only see their own family's data.
• Minimal data collection: We collect only what's necessary to provide the service you've chosen to use.
• No advertising: We don't show ads or sell your data to advertisers. Ever.
• Transparency: We're clear about what data is collected and how it's used.

Data Storage

Local Storage (Default)

By default, all your baby tracking data is stored locally on your device only:

• Baby profiles (name, birth date, gender)
• Log entries (feedings, diapers, sleep, activities)
• Health records (vaccines, medications, appointments)
• Growth measurements
• Notes and milestones
• App preferences and settings

This data never leaves your device unless you explicitly enable Family Sync.

Cloud Storage (Family Sync)

If you choose to enable Family Sync (a Premium feature), your family's data is stored in the cloud using Firebase (Google Cloud):

• Data is encrypted in transit using TLS/HTTPS
• Data is stored in access-controlled databases
• Each family's data is isolated and only accessible by authenticated family members
• Data synchronizes across all family members' devices in real-time

Family Data Scoping

Nurly uses a strict family-based data model to ensure privacy:

• Family isolation: Each family group has its own private data space. There is no way to access another family's data.
• Baby-level scoping: Within a family, log entries and health records are associated with specific babies. Each baby's data is tracked separately.
• Role-based access: Family members have different permission levels (Owner, Parent, Caregiver) that determine what they can view and modify.
• Invite-only access: New members can only join a family by receiving an invite code from an existing member.

Authentication

When you use Family Sync, Nurly uses anonymous authentication:

• We do not require you to provide an email address, phone number, or any personal identifier to use the app
• Your device is assigned a random, anonymous user ID for sync purposes
• Family membership is tracked using these anonymous IDs plus names you optionally provide
• We cannot personally identify you based on your user ID

The only identifying information associated with your account is the name you choose to display to other family members.

User Roles and Permissions

Family Sync includes three user roles with different permissions:

Owner

• Creates the family and controls the Premium subscription
• Can add, edit, and delete all babies and entries
• Can invite and remove family members
• Can change member roles
• Can delete the entire family

Parent

• Can add, edit, and delete babies
• Can add, edit, and delete all log entries
• Can manage health records (vaccines, medications, appointments)
• Can view all family data

Caregiver

• Can add new log entries
• Can edit and delete their own entries only
• Can view baby information and history
• Cannot add or edit babies
• Cannot manage health records

Subscriptions and Payments

Nurly Premium subscriptions are processed entirely through Apple's App Store:

• We do not collect or store your payment information, credit card details, or Apple ID
• Apple handles all payment processing and billing
• We only receive confirmation that a valid subscription exists
• Subscription management (cancellation, renewal) is done through your Apple ID settings

Premium features, including Family Sync, require an active subscription from the family Owner. All invited family members benefit from the Owner's subscription at no additional cost.

Data We Do NOT Collect

To be clear, Nurly does not collect:

• Email addresses or phone numbers
• Location data or GPS coordinates
• Device identifiers for advertising purposes
• Contacts or address book information
• Photos (unless you explicitly add them to entries)
• Health data from Apple HealthKit
• Usage analytics or behavioral tracking
• Any data from other apps on your device

Third-Party Services

Nurly uses the following third-party services:

• Firebase (Google Cloud): Used for Family Sync data storage and real-time synchronization. Data is stored on Google Cloud servers. Firebase Privacy Policy
• Apple App Store: Used for app distribution, subscription management, and payment processing. Apple Privacy Policy

We do not use any analytics services, advertising networks, or other third-party SDKs that collect user data.

Data Retention

• Local data: Stored on your device until you delete the app or clear data from settings.
• Cloud data (Family Sync): Stored as long as your family exists. When an Owner deletes a family, all associated cloud data is permanently deleted.
• Left/removed members: When a member leaves or is removed from a family, their membership record is retained (for administrative purposes) but they lose all access to family data.

Data Deletion

Deleting Local Data

You can delete all local data by:

• Using the "Clear All Data" option in the app's Settings
• Uninstalling the app from your device

Deleting Cloud Data

To delete your family's cloud data:

• As Owner: Use the "Delete Family" option in Family Settings. This permanently deletes all family data for all members.
• As Member: Use the "Leave Family" option. This removes your access but preserves the family data for other members.

If you need assistance with data deletion, contact us at support@nurlyapp.com.

Children's Privacy

Nurly is designed for use by parents and caregivers to track baby care activities. The app is not intended to be operated by children.

While the app stores information about babies (name, birth date, health data), this information is provided and controlled by parents/guardians. We do not knowingly collect personal information directly from children under 13.

Data Security

We implement appropriate security measures to protect your data:

• All network communications use TLS/HTTPS encryption
• Cloud data is stored in access-controlled Firebase databases
• Family data is isolated using Firebase Security Rules that enforce family-level access control
• Anonymous authentication prevents association of data with personal identities

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights including:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format

To exercise these rights, contact us at support@nurlyapp.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Providing notice within the app for material changes

Continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@nurlyapp.com