Introduction
This Privacy Policy explains how Nanny ("we", "us", "our") collects, uses, stores, and shares personal data when you use our websites, applications, and related services (collectively, the "Services").
We take privacy seriously. This Policy is designed to help you understand what we process, why we process it, and the choices available to you.
If you do not agree with this Policy, please do not use the Services.
Who is responsible for your data?
The data controller for personal data processed through the Services is the legal entity operating Nanny. For privacy requests and questions, contact us at privacy@nanny.app.
Scope
This Policy applies to parents and guardians who register accounts, configure monitoring features, and receive alerts or summaries through Nanny.
The Services are intended for lawful parental or guardian use in connection with minors for whom the account holder has appropriate authority. You are responsible for ensuring your use complies with applicable laws (including wiretap, surveillance, employment, and children's privacy laws in your jurisdiction).
Personal data we collect
Depending on how you use Nanny, we may process the following categories of information:
- Account and authentication data — such as identifiers issued by our authentication providers (for example Firebase Authentication), phone numbers when phone sign-in is used, email addresses when email sign-in is used, and basic profile details connected to those credentials.
- Household and child profile data — such as child nicknames or labels, approximate ages or grades where you provide them, platform selections (for example WhatsApp), sensitivity preferences, and onboarding questionnaire responses.
- Monitoring-related content and derived signals — when you enable features that analyze communications sources you connect, we may process message text, metadata (such as timestamps or sender labels where available), attachments or links when technically processed, and outputs such as alerts, risk summaries, safety scores, or thread excerpts presented to you inside the product.
- Device and technical data — such as IP address, device type, operating system, browser type, app version, diagnostic logs, crash reports, and security telemetry.
- Usage and product analytics — such as funnel events (for example onboarding progress), screen views, feature interactions, and performance metrics.
- Billing data — when you purchase a paid plan, our payment processor may provide limited billing identifiers, subscription status, and transaction references to us.
- Support communications — information you send when you contact us.
Sources of personal data
We collect personal data directly from you when you register, complete onboarding, configure settings, contact support, or otherwise interact with the Services.
We also receive personal data from subprocessors that provide authentication, hosting, analytics, error reporting, or payment processing.
Purposes and legal bases
We process personal data as necessary to provide and operate the Services, including linking accounts, configuring monitoring, generating alerts, securing sessions, troubleshooting issues, and communicating service-related notices.
We process analytics and usage data to understand product performance, improve reliability, and reduce onboarding friction.
We process billing information to fulfill subscriptions you purchase.
Depending on where you live, applicable law may require us to identify a legal basis (such as performance of a contract, legitimate interests balanced against your rights, or consent where required). Where consent is the basis — for example for certain optional communications or non-essential cookies — you may withdraw consent without affecting processing that does not rely on it.
WhatsApp and third-party platforms
WhatsApp is a service offered by Meta Platforms, Inc. and its affiliates ("Meta"). Nanny is not affiliated with, endorsed by, or sponsored by Meta.
If you choose to connect or analyze WhatsApp-related data through Nanny, Meta may process information under its own policies independent from ours. You should review Meta's terms and privacy disclosures.
You represent that you connect only accounts you are lawfully entitled to monitor and that you comply with applicable laws and platform rules.
Children
Nanny is designed for use by adults who are parents or legal guardians (or who otherwise have lawful authority). We do not knowingly market the Services directly to children.
Information about minors may appear in your account because you lawfully monitor communications involving them. If you believe we have collected information from a child in violation of applicable law, contact us at privacy@nanny.app and we will take appropriate steps.
Cookies and similar technologies
We may use cookies, local storage, or similar technologies that are strictly necessary for authentication, security, load balancing, language preferences, or basic session continuity.
Where required by law, we will obtain consent before using non-essential cookies or cross-site tracking technologies.
Sharing, subprocessors, and recipients
We share personal data with vendors who process it on our behalf and only as needed to provide the Services (subprocessors). Categories typically include cloud hosting and databases, authentication providers, analytics and monitoring tools, customer communications infrastructure, and payment processors.
We may disclose personal data if we reasonably believe disclosure is required to comply with law, enforce our Terms, protect users, or investigate fraud or security incidents.
If we are involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. We will provide notice where required by law.
We do not sell your personal information as traditionally understood (no monetary exchange for personal data). If we engage in activities that certain jurisdictions classify as a sale or sharing for targeted advertising, we will provide legally required notices and choices.
International transfers
We may process and store personal data in Israel, the European Economic Area, the United Kingdom, the United States, or other countries where we or our subprocessors operate.
Where transfers require safeguards (such as Standard Contractual Clauses or equivalent mechanisms), we implement appropriate measures consistent with applicable law.
Retention
We retain personal data only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.
Retention periods depend on the nature of the data and legal obligations. Account holders may request deletion subject to exceptions (for example retaining minimal billing records). Where deletion is technically asynchronous, we describe realistic timelines in our responses.
Security
We implement administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, or alteration.
No method of transmission over the Internet or electronic storage is completely secure. You are responsible for safeguarding your credentials and devices.
Your rights
Depending on your jurisdiction, you may have rights to access, rectify, delete, restrict processing, object to certain processing, port data, or withdraw consent.
You may also have the right to lodge a complaint with a supervisory authority.
To exercise rights, contact privacy@nanny.app. We may need to verify your identity before fulfilling requests.
Automated processing
Certain insights or alerts may be generated using automated analysis (including machine-assisted classification). These outputs support parental awareness and are not a substitute for professional advice (medical, legal, therapeutic, or otherwise).
Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy and revise the effective date. Where changes are material and legally required, we will provide additional notice.
Contact
Questions about this Privacy Policy: privacy@nanny.app