Privacy Notice

Nurtandem is operated by Alexander Hoban, who is the data controller for the personal data described here. Questions or requests: nuturetracking@gmail.com.

• Account data — email address, password credentials (hashed), display name and caregiver role, to create and secure your account. Legal basis: performance of our contract with you.
• Baby and care records — baby's name, date of birth, optional photo, and the feeds, sleep, diapers, pumping, medicine and notes you log, to provide the tracking service and share it with your care circle. Legal basis: performance of our contract with you.
• Technical data — IP address, device and browser information, and error logs, to keep the service secure, prevent abuse and fix faults. Legal basis: our legitimate interest in a secure, working service.
• Support messages — what you send us, to answer you. Legal basis: legitimate interest and, where relevant, contract.
• Subscription records — plan status and subscription identifiers received from our payment provider, to unlock paid features. We never see or store your full card details.

We do not sell your data or use it for advertising. Aggregate, de-identified statistics may be used to improve the product.

• Caregivers you invite — anyone who accepts your invite can see and edit that baby's records.
• Paddle.com — our Merchant of Record, for the sale of Nurtandem Plus, subscription management, payments, tax compliance and invoicing.
• Service providers — hosting, database, authentication and error-monitoring providers acting on our instructions.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are legally required to disclose.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We keep your account and records for as long as your account is open. Delete your account from Settings and your profile, and any baby you are the only caregiver for, are permanently removed, along with every record for that baby. Limited billing and security logs are retained where the law requires, then deleted or anonymised.

Data is encrypted in transit and at rest. Access to your records is enforced at the database level with row-level security, so nobody outside your care circle can read them. We apply access controls and least-privilege internally.

You can request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests, and withdraw consent where we rely on it. Email nuturetracking@gmail.com and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

We use only essential cookies and local storage — to keep you signed in, remember your appearance setting, and hold an in-progress feeding timer on your device. There are no advertising or third-party tracking cookies. Clearing your browser storage signs you out.