Effective 20 August 2026
NidoLoop is operated by Nido Technologies LLC. If you have any question about this policy, write to privacy@nidoloop.com, and a person will answer.
NidoLoop is a shared record of a child's day, used by the adults who care for that child. It exists so a parent and a caregiver who don't speak the same language can still communicate clearly about a baby.
The rest of this page is the detail behind those five lines.
| The parent who signs up | Creates the family. The child's records belong to that family. |
| Other invited members | Other parents, grandparents, and caregivers. They can read and write the family's records. |
| The caregiver | An invited member who also has her own profile: her experience, her languages, her worked hours. That profile is hers, and it travels with her between families. |
| The child | The subject of most of the data, and too young to agree to any of it. |
NidoLoop is used by adults, about a child. It is not designed for or directed to children, and children do not have accounts. See Section 11.
Account: your email address, your display name, and your role (mother, father, parent, or caregiver).
Your child: name, date of birth, sex if you enter it, and a photo if you add one. You can add more than one child.
Care records: everything logged in the trackers: bottles and feeds (amount, type, time), sleeps and naps, diaper changes, baths, solid foods and how the child reacted to them, and the free-text notes attached to any of these.
Health records: body temperature, medications and their doses, vaccinations, and illness episodes. This is sensitive information and Section 5 is about it specifically.
Plans and routines: planned meals, tasks, the daily routine, the weekly working schedule, and any custom foods your family adds.
Messages and photos: everything sent in the family chat, including who sent it, and any pictures attached.
Presence check-ins: when a caregiver marks that she has arrived, stepped out (and why), come back, or ended her shift.
A caregiver's own profile, if she has one: name, bio, languages, years of experience, and any certifications she lists (CPR, first aid, ECE, license), plus a log of her worked shifts with start and end times.
If something in the app goes wrong, NidoLoop shows you what broke and offers a button to send that report to us. Nothing is sent unless you press it. The report contains the error, the technical trace of where in our code it happened, which screen you were on, your app version, and whether you are on iPhone or Android. It does not contain your messages, your notes, or anything about your child.
There is no automatic crash reporting in NidoLoop, and no third-party crash or analytics service receives anything. Reports you choose to send are stored alongside your other data, in the same place, and are deleted with your account.
If you type your email address into the "early access" box on our website, we store that address and the date you gave it, and nothing else. It is used for one thing: to email you when NidoLoop opens to your family. We do not add you to a marketing list, we do not sell or share it, and there is no tracking or advertising pixel on the website.
Every email we send you from that list carries an unsubscribe link, and you can ask us to remove you at any time by writing to privacy@nidoloop.com. We delete the address rather than suppressing it. The list is erased once early access has opened to everyone on it.
Joining the waitlist does not create a NidoLoop account, and it is entirely separate from the family data described above.
NidoLoop can read an export from another baby-tracking app and add its records to your family's history. Three things about that are worth stating plainly.
The file is read on your phone. It is not uploaded anywhere to be parsed. What leaves your phone afterwards is the same thing that leaves it when you type an entry by hand: the entries themselves, synced to your family.
Imported records are treated exactly as typed ones. They are stored the same way, shown to the same people, covered by the same retention in Section 8, and included when you download or delete your data. There is no separate copy of the original file and we do not keep one.
You are responsible for what you bring. The records came from a service you chose, under its terms, and you are the one deciding to move them. We do not contact that service, and we cannot verify what its export contains. We only read it, show you what we found, and write it once you say so.
Nothing is written until you have seen a summary of what the file holds.
| What we do with it | Why | Legal basis (UK/EU) |
|---|---|---|
| Store and sync your family's records across your phones | It is the service you asked for | Performance of a contract |
| Translate messages, notes and summaries | The core purpose of the app | Performance of a contract |
| Generate a daily recap or a pediatrician summary, when you ask for one | You requested it | Performance of a contract |
| Send push notifications about new messages | To make the chat usable | Performance of a contract / your consent via your device settings |
| Keep the service secure and prevent abuse | Protecting the service and its users | Legitimate interests |
| Handle health information about your child | See Section 5 | Your explicit consent |
| Email you once when early access opens, if you joined the waitlist | You asked to be told | Your consent |
| Read an export from another app and add its records to your family | You asked us to | Performance of a contract |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Under US state privacy laws that use those terms, we neither "sell" nor "share" your data.
This section matters more than the others, so it is separate.
NidoLoop records temperature, medications and doses, vaccinations, and illness episodes for a child. Where you are in the UK or EU, this is special category data under Article 9 of the GDPR. Several US states treat it as sensitive personal information.
Our basis for handling it is your explicit consent, given by choosing to enter it. You are never required to use the health trackers to use NidoLoop, the feeds, sleep, diaper, chat and translation features work without them, and you can delete any health entry at any time.
Who can see it. Every active member of your family, which is exactly the point, since a caregiver needs to know a child had a fever at 2pm. Members are invited by a parent and can be removed by a parent. Nobody outside your family can see it.
What we do not do with it. We do not use it for advertising, we do not sell it, we do not share it with insurers or employers, and we do not use it to train AI models.
One transfer to be aware of. When you ask for a pediatrician summary or a daily recap, the records covering that period, including health entries, are sent to Anthropic to be written up. See Section 6.
NidoLoop is not a medical record and not a medical device. It is a convenience for keeping track and for describing what happened to a doctor. It does not diagnose anything, and no care decision should rest on it.
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What reaches them | What for |
|---|---|---|
| Supabase | Everything described in Section 3 that is stored on our servers | Database, file storage, and sign-in |
| Anthropic | The text of messages, notes, food names, and the records covered by a recap or summary | Translation, daily recaps, pediatrician summaries |
| Expo | The sender's name and a preview of the message text | Delivering push notifications |
| Apple (APNs) / Google (FCM) | The same notification content | Carrying the notification to the phone |
| Apple / Google speech services | Microphone audio | Dictation and live translation, depending on your device |
Three of those deserve saying plainly rather than leaving in a table.
Anthropic sees the content of your messages and notes. This is unavoidable in an app whose purpose is translating them. Under our agreement, that content is used to produce the translation or summary and is not used to train models.
Push notifications carry a preview of the message. So the banner on the phone is actually useful, the notification includes the sender's name and the text of the message. That means the message content passes through Expo's and Apple's or Google's systems to reach the phone. You can turn notifications off in Settings.
Speech recognition may not happen on the phone. Depending on your device, its language, and its settings, dictation may send audio to Apple or Google rather than transcribing locally. We don't control that behaviour, and it is governed by their privacy policies rather than this one.
We may also disclose data if the law requires it, or to protect someone's safety. If we are ever compelled to hand over data, we will tell the affected family unless we are legally prohibited from doing so.
Your data is stored in Montreal, Canada (ca-central-1). That covers the database and all stored photos.
That is not the whole picture, though, and a policy that stopped there would be misleading. Two of the providers in Section 6 are in the United States:
So while your records are stored in Canada, some message content is processed in the United States. For transfers out of the UK or EU, we rely on the European Commission's adequacy decision for Canada, and on Standard Contractual Clauses for transfers to the United States.
While you are using NidoLoop, we keep your family's records. That is the point of the product. A record of a child's early years is not useful if it evaporates, and we would rather you decide when something goes than have us decide for you.
You can delete anything, at any time. Deleting a photo removes the image itself, not just the row. Deleting a child removes that child's entries from every phone in the family. Deleting your account is described in Section 9.
Accounts nobody uses are eventually deleted. If an account has been completely inactive (nobody opening the app, no active subscription) we may delete it and its data after 180 days. Before that happens we will email you at least twice, at 30 days and at 7 days, and each of those emails will include a link to download everything first. We would rather nag you than surprise you.
Some limits are technical rather than policy. Your phone keeps the most recent 150 chat messages and the most recent 300 spoken translations locally; older ones fall off the device. Your family's photos are kept on our servers regardless of that.
Planned, not yet in effect. We intend to offer an optional paid subscription. When we do, families without one will see the most recent 90 days of photos and records in the app, with anything older hidden until a subscription is active. Hidden is not deleted. Nothing is ever erased because a payment stopped or was never made. Hidden material is still stored, still included when you download your data, and still deletable by you, and it reappears in full whenever a subscription is active. Health records (temperature, medications, vaccinations and illness) are never hidden at all.
In the app, today:
Wherever you live, you have the right to ask what we hold about you, get a copy, correct it, delete it, ask us to restrict or stop certain processing, and withdraw consent. Where the GDPR or UK GDPR applies you also have the right to complain to your data protection authority. Where a US state privacy law applies, you have the right not to be discriminated against for exercising any of this, and we don't, because none of these rights are tied to what you pay.
Downloading and deleting your data will always be free, on every plan we ever offer.
To exercise anything not available in the app, write to privacy@nidoloop.com. We will respond within 30 days.
No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your personal data, we will notify you and the relevant regulator as the law requires.
NidoLoop is for adults. You must be 18 or older to create an account, children do not have accounts, and the app is not directed to children.
We do, however, hold a great deal of information about a child, entered by that child's parents and the people they have invited. That information belongs to the family. A parent can export it or delete it at any time, as described in Section 9.
If you believe a child has created an account, write to privacy@nidoloop.com and we will remove it.
NidoLoop is free to use today, and we do not collect any payment information.
Planned, not yet in effect. When we offer a paid subscription, purchases will be handled entirely by the App Store or Google Play. We will never receive your card number, your billing address, or the name on your card: those go to Apple or Google, under their own privacy policies.
We would store only whether a family's subscription is active and when it renews. To validate purchases we expect to use RevenueCat, which would receive a pseudonymous account identifier and the store's receipt, not your name or your email.
One consequence worth knowing in advance: a subscription belongs to the family, not to the person who paid. If a parent subscribes, everyone in that family, including the caregiver, gets the paid features, and everyone can see that the family has a subscription.
If we change this policy in a way that matters, we will tell you in the app before the change takes effect, and update the date at the top. Changes that would materially reduce your rights over data you have already given us will not be applied retroactively.
privacy@nidoloop.com · Nido Technologies LLC
If you are in the UK or EU and are not satisfied with our response, you may complain to your local data protection authority.