Privacy Policy
Nanny is an app that helps parents and their nanny organize a child's day. Families trust us with information about their children, so we collect as little as we need, we never sell it, and we never use it for advertising. This policy explains what we collect, why, who can see it, and the choices you have.
Who we are
Nanny is provided by HALO Creative Agency d.o.o., Lipovički put 292, Belgrade, Serbia ("we", "us"). We are the controller of the personal data described in this policy. You can reach us at support@nannyapp.io.
What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, phone number (optional), language, country | You, or Apple or Google when you sign in with them |
| Family | Family name, members and their roles, invites (name, email or phone of the person invited) | Parents |
| Children | First name, date of birth, allergies, medicines, diet and sleep notes | Parents |
| Day content | Plan items, log entries (meals, naps, diapers, medicines, notes), photos, voice comments, messages, comments | Parents and nannies |
| Work | Shift start and end times, hourly rate, approved hours | Nannies and parents |
| Location on arrival | Only whether the nanny is at the family's home when she starts a shift. The exact location is not stored. | The nanny's device, only if she turns this on |
| Subscription | Plan, status, renewal date | Apple App Store or Google Play, through RevenueCat. We never see card details. |
| Device | Push notification token, platform (iOS or Android) | Your device |
| Support | What you write when you contact us | You |
We do not use advertising identifiers, third-party analytics or tracking across apps and websites.
Children's information
Nanny is used by adults. Children do not use the app and we do not knowingly collect information directly from children. Parents add information about their own children, and only parents can add or change it.
Allergies, medicines and similar notes are health information. A parent enters them so that the nanny can care for the child safely, and by entering them the parent gives us consent to store them for that purpose. The parent can change or delete them at any time.
If you believe a child has given us information directly, write to support@nannyapp.io and we will delete it.
How we use it
- To run the app: show the plan, the log, photos and messages to the people in the family, send reminders and notifications.
- To send invites by email or to create invite codes.
- To calculate hours and pay, if the family uses that feature.
- To manage subscriptions and free trials.
- To write the day overview, if the family has the Family plan and has not turned it off (see below).
- To keep the service secure, prevent abuse and fix problems.
- To answer your questions and send you important notices about the service.
We do not sell personal data, share it for cross-context behavioral advertising, or use it to build advertising profiles.
Legal bases
Where the EU or UK GDPR, the Serbian Law on Personal Data Protection, or similar laws apply, we rely on:
- Contract, to provide the app you signed up for, including family features, invites and subscriptions.
- Consent, for children's health notes, location on arrival, the day overview and a public nanny profile. You can withdraw consent at any time in the app, without affecting earlier processing.
- Legitimate interests, to keep the service secure and to improve it, balanced against your rights.
- Legal obligation, for tax and accounting records and requests from authorities where the law requires.
Who can see it
Information in a family is visible only to the members of that family: the parents and nannies the family has invited. Rules in our database enforce this for every request. A nanny's choice about her profile visibility is visible only to her. A small number of our staff can access data when needed to provide support or keep the service secure, under confidentiality obligations.
Service providers
We use these providers to run Nanny. They process data on our instructions and under contracts that protect it.
| Provider | What they do | Location |
|---|---|---|
| Supabase | Database, sign-in, file storage | European Union |
| Apple, Google | Sign in with Apple or Google, app stores, payments | United States and worldwide |
| RevenueCat | Subscription status | United States |
| Expo | Delivery of push notifications | United States |
| Resend | Invite emails | United States |
| Anthropic | The AI model that writes the day overview | United States |
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy continues to apply.
International transfers
Some providers are in the United States. When data leaves the EU, UK or Serbia, we rely on adequacy decisions such as the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses and equivalent safeguards.
Day overview (AI)
On the Family and Family Plus plans, Nanny can write a short overview of each child's day. To do this, we send the AI model the day's plan and log entries and each child's first name, age, allergies, diet and sleep notes. Photos and voice comments are never sent. Our provider processes this data only to return the overview and does not use it to train its models.
A parent can turn the overview off in Profile, under Privacy. When it is off, nothing is sent to the AI provider. The overview is not medical advice.
Nanny profiles
When a nanny joins a family, she chooses who can see her profile:
- Only the family I work for. This is the default. Her profile is visible only to families that invited her.
- Public profile. With her consent, we may show her name, experience and rate to other families when we launch nanny search. Her phone number and email are never shown publicly. Search is not available yet.
She can switch back at any time in Profile. We record when she gave consent and delete that record when she withdraws it.
How long we keep it
- Family content is kept while the family uses Nanny. On the free Basic plan, the app shows the last 7 days of history.
- When you delete your account, we delete your data within 30 days. If you are the only parent, the whole family and its content are deleted. Backups are overwritten within a further 30 days.
- Unused invites expire after 7 days once sent.
- We keep subscription and accounting records for as long as tax and accounting law requires.
Security
Data is encrypted in transit and at rest. Access to each family's data is limited by rules in the database, photos are stored privately and shown through short-lived links, and secret keys never leave our servers. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Many of these you can do yourself in the app. For anything else, write to support@nannyapp.io. We reply within 30 days.
You can also complain to a data protection authority, for example the Commissioner for Information of Public Importance and Personal Data Protection in Serbia, your local authority in the EU, or the ICO in the United Kingdom.
US state privacy rights
If you live in California or another US state with a privacy law, you have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information for purposes other than providing the service. To make a request, write to support@nannyapp.io.
Changes
If we change this policy, we will update the date at the top. For important changes, we will tell you in the app before they take effect.
Contact
HALO Creative Agency d.o.o., Lipovički put 292, Belgrade, Serbia
Email: support@nannyapp.io