Nestlight Consumer Health Data Privacy Policy

What we collect

"Consumer health data" means information that can identify you and says something about your physical or mental health, or your baby's. In Nestlight, that's what you choose to log:

• Feeding: latch sessions, pumping, supplements, amounts, times, and sides
• Sleep: when sleeps start and end, and how they're logged
• Diapers
• Mood and notes: how you felt, and any notes you write
• Growth: weight, height, head circumference, and where they fall on WHO growth curves
• Milestones and the dates you saw them
• Photos you add to the album or to milestones

We also keep your account email, the names you give us for you and your baby, and your account ID, which link this data to you.

When you use Nestlight we also receive technical data, such as your IP address, browser and device type, and the pages you visit. Our Privacy Policy explains it, along with cookies and on-device storage.

Voice: Nestlight doesn't record, upload, or store your voice audio. Voice entry uses your browser's or device's built-in speech recognition to turn speech into text, and only that text is saved as a log. Depending on your device, the speech provider (for example Apple or Google) may process the audio under its own terms. The same is true in the iOS and Android apps, which load the same Nestlight app.

Where it comes from

From you. You type it, say it, or upload it. We don't buy health data or collect it from anyone else.

Why we use it

Only to provide Nestlight to you:

• to save, sync, and show your logs, charts, photos, and summaries
• to keep your account secure, including the activity log
• to meet legal duties

We don't use it for advertising, we don't sell it, and we don't use it to train general-purpose AI models.

Your consent

We collect consumer health data only as needed to provide the features you ask for. Before you log anything, Nestlight asks you to read and agree to "Where your data goes," and records the version you agreed to. That agreement is separate from the Terms of Service. Accepting the Terms isn't consent under this law.

If we ever want to collect or share consumer health data for another purpose, we'll ask for your separate consent first. You can say no and keep using everything that doesn't need it. You can withdraw consent at any time by deleting the data or your account in Settings, or by emailing us.

Who we share it with

We don't sell consumer health data. We share it only with service providers that process it for us under written contracts, and only to run Nestlight:

• Supabase (through Lovable Cloud): the database for your logs, sign-in, and private photo storage
• Lovable: hosting and publishing, Sign in with Google, sign-in and account emails, and product analytics and error reports (which never include health details)
• Cloudflare: secure delivery of the website and app traffic
• Google: Sign in with Google if you choose it, and fonts for some languages. Google receives your IP address and browser information, not your logs.

We don't have affiliates that receive consumer health data. We may also disclose data if the law requires it, for example to report child sexual abuse material or to answer a valid legal order.

Your rights

You can:

• confirm whether we collect, share, or sell your consumer health data
• see your data, and download your account data (your profile, your baby's details, feeding and pumping logs, diapers, growth records, sleeps, milestones, photo captions, and the activity log). Start in Settings, or email us.
• get a list of the third parties and affiliates we've shared it with, and how to reach them
• delete your data. Use Delete everything in Settings, email us, or see How to delete your account.
• withdraw consent

How to ask: use Settings where the control exists, or email hello@lyraflow.org from your account email. We'll verify the request and answer without undue delay, and within 45 days. If we need more time, we'll tell you why, and we'll take no more than 45 extra days. We won't charge you, and you won't be treated differently for using these rights.

If you logged information about a child in your care, you can use these rights for that information as the account holder.

Deletion

When you choose Delete everything, we delete your account and its consumer health data from our active systems without undue delay, and within 45 days. We also tell our service providers to delete it. Copies in routine backups are deleted as those backups rotate. We aim to finish within 30 days, and in every case within six months, unless the law requires us to keep something longer.

Appeals

If we turn down a request, you can appeal by replying to our decision or emailing hello@lyraflow.org with "Appeal" in the subject. We'll answer in writing within 45 days and explain why. If we deny your appeal, you can file a complaint with the Washington State Attorney General at https://www.atg.wa.gov/file-complaint or by calling 1-800-551-4636 (in Washington) or 206-464-6684.

If you live in Nevada, you can also contact the Nevada Attorney General at ag.nv.gov.

How we protect it

We encrypt data in transit and at rest, lock each account's records to that account with database access rules, open photos only through links that expire after 60 seconds, and keep an activity log that can't be edited while your account is open. No system is perfect, and we'll tell you if the law requires us to notify you of a breach.

Changes

If we change this policy in a way that affects how we use consumer health data, we'll tell you in the app and by email at least 14 days before the change takes effect, and we'll ask for any new consent the law requires.