Privacy & security

Contact

Privacy questions, health data requests, and security reports — hello@lyraflow.org. If you are in a mental health crisis in the US, call or text 988. 988 is for crisis only, not privacy questions.

What is kept

• Account email, the name you asked us to use, and your baby's name if you added it
• Feeding logs — latch, pump, supplement, amounts, times, and sides
• Sleep logs — when each sleep started and ended
• Diapers, if you logged them
• How you felt and any notes you wrote, if you logged them
• Baby growth measurements — weight, height, and head circumference
• Milestones and the dates you saw them
• Album and milestone photos
• Account / user id
• Device and technical data — IP address, browser and device type, language, and time zone — used to keep sign-in secure and Nestlight reliable

Voice entry is turned into text by your browser's or device's speech recognition. Nestlight saves only that text, never the audio.

Lyraflow is not a HIPAA covered entity or business associate, and HIPAA does not apply to Nestlight. We use reasonable administrative, technical, and physical safeguards, described below. No safeguard is perfect.

Voice entry

Voice entry uses your browser's or device's built-in speech recognition. Depending on your device, that provider (for example Apple or Google) may process the audio under its own terms. Nestlight never records or stores the audio.

Your rights

• You can download your account data (your profile, baby details, feeding and pumping logs, diapers, growth, sleeps, milestones, photo captions, and the activity log), or permanently delete your account and all of its data, from Settings on the website or in the app, anytime. You can also delete your account without the app.
• You can correct your name, your baby's details, and your logs in the app. For anything you can't change yourself, email hello@lyraflow.org.
• Washington's My Health My Data Act gives you more rights over health data, including appeals. See our Consumer Health Data Privacy Policy.
• We do not sell your nest. We do not use your information for third-party advertising, and we do not sell it to data brokers.

Your state privacy rights

Depending on where you live — including Washington, Oregon, Connecticut, Nevada, and California — you may have the right to:

• confirm whether we process your personal data, and access it
• correct inaccurate personal data — most of it you can edit directly in the app
• delete it — in Settings, or see How to delete your account
• get a copy in a portable format — the JSON download in Settings
• get a list of the specific third parties we have disclosed your personal data to (Oregon)
• opt out of the sale of personal data, targeted advertising, and profiling that has legal or similarly significant effects. We don't do any of these, so there is nothing to turn off.

Health information is sensitive data. We process it only with the consent you give on the "Where your data goes" screen, and only to run Nestlight. Nevada residents: we do not sell covered information as defined by Nevada law.

How to ask: use Settings, or email hello@lyraflow.org from your account email. An authorized agent may ask for you; we may ask the agent for proof and verify your identity. As the account holder, a parent or guardian uses these rights for a baby's information. We answer within 45 days, and may extend once by 45 more days if we tell you why. We won't charge you or treat you differently for asking.

Appeals: if we decline your request, reply to our decision or email hello@lyraflow.org with "Appeal" in the subject. We'll answer in writing within 45 days (60 days in Connecticut). If we deny your appeal, you can contact your state Attorney General — for example Washington (https://www.atg.wa.gov/file-complaint), Oregon (doj.state.or.us), Connecticut (portal.ct.gov/ag), or Nevada (ag.nv.gov).

The safeguards in place

• Encrypted in transit (HTTPS) and at rest.
• Row-level access rules designed so one account's rows are not available to other accounts through Nestlight. The people and providers who run Nestlight can reach data only when needed to host it, secure it, comply with the law, or do something you ask.
• Baby photos live on your device first, and in private storage that opens only through a signed link that expires after 60 seconds.
• An append-only activity log records sign-ins, exports, edits, and deletions. No one can edit or erase it while your account is open. It is deleted with your account.
• A burst of failed sign-ins and every bulk export are recorded in that log.
• Health details are never placed in web addresses, analytics, or error reports.
• If the law requires us to tell you about a breach, we will, by email.

How long we keep things

• While your account exists, your logs, sleeps, growth, photos, milestones, and settings stay with you.
• When you tap Delete everything in Settings, your account, logs, sleeps, photos, growth, milestones, preferences, and activity log are deleted from our active systems without undue delay, and always within 45 days, and existing photo links stop working.
• Copies in our providers' routine backups are deleted as those backups rotate. We aim for 30 days, and always finish within six months, unless the law requires us to keep something longer.
• The activity log exists for security. No one can edit it while your account is open, and it is deleted along with your account.

Who helps us run Nestlight

• Cloudflare — content delivery, edge routing, and DDoS protection for mynestlight.com. It receives your IP address and browser information and sets short-lived security cookies.
• Supabase (via Lovable Cloud) — sign-in, the database that holds your logs, and private photo storage.
• Lovable — hosting and publishing, the sign-in broker used for Sign in with Google, the service that sends sign-in and account emails, and the product analytics and error reports described below.
• Google — Sign in with Google, if you choose it, and Google Fonts. When Nestlight is shown in Korean, Japanese, Chinese, Arabic, Hindi, or Thai, your browser loads those fonts from Google, which receives your IP address and browser information, never your logs.

Analytics, error reports, cookies, and on-device storage

• Our hosting platform's analytics records each page visit: the page address (including any search part of the address, such as which help article you opened), the referring page, browser and device type, language, an approximate country based on your time zone, and a session identifier that expires after 30 minutes. We use it only to keep Nestlight reliable — never for advertising, and it is never sold.
• If something breaks, an error report with technical details (the error, the page address, and your browser) goes to our hosting platform so we can fix it. Session replay is off.
• We design Nestlight so health details — notes, amounts, baby names, feelings — are never placed in web addresses, analytics, or error reports.
• Cookies and storage: Cloudflare sets short-lived security cookies, and analytics uses a 30-minute session cookie. Nestlight also uses your browser's storage to keep you signed in, remember your language and consent, and keep a copy of your nest and photos on this device so it works offline. Clearing this site's data in your browser removes the copy on this device; your account stays until you delete it.

Where your nest lives

Nestlight runs on cloud infrastructure that may store and process your information in the United States. If you use Nestlight from the EU, UK, or Canada, your information may be transferred to the United States and is handled under our providers' data protection terms and standard contractual safeguards.

Babies, children, and caregivers

• Nestlight accounts are for adults 18 and older who care for a baby. Nestlight is not directed to children.
• We store baby information — name, feeding, sleep, growth, photos — because the caregiver entered it to care for that child.
• We do not knowingly let anyone under 13 create an account. If we learn an account holder is under 13, we close the account and delete what we collected from them. If we learn an account holder is under 18, we close the account.
• A caregiver can export or delete all of it from Settings at any time.