Privacy & security
Nestlight keeps health information about you and your baby. Before you start, please read where it is kept and who can reach it.
What Nestlight keeps
Feeds, pumps, supplements, durations and amounts, how you felt, notes you write, your baby's growth measurements, and photos you add. Together this is protected health information (ePHI).
Where it is stored
On your device, and in an encrypted database and private file storage operated by Nestlight's cloud provider on servers in the United States. Data is encrypted in transit (HTTPS) and at rest.
Who can reach it
Only you. Every row is locked to your account by database-level access rules. Nestlight staff do not browse your logs. Your cloud provider acts as a business associate and may only process data to run the service.
Photos stay on your device first
Baby photos are stored on your phone and, for backup, as private files that are never publicly linkable. They can only be opened through a signed link that expires within a minute.
The voice and helper features
Voice recognition runs in your browser. If you ask Nestlight's written helper a question, that question and a short summary of your recent log are sent to an AI provider to answer it. Skip that feature if you would rather nothing leave the app.
Every access is logged
Sign-ins, exports, edits and deletions are written to an activity log tied to your account that cannot be altered or erased — including by you. It records that something happened, never what you wrote.
Your rights
You can download everything Nestlight holds about you, and you can permanently delete your account and all of its data, at any time, from Settings.
Honest limits
Nestlight is a personal companion, not a healthcare provider, and is not covered by HIPAA the way a clinic is. It follows HIPAA's safeguards for handling ePHI. If your clinician asks you to use it as part of care, ask them for a signed Business Associate Agreement first.
The safeguards in place
- Encrypted in transit (HTTPS) and at rest.
- Row-level access rules: your account is the only one that can read your rows.
- Baby photos live on your device first, and in private storage that is only reachable through a signed link that expires within a minute.
- An append-only activity log records access, exports, edits, and deletions. It cannot be altered or erased.
- Unusual activity — like a burst of failed sign-ins or a bulk export — is flagged in that log.
- Health details are never placed in web addresses, analytics, or error reports.
- You can download everything, or permanently delete your account and all of its data, from Settings.
Version 2026-08-27. Nestlight is a companion, not medical care. If you are in a mental health crisis in the US, call or text 988.