NestTrack is built with privacy at its core. Every piece of personal data you enter — medications, health logs, bills, tasks, shopping lists — is isolated to your account and cannot be accessed by anyone else, including platform administrators.

Platform administrators can only see anonymous, aggregate counts for app maintenance:

• Total number of users
• Total number of active medications (not which ones or who takes them)
• Total number of tasks, bills, shopping items, etc.

Admins cannot see your medication names, bill amounts, health symptoms, food entries, or any other personal details. This is enforced at the database level — it's not just a UI restriction, it's technically impossible.

• Row-Level Security: Every database table has policies that ensure you can only read and write your own data.
• No Admin Override: Admin accounts have no special read access to sensitive personal tables.
• Aggregate-Only Analytics: A secure database function returns only counts, never individual records.
• Encrypted Connections: All data transfers use HTTPS/TLS encryption.

NestTrack complies with the EU General Data Protection Regulation (EU GDPR).

Under these regulations, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Restriction — limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at support@nesttrack.app. We will respond within 30 days.

Data Controller: NestTrack, operated from Ireland.

We process your personal data on the following lawful bases:

• Legitimate Interest: We collect and process data that is necessary to deliver the core functionality of the application — meal tracking, medication management, task organisation, etc. This data is collected solely to provide the service you signed up for.
• Consent: For optional features or communications, we will seek your explicit consent before processing.

We only collect data you actively provide.

• We do not use tracking cookies.
• We do not use third-party analytics or advertising SDKs.
• We do not engage in profiling or automated decision-making.
• We do not collect data in the background or from third-party sources.

Every piece of information stored in NestTrack was explicitly entered by you or a member of your family group.

We do NOT use your personal data for marketing, advertising, profiling, selling, or sharing with third parties.

Your data is used exclusively to deliver the features you use within NestTrack:

• Displaying your tracked meals, medications, tasks, and other entries back to you.
• Enabling family group features you have opted in to.
• Sending transactional emails (e.g. invitations, password resets) that you initiated.

We only store what you explicitly enter:

• Email address (for authentication)
• Health & medication tracking entries
• Bills, tasks, and shopping lists
• Family group membership

We do not sell, share, or use your personal data for advertising purposes.

• Your data is retained for as long as your account is active.
• Upon account deletion, all personal data is permanently removed from our systems.
• Encrypted backups may retain anonymised data for up to 30 days after deletion, after which it is permanently purged.
• You can request account deletion at any time by contacting support@nesttrack.app.

NestTrack allows parents and guardians to create dependant profiles, which may include data about children.

• Children's data is controlled entirely by the parent or guardian who created the profile.
• This data is subject to the same strict privacy protections as all other personal data.
• We do not share children's data with any third party, under any circumstances.
• Only family group members with explicit logging permissions can view or log entries for a dependant.

Your data is hosted on secure cloud infrastructure within the European Union.

In the unlikely event that data is transferred outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

For any privacy-related queries, data requests, or concerns:

📧 support@nesttrack.app

You also have the right to lodge a complaint with a supervisory authority:

• Ireland: Data Protection Commission (DPC) — dataprotection.ie
• EU: Your local Data Protection Authority

Last updated: February 2026

© 2026 NestTrack. All rights reserved.