Privacy Policy

Nurtara ("we", "our", or "us") is a breastfeeding tracking and support application operated by Nurtara. We are deeply committed to protecting your privacy and handling your personal and health information with the highest level of care and responsibility.

This Privacy Policy explains what data we collect, how we use it, who we share it with, how long we keep it, and your rights regarding that data. By using Nurtara, you agree to the practices described in this policy.

This policy applies to the Nurtara iOS mobile application and any related web services at nurtara.com.

We collect only the minimum information necessary to provide the Nurtara service.

We use the information we collect exclusively to provide and improve the Nurtara service:

• Display your feeding history, daily summaries, and trend insights within the app.
• Generate your personalized supply confidence score and weekly analysis (Nurtara Pro).
• Provide triage check-in results and evidence-based action steps.
• Send you feeding reminders if you enable them.
• Manage your free trial and subscription status.
• Respond to your support requests.
• Fix bugs, improve performance, and enhance app features.

We do not use your health data to train AI models, build user profiles for advertising, or for any purpose not listed above.

We take the security of your health data seriously and implement industry-standard safeguards:

• Encryption in transit: All data is transmitted using TLS/HTTPS encryption.
• Encryption at rest: Your feeding logs, triage data, and account information are stored in a secure PostgreSQL database hosted by Neon on enterprise-grade cloud infrastructure with encryption at rest.
• Not stored in iCloud: Nurtara does not use Apple iCloud or Apple Health (HealthKit) to store your data. All feeding logs, triage responses, and account information are stored on Nurtara's own secure servers — not in your iCloud account.
• Access controls: Only essential technical personnel have access to production data, and access is logged and audited.
• Local storage: Your trial start date is stored locally on your device using secure storage and is not transmitted to our servers.

While we implement robust security measures, no system can guarantee 100% security. We encourage you to use a strong password and contact us immediately if you suspect unauthorized access to your account.

We work with a small number of carefully selected third-party providers. We share only the minimum data necessary with each:

• RevenueCat: Manages in-app subscription purchases and renewal verification. RevenueCat receives anonymous transaction identifiers and subscription status — it does not receive your health or feeding data. See RevenueCat's Privacy Policy.
• Apple App Store: Processes all in-app purchase payments. Apple does not receive your health data. See Apple's Privacy Policy.
• Neon: Our secure database hosting provider. Neon stores your data on our behalf and does not access or process it for their own purposes. See Neon's Privacy Policy.
• Sentry: Collects anonymized crash reports and error logs to help us fix technical issues. Sentry does not receive your health or feeding data. See Sentry's Privacy Policy.

Each of these providers is contractually required to handle any data they receive with the same level of protection described in this policy. None of them may use data received from Nurtara for their own marketing, advertising, or any purpose beyond delivering their service to us.

We do not sell, rent, license, or share your personal health data with any third parties for marketing, advertising, or commercial purposes of any kind.

We may disclose your information only in the following limited circumstances:

• Service providers: As described in Section 5 above, to the extent necessary to provide the service.
• Legal compliance: If required by law, court order, or to protect the rights, property, or safety of Nurtara, our users, or the public.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data would be transferred only to a successor entity that agrees to be bound by this Privacy Policy.

Nurtara does not currently integrate with Apple Health (HealthKit). If we add HealthKit integration in a future version, we will update this policy and request your explicit permission before accessing any HealthKit data. In accordance with Apple's guidelines, any HealthKit data will never be shared with third parties or used for advertising purposes.

We retain your feeding logs, triage responses, and account data for as long as your account is active and for a reasonable period afterward to support your requests and resolve any disputes.

If you request deletion of your account and data, we will permanently delete your records within 30 days, except where retention is required by law. Uninstalling the app removes locally stored data (trial dates, cached data) but does not automatically delete server-stored feeding logs — please contact us to request full deletion.

Nurtara is designed exclusively for adult caregivers (18+). We do not knowingly collect personal information from children under 13.

Baby-related data recorded in the app (feeding patterns, mood, diaper counts) is entered by and associated with the adult caregiver's account — not with the infant. We do not create profiles for infants and do not share infant-related data with third parties.

If you believe we have inadvertently collected data from a minor, please contact us immediately at admin@nurtaraapp.com and we will delete it promptly.

Depending on your location, you may have the following rights:

To exercise any of these rights, contact us at admin@nurtaraapp.com. We will respond to all requests within 30 days.

In accordance with Apple's App Store requirements, here is a summary of our data practices as disclosed in our App Privacy labels:

• Data linked to you: Email address, feeding logs, triage responses (used to provide the service).
• Data not linked to you: Crash logs, device type (used for app analytics and diagnostics).
• Data used to track you: None. We do not use advertising identifiers or cross-app tracking.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through an in-app notice or email at least 30 days before the changes take effect. The updated policy will always be available at nurtara.com/privacy. Your continued use of Nurtara after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: