Additional notice for consumer health data
This notice supplements the Nurtali Privacy Policy for consumer health data, including where laws such as the Washington My Health My Data Act apply. Nurtali is operated by Ortal Zamir under the public brand name Nestly Labs.
Consumer health data we collect
Depending on the features you choose, Nurtali may process child or parent/caregiver information about sleep, nutrition, feeding, growth, symptoms, temperature, medicines, vaccines, health status, appointments, mood, pain, hydration, exercise, journal entries, and other health or wellbeing information you enter. Nurtali may also create summaries, trends, corrected-age values, wake-window estimates, or similar derived information from records you provide.
Sources
Consumer health data comes from you, from an authorized caregiver you invite to a shared child profile, from files you choose to import such as supported Nara exports, and—only if you choose to connect them—from Health Connect or Apple Health (daily step totals and sleep-duration summaries, not raw sensor samples). After you connect, your device may refresh those aggregate summaries in the background when the operating system permits it; disconnecting stops that background refresh. Data also comes from calculations or summaries Nurtali creates from those records.
Why we collect and use it
We use consumer health data only to provide the tracking, history, trends, summaries, reminders, caregiver-sharing, import/export, and other product functions you request; to secure and troubleshoot the service; and to comply with applicable law. Nurtali is an organization and tracking tool, not a medical device, and does not diagnose, treat, cure, or prevent medical conditions.
Consumer health data we share
We do not sell consumer health data. We may disclose it to processors only as necessary to provide a requested Nurtali function, including Base44 for hosted application, authentication and data services, and Google/Firebase where necessary for enabled notification functions. Child records may also be shared with caregivers you expressly authorize. Product analytics is optional and is configured so Nurtali does not intentionally send user-entered health content to PostHog.
Your rights
Where applicable, you may ask whether Nurtali is collecting, sharing, or selling consumer health data about you; request access; withdraw consent for future collection or sharing where consent is the basis; or request deletion. Nurtali does not require you to create a new account solely to make a rights request. Existing account controls may be used to securely authenticate a request.
How to make a request
Use the in-app account/privacy controls or email support@nurtali.com. We may take reasonable steps to authenticate your identity and authority over the requested data. Where Washington law applies, we aim to respond without undue delay and within 45 days, subject to the extension permitted by law.
Deletion and processors
When a valid deletion request applies to consumer health data, Nurtali will delete applicable records from systems under its control and direct applicable processors or other recipients to honor the request as required by law. Backup deletion may follow the legally permitted/provider retention process.
Appeals
If Nurtali refuses to act on a consumer health data request, you may appeal by emailing support@nurtali.com with the subject “Consumer Health Data Appeal”. Where Washington law applies, we will respond to an appeal within the period required by law. If an appeal is denied, you may contact the Washington State Attorney General through atg.wa.gov.
Changes and contact
We will update this notice before collecting, using, or sharing new categories of consumer health data for materially different purposes where applicable law requires additional disclosure or consent. Controller: Ortal Zamir. Privacy requests: support@nurtali.com. Legal correspondence: contact@nurtali.com.
Nurtali · Nestly Labs