Last updated: October 30, 2026
Nurtali ("Nurtali", "the App", "the Service") is a baby-tracking and organization app provided under the public developer name Nestly Labs. This policy explains what information is processed, why it is used, and the choices available to you.
Contact
Privacy, account and deletion requests: support@nurtali.com. General business or legal correspondence: contact@nurtali.com.
1. Information you provide
When you create and use a Nurtali account, you may provide an email address and authentication information. You may also enter child profile information and care records such as feeding, pumping, sleep, diapers, solids, walks, routines and notes. Enter only information you are authorized to provide and that is reasonably necessary for your use of Nurtali.
2. Information processed automatically
Nurtali may process technical and usage information needed to operate, secure and improve the service, including selected app events, page and screen views, session information, device or browser type, operating system, language, app version, timestamps, performance metrics such as Web Vitals, diagnostics, and network information such as IP address and approximate location where provided by the analytics service. Optional product analytics is limited to selected usage events, page and screen views and coarse performance metrics. PostHog session recording, heatmaps and broad interface autocapture are disabled for V1, and sensitive URL parameters are stripped before analytics transmission. If notifications are enabled, Firebase Cloud Messaging may process a device registration token and related technical information.
3. Photos and device storage
New child profile photos and photos attached to notes are designed to be stored on your device. Some app data may also be cached locally for responsive and offline-first use. Legacy hosted photos from earlier versions may remain with the applicable service provider until deleted under the relevant deletion or retention process.
4. Why information is used
Information is used to provide requested features, authenticate users, synchronize records, show history and trends, deliver requested notifications, maintain security, troubleshoot problems and improve reliability. Where applicable, processing is based on providing the service you request, your consent or choices for optional features, legal obligations, and legitimate interests in securing and improving the service. Nurtali does not sell personal information.
5. Service providers
Nurtali uses third-party services that may process information on its behalf, including Base44 for hosting, authentication, data services and internal admin analytics, PostHog for product analytics, and Google/Firebase for notifications and, where enabled, diagnostics. These providers operate under their own terms, agreements and privacy practices.
6. Retention and deletion
Server-side account and Nurtali records are kept while the account is active or as reasonably needed to provide the service, meet legal obligations, resolve disputes, prevent abuse or maintain legitimate backups. You can delete your account in the app or request deletion at nurtali.com/delete-account. Provider backups may persist for a limited period under normal retention schedules. Device-only data can also be removed by clearing app storage or uninstalling Nurtali.
7. Export and privacy choices
You can export Nurtali records as CSV from Account. Depending on applicable law, you may also have rights such as access, correction, deletion, restriction, objection, portability or withdrawal of consent. Contact support@nurtali.com to make a privacy request; reasonable verification may be required.
8. Children’s information
Nurtali is intended for parents, guardians and other authorized adult caregivers. It is not designed for independent use by children. Adults should only enter child information when they are authorized to do so.
9. Security
Nurtali uses technical and organizational measures intended to protect information, including authenticated access and user-scoped data permissions. No storage or transmission method is completely secure, so absolute security cannot be guaranteed.
10. International processing
Service providers may process information in countries different from the user’s location. Where required, applicable transfer mechanisms or safeguards are used by those providers.
11. Changes and complaints
This policy may be updated as Nurtali changes. The current version will be posted here with an updated date. Depending on applicable law, you may also have the right to complain to a competent privacy or data-protection authority.
Sensitive and imported information
If you choose to use health, development or self-care features, Nurtali may process information you enter about health or wellbeing, including symptoms, medicines, temperature, mood, sleep, nutrition, hydration and journal entries. If you choose to import a file, Nurtali processes the contents you select to create records in your account.
Your choices when information is requested
Unless a law specifically requires otherwise, providing information to Nurtali is voluntary. An email address and authentication information are required to create and use a synced account; if you do not provide them, Nurtali cannot create or authenticate that account. Child, self-care, health, journal, sharing and import information is optional; if you do not provide a particular item, the related feature may be unavailable or incomplete, while unrelated features remain available where technically possible. Optional product analytics stays off unless you enable it, and declining analytics does not block the core service. The purposes and recipients of information are described in this policy.
Photos and imported attachments
New photos selected or captured inside supported Nurtali photo features are intended to remain on the device unless the feature clearly states otherwise. Imported records may include a photo, image or attachment reference from the source export; Nurtali may store that reference with the imported record so it can be displayed later. Legacy hosted photo references may continue to use the applicable storage provider until deleted under the relevant retention or deletion process.
Sharing with authorized caregivers
If you use family or caregiver sharing, people you authorize may be able to view, add or manage shared child records according to their granted access. Do not invite anyone who should not have access to that information.
Optional product analytics
Optional product analytics covers selected usage events, page and screen views and coarse performance metrics, and remains off unless you enable it in Settings. Session recording, heatmaps and broad interface autocapture are disabled for V1. If enabled, Nurtali and PostHog may process the technical and usage information described above. You can withdraw this consent at any time in Settings; after you turn analytics off, Nurtali stops sending future optional product analytics. Processing necessary for authentication, synchronization, security, account functions and error handling may continue as needed to provide and protect the service.
Analytics choice for visitors who are not signed in
On Nurtali’s public web pages, visitors who are not signed in see a banner with equal Accept analytics and Decline choices. Nothing is sent to PostHog before you choose. If you accept, PostHog may process the page views and selected events described above, together with an approximate country that PostHog derives from the connection (GeoIP); if you decline, the analytics library is not loaded. Your answer is stored only in this browser. If you later sign in or register on this browser and your account has no analytics choice yet, that answer is saved as your account analytics choice; a choice already saved on your account takes precedence, and you can change it at any time in Account → Privacy. The Nurtali mobile apps ask for analytics consent inside the account instead of on public pages.
Aggregated service statistics
We use the records and account information needed to provide Nurtali, and calculate limited internal, aggregated operational statistics from them to maintain and improve the service, for example how many records are saved per feature or how many signed-in app opens come from each country. For the country count, the server adds one to a daily total for the country reported by the network for that connection; it does not store your identity, IP address or device with that total. This is separate from optional product analytics, which stays off until you opt in. Aggregated statistics do not mean we track every screen visit, and we do not sell baby-care details to analytics providers.
Operational performance and device diagnostics
To keep Nurtali fast and reliable for every signed-in account, the app records numeric timing measurements, for example screen-load and save durations, server response times and Web Vitals such as LCP, INP and TTFB, together with coarse device context: platform, operating-system and browser family with major version only, installed or in-browser display mode, a small, medium or large screen class, online status and app version. These measurements never include record contents, notes, names, exact screen dimensions or the full browser identifier. They are stored with Nurtali’s hosting provider, linked to your account only so they can be deleted with it, never sent to PostHog, and visible only to Nurtali administrators. They are processed under our legitimate interest in operating, securing and troubleshooting the service, independently of the optional product analytics choice, and are deleted when you delete your account.
Service-provider protection
When Nurtali uses a service provider to process personal information, the provider is used only for the disclosed service purpose and is expected to protect the information consistently with this policy, applicable law and the provider commitments governing the service.
Controller and contact
Nurtali is operated by Ortal Zamir, an independent developer operating under the public brand name Nestly Labs. Ortal Zamir is the controller of the personal information processed through Nurtali. Privacy, access, correction and deletion requests: support@nurtali.com. General legal correspondence: contact@nurtali.com.
Regional sensitive-data consent
For users in the EEA, United Kingdom and Switzerland, Nurtali asks for a separate explicit consent before features that process health or other sensitive information are used. Registration acceptance of the Terms and acknowledgement of the Privacy Policy is separate from that sensitive-data consent. If region detection is unavailable, Nurtali uses the stricter separate-consent flow. You can withdraw that consent from Account → Privacy; withdrawal blocks new entries in guarded sensitive features and does not automatically delete information already stored.
Store purchases and subscription data
If you buy or restore Premium through the Apple App Store or Google Play, Nurtali may process the store/provider, product identifier, subscription entitlement and status, start and expiry dates, renewal state, verification timestamps, and a pseudonymous account/store binding needed to verify the purchase and prevent one purchase from being attached to multiple Nurtali accounts. Apple or Google handles the payment transaction and payment credentials; Nurtali does not need to receive or store your full payment-card details. This information is used to grant or restore access, reconcile renewal, billing-retry, grace-period, cancellation, refund or revocation states, prevent fraud, support account deletion, and meet applicable legal obligations.
Nurtali · Nestly Labs