NinavaPrivacy
Privacy policy
This policy covers the Ninava app and the ninava.app website. For questions or requests about your data, write to ola@ninava.app.
Summary
- Without an account, records stay only on your device, stored encrypted.
- With an account, records are kept on our servers so they sync with your family.
- We don't sell data, show ads or use analytics or tracking tools. This website uses no cookies.
- You can export the history and delete your account in the app.
Who this policy is for
Ninava is made for adults who care for babies: parents, grandparents, nannies and other caregivers. You enter your baby's data as their parent or guardian, and it is used only to show their routine and send the notices you turn on.
We don't build advertising profiles of anyone, children or adults.
What stays only on your device
In guest mode, without an account, all records live in an encrypted database on this device. The key is kept in the system keychain and never leaves the device. None of it is sent to our servers.
Also kept only on the device, with or without an account: language, volume unit, time format and time zone. Export files are created temporarily for you to share and then deleted.
If you lose the device while in guest mode, the history can be lost. That is why the app offers to move your records to an account.
What we keep when you use an account
| Data | Why |
|---|---|
| Account: the name and email from signing in with Apple, Google or an email code | To identify you and show your name to the people you share care with |
| Baby: name, date of birth, due date if you enter it, time zone | To work out age and times |
| Records: sleep, nursing and side, bottles with amount and milk type, diapers, free-text notes and the routine | To show the history, make predictions and sync between devices |
| Change history: who changed what and when | To undo, review changes made at the same time and show who logged what |
| Family and invitations: family name, roles and the email of the person you invited | To give access only to the people you chose |
| Device: the iPhone notification address, a random installation identifier, language, time format and your notice choices | To send notices and update the lock screen |
| Support: the message you send and, if you allow it, platform and app and system versions | To answer and fix problems |
| Subscription, once available: a customer identifier and the subscription status | To unlock Plus. We never receive card details |
Notices and the lock screen
Notices can include your baby's name and the name of the person who logged, for example “Theo fell asleep at 20:10”. What shows while the phone is locked depends on your device's notification settings. The lock screen Live Activity only shows the baby's name if that option is on.
The notification address is deleted when you turn notices off, sign out, or when Apple reports it is no longer valid. Live Activity addresses expire after 8 hours.
Service providers
We use a few providers, each for one job:
| Provider | What it does |
|---|---|
| Clerk | Sign-in with Apple, Google or an email code |
| Convex | Database and server for synced records |
| Cloudflare | This website and relaying notices to Apple and Google |
| Apple (APNs) and Google (Firebase Cloud Messaging) | Delivering notices and lock screen updates |
| Expo | Delivering app updates, with a technical installation identifier |
| RevenueCat, App Store and Google Play | Subscriptions, once offered |
| Resend | Emailing messages sent through in-app support, once enabled |
These providers are mostly in the United States, so your data may be processed outside your country. Each receives only what its job needs.
What we don't do
- We don't sell or rent data.
- We don't show ads.
- We don't use analytics, tracking or crash reporting tools in the app.
- This website uses no cookies or visitor analytics. Cloudflare processes your IP address to deliver the pages and protect them from abuse.
How long we keep data
Account data is kept while the account exists. Invitations expire after 7 days. Support messages are kept until the account is deleted. Provider backups expire on their own schedules.
Export and delete
In Settings, you export the history as CSV or JSON, by baby and by period. Also in Settings, you delete your account. See the steps and what happens to each piece of data in Delete account.
In shared families, the records you made stay in the baby's history, marked as from a deleted account. The owner of a baby can delete the baby, which removes its history for everyone.
Your rights
Depending on where you live, laws such as Brazil's LGPD, Europe's GDPR and US state privacy laws give you rights to know what we process, access it, correct it, delete it, take a copy, learn who we share it with and withdraw consent. We handle these requests the same way for everyone.
Write to ola@ninava.app from your account's email. We may ask you to confirm your identity to protect the account. We will never ask for a sign-in code or password. You can also complain to your local data protection authority.
Security
The app's database is encrypted on the device. Communication with our servers uses HTTPS. An invitation code travels in the part of the link that never reaches any server, and several identifiers are stored only as hashes.
Changes to this policy
When this policy changes, the date at the top changes too. If a change affects what we do with your data, we will tell you in the app first.