Privacy Policy
1. Who we are
This Privacy Policy describes how Nurtureley LLC (“Nurtureley,” “we,” “us,” or “our”) collects, uses, and shares information in connection with:
- The Nurtureley mobile applications for iOS and Android;
- The parent web portal (including account, plans, and billing);
- The staff / admin web portal used by Nurtureley caregivers and operators; and
- Related application programming interfaces (APIs) that power those products.
Privacy questions: support@nurtureley.com · Phone: (617) 302-6002 · Postal: Greater Boston, Massachusetts.
Operational hosting and software support may be provided by our technology partner under contract. That partner processes data only to operate and support the Service on our behalf.
2. Scope
This Policy applies to personal information processed through the Service. It does not cover third-party websites or apps that we link to (for example, Collective invoice pages, Stripe Checkout, or Google Calendar), which have their own privacy practices.
See also our Terms of Service.
3. Who the Service is for
The Service is intended for adults — parents / guardians and care professionals. We do not knowingly allow children to create accounts. Information about infants and newborns (such as name, date of birth, and care events) is entered by adults in connection with care coordination.
4. Information we collect
Account and authentication
- Name, email address, optional phone number, and role (parent, nurse, or admin).
- Password (stored only as a one-way hash; we do not store plaintext passwords).
- Session credentials (access and refresh tokens) used to keep you signed in.
- Password-reset tokens (time-limited; stored hashed).
New parent accounts are created when invited by our team (or when an administrator provisions an account). Open public self-registration is not offered.
Family and household
- Family / household name and home address (street, city, state, postal code).
- Links between parents and a family (including co-parent invites by email).
- Care-engagement markers such as deposit confirmed and care agreement confirmed (set by staff).
- Optional unpaid care-invoice flag and an external pay / view link (see Payments).
Baby / infant profile
- Baby’s name, date of birth, optional notes, and optional photo URL if provided.
Care coordination data
- Care logs and events created by parents or assigned staff, which may include feeds, diapers, sleep, burps, spit-up and stool observations (including color where recorded), free-text notes, timed feed sessions, and visit-related household tasks (for example bottles, pump parts, clothing, nursery).
- Shift summaries and care reports generated as PDFs for a requested time window.
- Booking / visit requests (dates, status, notes) and related calendar sync metadata.
Ask Ashley
- Questions you submit and answers provided by Nurtureley staff, with status and timestamps.
Education and membership
- Education catalog interactions (videos, e-books, classes), progress, and enrollments.
- Entitlement status (for example care-client access or an active digital membership).
- Interest forms for consultations or classes (notes and preferred times).
Payments and billing metadata
- Care (physical) invoices: we may store whether an invoice is unpaid and a link to pay or view it in Collective. Card numbers for care invoices are not collected or stored in Nurtureley.
- Digital products / memberships: when you check out on the web, Stripe processes payment. We store Stripe-related identifiers and subscription / invoice metadata needed to grant access — not full card numbers.
Communications and devices
- In-app notifications (title, body, read state).
- Notification preference settings (when configured).
- Push notification device tokens and whether remote push is enabled (if you opt in).
- Optional local reminders stored only on your device (not uploaded to our servers).
Google Calendar (when enabled by staff)
- If calendar sync is connected, booking-related details may be written to Google Calendar (for example baby or parent names, visit timing, notes). Family calendars may include the home address; a separate operations calendar is configured not to include the street address.
- Parent email addresses may be used to share calendar access with the right people.
Technical and operations data
- Standard server logs needed to operate and secure the API (for example IP address, timestamps, error diagnostics).
- App update metadata used to deliver over-the-air software updates to the mobile apps.
We do not use third-party advertising SDKs in the mobile apps, and we do not sell personal information.
5. How we use information
- Provide care coordination between families and assigned staff.
- Operate scheduling, Ask Ashley, education content, and account features.
- Process or facilitate payments as described below and grant digital entitlements.
- Send transactional messages (for example password reset, booking updates, Ask Ashley answers) when email or push is configured.
- Maintain security, prevent abuse, and improve reliability.
- Comply with law and enforce our Terms.
6. How we share information
We share information with:
- Assigned care staff and administrators — so they can serve your family (parents generally see their family-scoped data; nurses are limited to assigned families; admins have operational access).
- Service providers that help us run the product, including: cloud hosting and database (Railway); digital payments (Stripe); care invoicing links (Collective); Apple Push Notification service and Firebase Cloud Messaging for push (when enabled); Google for Calendar sync (when enabled); and Apple / Google for app distribution.
- Professional advisers or authorities when required by law or to protect rights, safety, and security.
Card payment data for digital checkout is handled by Stripe. Care invoice payment pages are handled by Collective. Those providers process payment data under their own terms and policies.
As guests in your home, Nurtureley care professionals are expected to respect your privacy. Per our published Our Policies, care professionals sign confidentiality agreements covering information learned while serving your family.
7. Payments (two rails)
- Care services (for example overnight visits) are invoiced through Collective. Nurtureley may show an unpaid status and open Collective’s link in your system browser. The mobile apps do not sell care via In-App Purchase.
- Digital memberships and content are purchased on the web portal via Stripe Checkout (and managed via Stripe Customer Portal). The mobile apps may deep-link to the web for subscribe / manage flows and do not implement Apple or Google In-App Purchase for these products.
8. Retention
We retain account, family, care, Ask Ashley, education, and billing metadata while your relationship with Nurtureley is active and thereafter as needed for legitimate business purposes, disputes, security, and legal obligations.
9. Security
We use industry-standard measures appropriate to the sensitivity of the data, including HTTPS in transit, hashed passwords, role-based access controls, and encrypted storage of certain third-party credentials (for example Google refresh tokens when Calendar sync is enabled). No method of transmission or storage is completely secure.
10. Your choices and rights
- Access or update certain account and family information in the app or portal.
- Disable remote push notifications in Profile (Me).
- Sign out to end the current session.
- Delete your account in the app: Me → Delete account. This closes your login and removes personal account details. Care and billing records may be retained where required for care coordination or legal reasons. You can also contact support@nurtureley.com for access, correction, or deletion requests.
11. International users
The Service is operated from the United States. If you access it from another country, your information may be processed in the United States.
12. Children’s privacy
The Service is not directed to children under 13 as end users. Infant information is provided by parents or authorized caregivers for care coordination.
13. Changes
We may update this Policy from time to time. We will post the updated version with a revised effective date. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy where permitted by law.
14. Contact
Nurtureley LLC
Email: support@nurtureley.com
Phone: (617) 302-6002
Address: Greater Boston, Massachusetts