Your data
Privacy
Last updated 20 August 2026.
Who runs this
Nestling is run by Jeremy Dixon. It is a family guide, not an advertiser. We do not sell data, build ad profiles, or hand family records to other products.
Jeremy Dixon
Leitzachstr 62
83026 Rosenheim
Germany
What we keep
Your account (name, email, sign-in). Each child you add: name, birthdate, photo if you upload one, temperament tags, firsts, notes, and the plan. Care logs from people you accepted. Share keys and who asked to join. Your language choice. Session cookies so you stay signed in.
Why we keep it
To run the nest you asked for: the map, Room, and sharing with people you choose. The legal bases are the contract of using Nestling, and your consent as the parent who created the child’s record. Health-adjacent notes (sleep, food, potty) stay only so the right people can see them.
Children’s data
Nestling is for adults. A parent or guardian creates the child’s record. We do not offer accounts to children. If you are not that adult, do not add a child.
Who else can see it
People you accept with a share key. The database host (Neon). The sign-in broker if you use Google or X. If you use Ask, the question goes to xAI without the child’s name or birthdate, only an age in months and traits. Optional translation of a note also goes to xAI. We do not use those companies for ads.
How it is stored
The site talks to the database over TLS. On the live site, names, notes, photos, and care text are encrypted before they are written, using a key kept with the host (or DATA_ENCRYPTION_KEY if you later run Nestling on your own Vercel). That protects a stolen backup. It is not zero-knowledge: the app must decrypt the record to show it to you. Birthdates stay as dates so the map can work. Anyone who holds the host secrets can still read the data. We do not use it for ads or any other product.
Your rights
You can download everything we hold on you, fix a child’s profile, remove a caregiver, delete a child, or delete your account (that deletes children you own). You can object or complain to your data-protection authority. EU and UK users have the usual GDPR / UK GDPR rights of access, correction, erasure, portability, and restriction.