Privacy Policy

Nestdue is run by Adrians Raitums, [YOUR ADDRESS], Latvia ('we'). We are the data controller. Contact: hello@nestdue.com.

• Account data: email address, name if you give it, language, time zone, sign-in method.
• Household data: household name, members and invitations.
• Items you add: titles, categories, dates, repeat settings, reminder settings, notes, renew links and optional costs.
• Notification data: push subscription details for your device and a log of reminders sent.
• Payment data: plan and subscription status. Card details are handled by our payment provider; we never see or store them.
• Technical data: basic server logs (IP address, browser type, time) for security and fixing errors.

Please do not store full ID, passport, bank or card numbers in notes.

• To provide the service and send the reminders you set up (performance of a contract).
• To process payments and keep accounting records (contract and legal obligation).
• To keep the service secure and fix problems (legitimate interest).
• To send the weekly summary email (legitimate interest; you can turn it off anytime in Settings or with one click in the email).

We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you.

Only service providers who help us run Nestdue, under data processing agreements:

• Lovable Cloud, built on Supabase (database and login) - UK (London). The UK has an EU adequacy decision, so your data is protected to the GDPR standard.
• Resend (sending emails)
• Paddle (payments, as our reseller and Merchant of Record)
• Apple, Google or Mozilla push services (delivering push notifications to your device)
• Lovable (app hosting and development platform)

Some providers may process data outside the EU/EEA (for example in the USA). In that case the transfer is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

We share data with authorities only when the law requires it.

Other members of your household can see the household's items.

• Account and items: while your account exists. When you delete your account, we delete your data within 30 days.
• Payment and invoice records: as long as accounting law requires.
• Server logs: up to 30 days.

You can access, correct, download (export) or delete your data, restrict or object to processing, and withdraw consent. Most of this you can do yourself in Settings (Download my data, Delete account). For anything else write to hello@nestdue.com. We reply within one month.

You can also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or the authority in your own EU country.

We use only what is needed for the app to work. See our Cookie Policy.

Nestdue is not intended for anyone under 16.

Data is encrypted in transit, access is limited to your household, and we use the security features of our providers. No system is 100% secure; if a breach affects you, we will tell you and the authorities as the law requires.

If we change this policy in an important way, we will tell you by email or in the app before it applies.