Privacy Policy

Effective date: March 26, 2026

Nestled In Love, referred to in this policy as Nestled, we, us, and our, is a couples app designed to help partners build deeper emotional connection through daily cards, date planning, and shared activities. This Privacy Policy explains how we collect, use, and protect your information when you use our app and website.

Information We Collect

We collect the following categories of information:

Email address: used to create and secure your account and to send essential account verification and security emails through Supabase Auth.
Account credentials: your password is processed by Supabase Auth and stored only as a secure hash. We do not store plaintext passwords in our application database.
Couple pairing data: the association between you and your partner within the app.
Swipe history: your responses when matching on date ideas and shared activities.
Daily card engagement: records of card completions, including timestamps and engagement streaks.
City and location preferences: a city you select manually for date recommendations. We do not collect GPS data or precise geolocation.
Subscription and billing data: payment processing is handled by third-party providers (e.g., Apple or Google). We do not store full payment card details.
Push notification tokens: if you enable push notifications, we store a device token (endpoint URL and encryption keys) to deliver notifications. Tokens are deleted when you disable notifications or delete your account.

How We Use Your Information

To authenticate your identity securely using email/password credentials managed by Supabase Auth and to send necessary account security emails.
To pair you with your partner and enable shared features such as daily emotional cards and activity matching.
To track engagement streaks and card completions so both partners can see when the other has participated.
To provide location-relevant date ideas based on your selected city.
To manage your subscription and process payments.
To send push notifications about partner activity, scheduled compliments, and calendar reminders when you have opted in.
To improve the app experience, fix bugs, and develop new features.

Partner Transparency

Nestled is built around mutual engagement. Your partner can see when you have completed a daily card or swiped on an activity. This shared visibility is a core part of the experience and cannot be disabled independently.

Data Sharing

We do not sell your personal data. We share information only in the following limited circumstances:

With your paired partner: engagement status and swipe matches are visible to your partner as described above.
Service providers: we use Supabase for authentication and database hosting, and Vercel for application hosting. These providers process data on our behalf under contractual obligations to protect it.
Legal requirements: we may disclose information if required by law, regulation, or valid legal process.

Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase infrastructure. Our application is hosted on Vercel. We use encryption in transit (TLS) and follow security best practices to protect your information. Authentication is handled through Supabase Auth. Passwords are never stored in plain text in our systems and are securely hashed by our authentication provider.

Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Export your data in a portable format.
Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at the email address listed below. We will respond to verified requests within 30 days.

Cookies

We use essential cookies to manage authentication sessions. We do not use third-party tracking cookies or analytics tools that profile your behavior across other websites.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

Account data: retained for the lifetime of your account. Upon account deletion, your data is permanently removed within 30 days.
Swipe history and engagement data: retained for the lifetime of your couple pairing. When you unpair or delete your account, this data is deleted.
Push notification tokens: retained while notifications are enabled. Deleted immediately when you disable notifications or delete your account.
Server logs: automatically purged after 90 days.
Backups: removed from backup systems within 30 days of account deletion.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

Right to know: you may request that we disclose the categories and specific pieces of personal information we have collected about you.
Right to delete: you may request that we delete your personal information, subject to certain exceptions.
Right to opt out of sale: we do not sell your personal information to third parties.
Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
Right to correct: you may request that we correct inaccurate personal information.
Right to limit use of sensitive personal information: we do not collect sensitive personal information beyond what is necessary for the services.

To submit a request, please email us at the address listed below. We will verify your identity before processing the request and respond within 45 days.

Privacy for Children (COPPA Compliance)

Nestled is intended for users who are 18 years of age or older. We do not knowingly collect information from anyone under 18, and the app is not directed at children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected data from a user under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately at the email address below.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice in the app. Your continued use of Nestled after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or your personal data, please reach out to us at hello@nestledinlove.com.