Privacy
Last updated 4 August 2026
Nestlify is a shared to-do list, calendar and messenger for a small group of people who already trust each other. It only holds what it needs to do that. There is no advertising, no analytics, no tracking, and nothing is sold or shared with anyone for marketing.
What we collect
Your account. An email address, so you can sign in and so we can send you a sign-in code. If you sign in with Apple or Google, we receive the email address and name that service gives us. If you use Apple's Hide My Email, we only ever see the relay address.
Your profile. A display name, an avatar colour, an optional avatar image, and your time zone — the last so a task due “tomorrow at 9” means the right moment for you.
What you put in. Your lists, tasks, notes, events, messages, reactions and any files or photos you attach. This is the content of the app; it exists because you created it.
Delivery details. If you turn on reminders, a push token for your device and your reminder preferences. The token identifies the installed app, not you personally, and is deleted when it stops working or you sign out.
Ordinary technical logs. Our hosting providers keep standard server logs, including IP addresses, for security and debugging. These are not linked back to your activity in the app.
What we do not collect
No analytics or telemetry SDK is present in the web app or the iOS app. We do not track you across other apps or websites, do not build advertising profiles, and do not use your content to train machine learning models. Nestlify sets no advertising or tracking cookies — the only cookies it uses are the ones that keep you signed in.
Who can see your content
Everything you put into a space is visible to the other members of that space. That is the point of it: a shared list only works if it is shared. Members can edit and delete each other's tasks and events, which is deliberate — Nestlify is a kitchen whiteboard, not a permissions system.
People in one space cannot see anything in a space they do not belong to. This is enforced in the database itself with row-level security, not just in the app, so a request for someone else's data returns nothing regardless of how it is made.
When you leave a space you lose access to it. Messages you have already sent remain, so the conversation still makes sense to the people who were in it.
Who processes it for us
Supabase — database, authentication, file storage and realtime. Data is stored in the Singapore region.
Vercel — hosting for the web app.
Resend — sending sign-in and invitation emails.
Expo and Apple — delivering push notifications to your device. A notification may include the task title and the space name, so it is readable on your lock screen.
Apple and Google — only if you choose to sign in with them.
These providers process data on our behalf to run the service. None of them is given your content for their own purposes.
How long it is kept
Your content is kept until you delete it or delete your account. Deleting a task, event or message removes it from view immediately; it is retained briefly behind the scenes so that undo works and so that a device coming back online can catch up correctly, then it is purged.
Deleting your account removes your profile, your memberships and the content that belongs only to you. Messages you sent in a shared space remain visible to that space, because removing one side of a conversation would rewrite everyone else's.
Your choices
You can edit or delete your content at any time from inside the app, turn reminders off in Settings, and leave a space whenever you like.
To get a copy of your data or to delete your account, email hello@nestlify.app from the address on your account and we will do it. Depending on where you live you may also have rights to correct, restrict or object to how your data is used; the same address is the way to exercise them.
Children
Nestlify is intended for people aged 13 and over. Younger children may appear in a family's space as a name on a task, which is up to the adults in that space; we do not knowingly create accounts for them.
Security
Traffic is encrypted in transit, and data is encrypted at rest by our providers. Access between spaces is enforced by the database rather than only by the app. Attachments are stored privately and served through short-lived signed links rather than public URLs. No system is perfect, and we will tell you promptly if something happens that affects your data.
Changes
If this policy changes in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.