OurNest

Privacy Notice

Last updated: September 16, 2026

This Privacy Notice explains how HolmesLabs LLC ("we", "us", "our"), the operator of OurNest (the "Service"), collects, uses, and protects your personal data. HolmesLabs LLC acts as the data controller for personal data processed through the Service.

1. Personal data we collect

  • Account and household data: name, email address, optional phone number, password credential managed by our authentication provider, profile preferences, household membership, family role, and invitations.
  • Family content: events, recurring schedules, chores, groceries, dinner plans, family notes and messages, birthdays, photos, assignments, and the people responsible for an item.
  • Optional sensitive family content: information a family chooses to enter, including children’s names, school and appointment details, precise or saved locations, emergency contacts, allergies, medications, medical conditions, doctors, and insurance details.
  • Connected calendar data: calendar provider, private subscription address, imported event details, synchronization status, and read-only OurNest feed tokens.
  • Notifications and device data: push subscription or device token, platform, app version, notification preferences, delivery status, browser/device information, IP address, timestamps, and diagnostics needed for reliability and security.
  • Product analytics: a limited event name, page path, rotating browser-session identifier, platform, coarse plan tier, and coarse failure reason. We do not put event titles, family content, email addresses, calendar addresses, payment details, or advertising identifiers in product analytics.
  • Support data: messages you send us when you contact support.
  • Billing and subscription data: we do not collect or store your payment-card details. Card and payment processing happens on the platform you subscribe through — the Apple App Store, another mobile app store, or Paddle for website purchases. What we process is limited to subscription status information needed to unlock Premium: plan and product/price identifiers, subscription or transaction identifiers supplied by the store or by Paddle, purchase and renewal dates, cancellation state, and environment (sandbox or production). For app store purchases, this entitlement information reaches us through RevenueCat, which links your OurNest user ID to your store subscription.

2. How we use it

  • To create and maintain your account (contract).
  • To provide the shared calendar, lists, messages, reminders, calendar connections, public sharing you request, and real-time synchronization (contract).
  • For security, fraud prevention, and abuse detection (legitimate interests / legal obligation).
  • To respond to support requests (contract / legitimate interests).
  • To deliver optional email, SMS, push, morning-brief, and weekly-digest messages according to your settings (contract / consent).
  • To understand reliability and basic feature use with first-party, allow-listed product analytics (legitimate interests).

3. Sharing

We share personal data with:

  • Service providers / subprocessors: hosting, database, storage, authentication, email, SMS, push-notification, and calendar-connectivity providers acting on our instructions.
  • Paddle.com, our Merchant of Record for website purchases, for sale of the product, subscription management, payments, tax compliance, and invoicing.
  • Apple, for in-app subscriptions bought through the App Store. Those purchases are processed under Apple’s own privacy policy; we receive subscription status, not payment-card data.
  • RevenueCat, which processes store subscription and transaction identifiers on our behalf so we can grant and revoke Premium access.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law.

4. Retention

We retain account and family data while your account or household is active and as needed to provide the Service, protect it, resolve disputes, and meet legal obligations. Invitation and public-sharing links can expire or be revoked. Delivery, security, and audit records may be retained for a limited period. Account deletion is available in Settings; a household owner must first transfer ownership or explicitly choose to delete the household so another family member’s shared information is not removed by accident.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise these rights, contact us at support@holmeslabs.dev. UK/EEA users may also lodge a complaint with their supervisory authority.

6. International transfers

Personal data may be processed outside your country. Where applicable, we rely on standard contractual clauses or adequacy decisions to safeguard transfers.

7. Security

We use appropriate technical and organizational measures including encryption in transit, access controls, and least-privilege practices to protect your data.

8. Cookies

We use cookies or local storage that are necessary for sign-in, security, preferences, offline operation, and session-level first-party analytics. We do not use behavioral advertising cookies or third-party advertising trackers.

9. Children

OurNest is intended for use by families under parent or guardian supervision. Parents control invitations and family administration. Child and less-technical member experiences hide billing, ownership, connected-calendar secrets, and destructive administration. Families should only add sensitive information that they need for coordination.

10. Sharing links and connected calendars

When you deliberately create an event-share link or calendar feed, anyone who has that private link may be able to view the information included in it until it expires or is revoked. Treat these links like a private document. Connected-calendar addresses and feed tokens are credentials; we restrict their display and do not include them in analytics logs.

11. Contact

HolmesLabs LLC — support@holmeslabs.dev