Privacy policy

North & Nest LLC (“North & Nest,” “we,” or “us”) operates northandnest.io. This policy covers our company website, communications, and account and support features where available. Individual apps have their own privacy information. NestEd is in development; its app-specific privacy information will be provided before public release.

1. Information we collect

Website visits. Our hosting and security providers may process your IP address, browser and device information, requested pages, timestamps, page-performance measurements, and technical logs needed to deliver the website and investigate errors or misuse.

Account sign-in. When you use account features, we process your email address, an account identifier, sign-in method, and session and security information. If you choose Google, Google may provide your name, email address, profile image, and provider identifier according to the permissions shown during sign-in. If you choose Apple, Apple may provide your name, a provider identifier, and either your email address or a private relay address if you choose Hide My Email. We do not receive your Google or Apple password.

Account security. If you enable an authenticator, our sign-in provider processes the security settings and verification records needed to set it up and check your codes. Keep your sign-in codes and authenticator setup information private.

Support and messages. We receive the information you send: your email address, product, request type, subject, description, replies, and optional details such as device model, platform, app version, expected behavior, and reproduction steps. We also keep request references, timestamps, statuses, and staff actions needed to manage the conversation.

Send only information needed to explain the issue. Please leave out passwords, payment details, student records, medical information, and other sensitive family information. NestEd learning records are not automatically collected through the website’s current sign-in and support features.

The company website has no customer login. Authentication is scoped to the product: the NestEd app and NestEd support use the same NestEd Firebase Authentication account. Other products have separate identities.

2. How we use information

• Deliver and maintain the website and available account features.
• Verify sign-ins, manage sessions, and protect accounts and private requests.
• Respond to questions, investigate problems, and evaluate product suggestions.
• Maintain support history, troubleshoot failures, and prevent abuse.
• Meet legal obligations, resolve disputes, and protect our users and legitimate rights.

We do not sell personal information or share it for cross-context behavioral advertising. We do not run advertising or marketing pixels. Our hosting and security providers may use browser measurements to monitor website performance and detect misuse.

3. Sign-in and browser storage

Account features let you sign in with Apple, Google, or an email address and password. When you choose email and password, our authentication provider processes your sign-in credentials and sends account verification and password-reset emails. When you choose Google, we use the Google account information described above to create or recognize your product account, authenticate you, and associate your account with your private support requests. We request basic email and profile information; we do not request access to your Gmail messages, Google Drive files, contacts, or calendars.

We store this information with your account using providers that handle sign-in and account storage. Some account information is also stored temporarily in your browser to keep you signed in. We use this information for account access and support, not advertising. The provider disclosures, retention criteria, and access and deletion request process below also apply to information received through Google or Apple sign-in.

Account features use essential browser storage to keep you signed in within the current tab, complete sign-in, and help prevent duplicate support submissions. You can clear browser storage or sign out, although doing so may end your session. We do not use this storage to track you across websites.

Google and other services you visit may use their own cookies or storage under their own policies. See Google’s privacy policy for information about Google’s services, and Apple’s Sign in with Apple privacy information for Apple’s service.

4. Service providers and other disclosures

We use service providers to operate the website and support our customers. They receive and process information needed for the services they provide:

• Website hosting and security providers: process IP addresses, browser information, page requests, performance measurements, and technical logs to deliver the website, monitor its reliability, and protect it from misuse.
• Account authentication and storage providers: process sign-in information, security settings, support requests, and conversation history to manage accounts, protect access, and store your requests.
• Email delivery and correspondence providers: process email addresses, message contents, and delivery records to deliver account verification and requested password-reset emails and handle company and support correspondence.
• Engineering support providers: store private copies of problem reports and improvement suggestions, including the details you supply, request status, and published replies, so our team can investigate and track work. General help questions are not copied to this tracker. We do not automatically add your account email or sign-in information to these copies.

Support requests and conversation history are private. Access is limited to the person who submitted a request and authorized support personnel. We also retain restricted backup copies for recovery.

We may disclose relevant information when required by law or valid legal process, to investigate abuse or security incidents, to protect rights and safety, or in connection with a merger, acquisition, or transfer of our business, subject to applicable privacy obligations. If another purpose requires your permission, we will ask for it.

5. Security, storage, and retention

We use access controls and other safeguards to protect account and support information from unauthorized access. No website, email service, or storage system can guarantee absolute security.

Retention depends on why information was collected. Account information supports your use of account features; support records support the conversation and follow-up investigation. Some information may need to be kept for security, legal obligations, dispute resolution, or recordkeeping. Provider logs and backups may have separate retention periods. Contact us to ask about information you have shared or to request deletion; we will explain any applicable reason information must be retained.

North & Nest operates in the United States. Our providers may process information in other locations, where data-protection laws may differ from those where you live. Applicable legal requirements continue to apply to our handling of your information.

6. Your choices and privacy requests

You can browse public pages without an account, choose Apple, Google, or email-and-password sign-in, and decide what to include in a support message. Account features require enough information to authenticate you and associate requests with your account.

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. Where processing depends on consent, you may be able to withdraw it. These rights may have exceptions.

Send requests to support@northandnest.io with “Privacy request” in the subject. Tell us which account or interaction your request concerns. Requests about support information also cover copies in our engineering tracker. We may need to verify your identity before disclosing or changing account information. Do not send passwords, sign-in codes, or authenticator setup keys. Account deletion is currently handled by request; a self-service website control is not available.

We will respond as required by applicable law. If we cannot fulfill a request, we will explain why and any applicable way to challenge the decision. You may also have the right to contact a relevant privacy regulator. We do not penalize you for exercising applicable privacy rights.

7. Children’s information

This company website and its account and support services are intended for adults, including parents and educators. We do not direct these services to children under 13 or knowingly ask them to create accounts or send personal information. Please avoid including children’s personal information in support requests.

If you believe a child has provided personal information through this website, contact support@northandnest.io so we can investigate and take appropriate action. Information practices for children’s records within an app will be addressed in that app’s own privacy information.

8. Changes and contact

We will update this policy as our services and practices change. The date above identifies the latest revision. For material changes, we will provide any additional notice or choice required by law.

For privacy questions or requests, contact North & Nest LLC at support@northandnest.io.