Privacy Policy

Last updated: 17 May 2026

Nestilife ("Nestilife", "we", "the app") is a family location-sharing and safety app developed in Turkey and offered worldwide. This Privacy Policy describes the personal data we collect, use, store, and share through the Nestilife mobile app and the nestilife.com website. This policy is compliant with the EU General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law (KVKK No. 6698), and the U.S. Children's Online Privacy Protection Act (COPPA).

1. Data Controller

Nestilife — Contact: privacy@nestilife.com

We currently operate as a sole proprietor. This section will be updated when we incorporate.

2. Data We Collect

2.1. Account Information

• First and last name
• Email address
• Phone number (optional)
• Date of birth (for age verification)
• Your role in the family (Mother, Father, Child, etc.)
• Profile photo (if uploaded)

2.2. Location Data

• GPS coordinates (latitude/longitude)
• Location accuracy radius
• Speed and motion state
• Device battery level (for family members to see)
• Connected wireless network identifiers (used only to improve location accuracy; not stored)

Background location permission: If granted, the app shares your location in the background as well. On iOS, the system always shows the blue location indicator in the status bar. On Android, you are notified by a persistent notification. You can revoke this permission at any time from your device settings, which immediately stops sharing.

2.3. Device Data

• Battery level (to share with family members)
• Device model and OS
• Push notification token (Apple APNs / Google FCM)
• App version

2.4. Driving Data (Nestilife+ subscribers)

• Speed sensor measurements
• Accelerometer data (for crash detection)
• Trip start/end times
• Total distance

2.5. Communication Data

• Family chat messages (encrypted in transit with TLS 1.3, stored encrypted at rest on the server)
• Notification history
• Customer support requests

2.6. Automatically Collected Data

• Crash reports (Sentry — anonymous)
• Anonymous usage analytics (PostHog — opt-out available)
• IP address (for session security, deleted after 30 days)

3. Why We Use Your Data

• Service delivery: showing your location to family members, triggering safe-zone notifications
• Safety: crash detection, SOS, speeding alerts
• Account management: sign-in, password reset, subscription management
• Communication: family chat, system notifications
• Improvement: bug fixing, performance tuning (using anonymous data)
• Legal obligations: court orders, law enforcement requests

We do not use your data for advertising. We do not sell or share it with third parties for marketing.

4. Data Retention

5. Third-Party Service Providers

Active services:

• Apple Push Notification Service (APNs) / Expo Push: to deliver push notifications
• Google Maps Platform: map tiles (for map rendering only)
• Hetzner Online GmbH: hosting in Germany (GDPR-protected jurisdiction)
• RevenueCat: premium subscription validation and management (only in-app purchase metadata is processed; no payment data is collected)
• Apple App Store / Google Play: premium subscription purchase and billing (payment data is processed solely by the relevant store and never reaches Nestilife)

Planned for future releases (not active yet):

• Sentry: crash reports (anonymous, IP masked) — this policy will be updated when enabled
• PostHog: anonymous usage analytics (opt-out available)
• Resend: delivery of password-reset and notification emails
• Sign in with Apple / Google Sign-In: authentication when you choose social login

6. International Data Transfers

Your data is primarily processed on our servers in Germany (Hetzner Online GmbH). Third-party services (RevenueCat, Sentry, PostHog) may process limited or anonymized data outside the EU. Where applicable, such transfers are governed by Standard Contractual Clauses (SCCs).

7. Your Rights (KVKK Art. 11 and GDPR Arts. 15-22)

You have the following rights and can exercise them from within the app or via privacy@nestilife.com:

• Right of access: learn what data we hold about you
• Right to data portability: download all your data in JSON format (one tap from within the app)
• Right of rectification: correct inaccurate data
• Right to erasure: fully delete your account and all data (one tap from within the app)
• Right to restrict processing: request specific processing to be paused
• Right to object: object to processing for specific purposes
• Right to lodge a complaint: contact the Turkish KVKK Authority (kvkk.gov.tr) or your local EU data protection authority

We respond to all requests within 30 days.

8. Children's Privacy (COPPA)

Nestilife is not designed for children under 13. If the age gate during sign-up detects a date of birth that indicates an age under 13, account creation is blocked and the app cannot be used.

Users aged 13–17 can only sign up with parental consent; the account is placed in Kid Mode and protected by a parent PIN lock.

If you believe a child has created an account, or if you want to view, correct, or delete a child's data, contact privacy@nestilife.com. We will respond within 30 days.

9. Data Security

• All data is encrypted in transit using TLS 1.3
• Passwords hashed with bcrypt on the server
• JWT-based session control
• Family chat messages are shared only with members of the same family; encrypted in transit with TLS 1.3 and stored encrypted at rest on the server (end-to-end encryption is not used)
• Regular security reviews

10. Cookies

The app does not use cookies. The nestilife.com website uses only essential functional cookies; no third-party tracking cookies are used.

11. Policy Changes

When this policy is updated, users are notified via in-app message and email. For material changes, we request renewed consent.

12. Contact

For any privacy questions, requests, or complaints:

• Email: privacy@nestilife.com
• Web: nestilife.com