← NestPilot AI

Privacy Policy

Effective Date: July 1, 2026  ·  Last Updated: July 1, 2026  ·  Operator: BlackData LLC

The short version: We collect only what we need to run the app. We never sell your data. We never use your children's information for advertising. You can delete everything at any time.

On This Page

  • 1. Who We Are
  • 2. Who May Use This Service
  • 3. What We Collect
  • 4. How We Use Your Data
  • 5. AI Processing
  • 6. How We Share Data
  • 7. Third-Party Services
  • 8. Data Retention
  • 9. Security
  • 10. Your Rights
  • 11. California Residents (CCPA)
  • 12. Children's Privacy (COPPA)
  • 13. International Users
  • 14. Changes to This Policy
  • 15. Contact Us

1. Who We Are

NestPilot AI is operated by BlackData LLC ("we," "us," or "our"). This Privacy Policy applies to the NestPilot AI mobile application and the website at blackdata.info/apps/nestpilot-ai.html (collectively, the "Service"). By using the Service you agree to this Privacy Policy.

2. Who May Use This Service

NestPilot AI is intended solely for parents and guardians who are 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us immediately at support@blackdata.info and we will delete it promptly.

3. What We Collect

Information You Provide

  • Account information: your name, email address, and sign-in provider (Apple, Google, or email)
  • Family profile data: children's first names, ages, dietary restrictions, allergies, school details, and parenting notes you choose to enter
  • Co-parent workspace data: messages, shared expense records, custody schedule entries, and change requests shared with a co-parent
  • Photos and images: photos you upload for school document scanning or fridge scanning (processed to generate results, not retained permanently)
  • Support communications: messages and feedback you send to our support team

Information Collected Automatically

  • Device identifiers, operating system version, and app version
  • Crash logs and performance diagnostic data
  • Feature usage patterns (which screens and AI features you use) — aggregated and anonymized
  • Push notification tokens (used only to deliver co-parent sync alerts you request)

Payment Information

Subscription payments are processed entirely by Apple (App Store) or Google (Google Play). We do not receive, see, or store your credit card or payment card details. We receive only subscription status information (active/inactive) from RevenueCat, our subscription management provider.

4. How We Use Your Data

  • To provide, operate, and improve the Service and its features
  • To power AI features — your inputs are sent to Google Gemini AI solely to generate your requested responses
  • To sync co-parent data between your linked co-parent workspace accounts
  • To send push notifications you have opted into (co-parent sync alerts)
  • To respond to your support requests
  • To detect and prevent fraud, abuse, and security incidents
  • To comply with applicable legal obligations
  • To communicate product updates (only with your consent; unsubscribe anytime)

We do not sell your personal information. We do not use your data or your children's data for advertising purposes.

5. AI Processing

NestPilot AI uses Google Gemini to power features including the AI Copilot, meal planner, message rewriter, school document scanner, and emergency guidance. When you use these features:

  • Your text inputs or photos are transmitted to Google's Gemini API over an encrypted connection
  • Google processes the input to generate a response, which is returned to the app
  • Google does not use your inputs to train its models under our API agreement
  • We do not store your AI conversation inputs on our servers beyond what is needed to display your history within the app

AI-generated responses are for informational and organizational support only — not medical, legal, mental health, or emergency advice.

You can disable AI-powered features at any time in Account → AI Features.

6. How We Share Your Data

We share your information only in the following circumstances:

  • With your co-parent: data you add to a shared workspace (messages, calendar, expenses) is visible to the co-parent you have explicitly invited
  • Service providers: we use third-party providers to operate the Service (listed in Section 7); they process data only as directed by us and under data processing agreements
  • Legal requirements: we may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public
  • Business transfers: if BlackData LLC is acquired or merged, your information may transfer as a business asset; we will notify you before your data becomes subject to a different privacy policy

We never sell, rent, or trade your personal information to third parties for their own marketing purposes.

7. Third-Party Services

ProviderPurposeData Shared
Google Gemini AIPowers AI features (copilot, meal planner, scanner, etc.)Text inputs and photos you submit to AI features
RevenueCatSubscription managementAnonymous app user ID, subscription status
RailwayBackend database and API hosting (US-based)Account data, workspace data, messages
Apple (Sign In / App Store)Authentication and in-app purchasesApple ID (anonymous), optionally name and email on first sign-in
Google (Sign In / Play)Authentication and in-app purchasesGoogle account ID, name, email
Expo (EAS)App distribution and push notificationsDevice push token

8. Data Retention

We retain your account data for as long as your account is active. Co-parent workspace data (messages, expenses, calendar) is retained while the workspace is active. Photos submitted for scanning are not retained after the response is generated. You may request full deletion of your account and all associated data at any time (see Section 10). Anonymized, aggregated usage statistics may be retained indefinitely.

9. Security

We use industry-standard security measures including:

  • TLS encryption for all data in transit
  • Encrypted database storage
  • JWT-based authentication with token expiration
  • Rate limiting and abuse prevention on all API endpoints

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and keep your device software up to date.

10. Your Rights & Choices

Regardless of your location, you may:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and all associated personal data
  • Export your data in a portable format
  • Opt out of push notifications at any time via your device Settings
  • Unsubscribe from marketing emails via the unsubscribe link in any email we send

To exercise any of these rights, email us at support@blackdata.info or use our Data Deletion Request page. We will respond within 30 days. We may need to verify your identity before processing your request.

11. California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it
  • Right to Delete: request deletion of your personal information (subject to certain exceptions)
  • Right to Correct: request correction of inaccurate personal information
  • Right to Opt Out of Sale or Sharing: we do not sell or share your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information beyond what is necessary to provide the Service
  • Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights

To submit a verifiable consumer request, contact us at support@blackdata.info. We will respond within 45 days (extendable by an additional 45 days with notice).

12. Children's Privacy — COPPA Compliance

NestPilot AI complies with the Children's Online Privacy Protection Act (COPPA). The Service is not directed to children under 13 and we do not knowingly collect personal information from children under 13.

Family profile data (such as a child's name, age, or dietary preferences) is entered by and belongs to the parent or guardian account holder, not the child. This data is used solely to personalize the Service for the parent — for example, generating age-appropriate meal plans or providing relevant parenting guidance. Children do not have accounts and do not interact with the Service directly.

If you believe a child under 13 has directly provided us personal information without parental consent, contact us immediately at support@blackdata.info and we will delete such information as soon as possible.

13. International Users

NestPilot AI is operated in the United States. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. We take appropriate safeguards to protect your information during any such transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by in-app notification or email. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

Questions about this Privacy Policy or your personal data?

BlackData LLC
Email: support@blackdata.info
Website: blackdata.info
Data Deletion: blackdata.info/delete.html

We will respond to all privacy-related inquiries within 30 days.

Related: Terms of Service · Data Deletion · Back to NestPilot AI