Privacy Policy.

On this page

Summary

The short version

• Snoaper, a Danish business, makes Nesty and is responsible for your data.
• We collect what Nesty needs to run your family's rules, keep the apps working and support you. Nothing is collected for advertising.
• Some of it is sensitive: your child's tablet location, which apps they use, and screenshots or camera pictures when you ask for one. We explain each below.
• A few trusted companies help us run Nesty, such as Google, Cloudflare, Resend, Stripe and OpenAI. Some of them work in the United States, under legal safeguards.
• You can see, correct, export or delete your data. Use our contact form or email support@nesty.family. We reply within 2 working days.

Controller

Who we are

Nesty is made by Snoaper (Danish CVR 45076199). Snoaper decides how Nesty uses personal data, so Snoaper is the "data controller" under the GDPR and UK GDPR.

• Contact form: nesty.family/contact
• Email: support@nesty.family
• A person at Snoaper reads every message. We reply within 2 working days.
• Snoaper's registered company details are public in the Danish business register (CVR) under CVR 45076199.

Snoaper has not appointed a Data Protection Officer. Send any privacy question to the email above.

For children

If you're a child using a Nesty tablet

Hi! This part is for you. Your parent or carer put Nesty on your tablet. Nesty helps your family's tablet rules work, like when it's time to play and when it's time to rest.

• Your parent can see which apps you use and for how long.
• Your parent can see where your tablet is.
• Your parent can ask your tablet to take a picture of the screen, or a photo with its camera.
• Nesty does not read your messages, listen through the microphone or look at your photos and files.
• We never sell anything about you, and we never show you ads.

If you have questions or worries, talk to your parent or another adult you trust. They can email us too.

Child data

Parent Consent & Child Data

• Nesty Parent is for adults (18 and over). Children do not create Nesty accounts or give us their own email address.
• A parent or legal guardian sets up each child profile and each child tablet, and chooses which features to use. Nesty Child Tablet does nothing until a parent links it to their family.
• By setting up Nesty for a child, you confirm that you are their parent or legal guardian (or have their permission), and that you have the right to manage that tablet.
• Please tell your child, in words that suit their age, that Nesty is on their tablet and what you can see. The "For children" section above can help.
• We use your child's data only to run the rules you set and to show you the tablet's status. We never use it for advertising, marketing or profiling.

Data we collect

What we collect

Nesty Parent (your app)

• Your account: your name and email address. If you sign in with Google, we also receive your Google profile picture link. If you use an email and password, we store only a secure scrambled version (a hash) of the password, never the password itself. We do not read your contacts, street address or other Google account data.
• Your family: family name, parent and co-parent names, co-parent invite emails, and your parent PIN, which unlocks Parent tools on the tablet.
• Child profiles you create: name or nickname, date of birth or age band, an avatar picked from Nesty's built-in set (not a photo), and the rules you set: schedules, quiet hours, app and website rules, KidTube channels, chores, reward time, child PIN and lock settings.
• Activity log: recent rule changes and which parent made them (name and email).
• Your phone: a device label, app version and a push notification token, so we can send you alerts.
• Plan and billing: your plan, trial dates, status and renewal date. For Google Play purchases: the product, order ID and purchase token. For existing Stripe subscribers: Stripe customer and subscription IDs, status, billing country and currency. We never see or store your full card number.
• Feedback and support: what you write, the topic, your email, name, family name, and your app version and platform.
• Nesty AI: what you ask and Nesty AI's answers. See Nesty AI.
• Crash reports: see the crash report list below.

Nesty Child Tablet (your child's tablet)

The child tablet sends Nesty what it needs to apply your rules and show you the tablet's status. For most items we keep only the latest value and overwrite it with each update.

• Tablet details: manufacturer, model, device name, serial number, a Nesty installation ID and a scrambled (hashed) Android ID, plus the Android and app versions.
• Family link: which family and child the tablet belongs to, and a push notification token.
• Apps and screen time: the list of installed apps, the app on screen, and app sessions (which app, when it started and for how long). These power screen-time limits, rewards and your reports.
• Connection and protection: the Wi-Fi network name, whether Bluetooth and location are on, and whether Nesty's protections are active.
• Location: the tablet's precise location (from GPS or the network). It is sent with status updates and when you tap Locate in Nesty Parent. As the tablet's manager, Nesty can switch location on so this works.
• Screenshots and camera pictures: only when a parent taps Screenshot or Camera in Nesty Parent. The tablet then takes a picture of its screen, or a photo with its camera, and uploads it for you to view.
• Chore photos: if a chore asks for proof, your child can take a small, low-resolution photo that is stored with the chore.
• Diagnostics: technical logs that help us fix bugs. They are off unless you turn them on, except for 24 hours after each Nesty Child Tablet update, when the tablet sends a short timer check. Diagnostics include the family and child name, the parent email, the tablet model and the hashed Android ID.

Nesty Child Tablet does not collect messages, calls, contacts, microphone audio, the photos and files on the tablet, or browsing history. It uses Android's accessibility feature to spot and block settings, permission and purchase screens. It reads screen text on the tablet only for that, and never uploads it. When a blocked website is opened, Nesty records the browser app and the time, not the web address.

KidTube

KidTube plays videos from the channels you approve in YouTube's privacy-enhanced player (youtube-nocookie.com), and looks up channel details from YouTube. When your child watches, YouTube (Google) receives the tablet's IP address and what is watched, and handles that under Google's privacy policy. We don't control what YouTube collects.

Crash reports (both apps)

Both apps use Firebase Crashlytics to tell us when the app crashes. We set it up to collect the minimum: no user, child or family IDs, no advertising ID and no analytics. A crash report contains:

• the crash details (stack trace) and the time of the crash;
• device manufacturer, model and processor type, Android version, app version, and whether the device is rooted;
• random install IDs created by Firebase for that app install (the Firebase installation ID and a Crashlytics install ID);
• the device's state at the crash: free memory and storage, screen orientation, battery level and charging state, and the proximity sensor state.

Nesty PC Link (Windows helper)

PC Link talks to the child tablet over USB. It reads technical details it needs for setup, such as the serial number, Android settings and Nesty's status, and keeps them on your PC. It connects to the internet only to download and check the Nesty Child Tablet app from pc.nesty.family. It sends no usage data to us. If you save a bug report, it stays on your PC unless you choose to send it to us.

Our websites

• Hosting: nesty.family is hosted by Cloudflare and pc.nesty.family by Google Firebase Hosting. Like any web host, they receive standard request data (IP address, browser, page and time) to deliver and protect the sites.
• Visit counts: both sites use Cloudflare Web Analytics. It counts page views, the referring site, browser and device type, country and page speed. It sets no cookies, stores nothing in your browser and does not fingerprint or follow you across other websites.
• Fonts: nesty.family loads fonts from Google Fonts, so your browser connects to Google, which receives your IP address.
• No cookies: neither site sets cookies, so there is no cookie banner.

Purposes

Why we use it, and our legal basis

Data protection law says we need a lawful reason (a "legal basis") for each use. Here they are.

• You need to give us your name, email and basic family details to use Nesty, because we can't run the service without them. Everything else depends on the features you use.
• Nesty applies your rules automatically, for example locking the tablet at bedtime. These are your choices. We don't make decisions about you or your child that have legal or similarly significant effects.

Nesty AI

Nesty AI and Conversation Quality Review

Nesty AI is an optional assistant for parents. It lives in Nesty Parent, and behind your parent PIN on the child tablet. Children can't use it.

• What we send: your question, the last few messages of the chat, and the family details needed to answer, such as your family name, your children's names, schedules, rules, chores, reward and lock state, and how many tablets you have. Nesty AI can't see passwords, PINs or card details.
• Who answers: OpenAI's model GPT-5.6 Luna. OpenAI works for us as our processor. Our contract is with OpenAI Ireland Ltd, but processing is not kept in the EU: your questions and Nesty AI's answers may be transferred to the United States. That transfer is protected by the EU standard contractual clauses (and the UK Addendum for UK families).
• What OpenAI keeps: OpenAI does not use our requests to train its models. We send each request with storage turned off, so OpenAI does not keep the conversation for later. OpenAI may keep abuse-monitoring logs for up to 30 days. To help OpenAI spot abuse, we send a scrambled account ID, never your email address.
• Quality review: before you can use Nesty AI, you choose Agree and continue. From then on, Nesty keeps what you ask and Nesty AI's answers for up to 90 days, so Snoaper can review quality each week and fix genuine unanswered Nesty needs. Obvious PINs, passwords, tokens, card numbers and API keys are removed first. If you don't agree, Nesty AI stays off and nothing is sent.
• Withdrawing consent: use our contact form or email support@nesty.family and we'll delete your stored review records. Because the review is part of how Nesty AI works today, Nesty AI then stays off for your account.
• The chat on your screen is not saved on your phone. Review records are never sold or used for advertising, and they are deleted with your family account.

Providers

Who helps us run Nesty

These companies process data for us, only on our instructions and under data processing agreements. We don't share your data with anyone else, except where the law requires it.

Services with their own privacy policies

• Google Play handles Nesty Parent purchases, payment details and store subscriptions as its own controller.
• Stripe also acts as its own controller for fraud prevention and legal compliance.
• YouTube runs the KidTube player and channel details (see KidTube above).
• OpenStreetMap: when you view your child's tablet on the map in Nesty Parent, the map loads from openstreetmap.org, which receives the location being shown and your IP address. If you choose to open the location in Google Maps, Google receives it.
• Google Fonts serves the fonts on nesty.family.

We may disclose data if the law requires it, to protect someone's safety, or as part of a sale or merger of Snoaper's business, in which case this policy keeps applying to your data.

Transfers

Data that leaves the EU

Snoaper is based in Denmark. Nesty's main account and family database, with your family's settings, child profiles and tablet status, is stored by Google in the United States, while Nesty's server code runs in Belgium. Some other providers above also store or process data in the United States. Each transfer is protected by:

• the EU-US Data Privacy Framework (and its UK Extension) for providers certified under it: Google, Cloudflare, Resend and Stripe; and
• the European Commission's standard contractual clauses (with the UK Addendum for UK data) in our providers' data processing agreements. OpenAI relies on these clauses.

Use our contact form or email support@nesty.family for more detail or a copy of the safeguards.

Retention

Retention, Export & Deletion

We keep data only as long as we need it. Here is how long that is.

• Delete your account: use Help & feedback in Nesty Parent, our contact form, or email support@nesty.family from your parent account. We delete your family's data within one month. Steps are on the account deletion page.
• Export: ask us through the contact form or by email and we'll send your family's data in a common, machine-readable format.
• Deleting an app from a phone or tablet does not delete your account or cloud data, and does not cancel your plan.

Your rights

Your rights

Under the GDPR and UK GDPR, you can ask us to:

• give you a copy of your data (access);
• correct data that is wrong (rectification);
• delete your data (erasure);
• limit how we use it (restriction);
• send it to you or another service in a machine-readable format (portability);
• stop using it where we rely on legitimate interests (objection);
• withdraw your consent at any time, for example to the Nesty AI quality review. This doesn't affect what we did before.

As a parent, you can use these rights for your child too. Use our contact form or email support@nesty.family from your parent account. We reply within 2 working days, and we complete requests within one month (or tell you why we need longer, up to two more months). It's free. We may ask you to confirm it's really you.

Complaints

Please talk to us first so we can put things right. You can also complain to a data protection authority:

• Denmark: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark. www.datatilsynet.dk, dt@datatilsynet.dk, +45 33 19 32 00.
• United Kingdom: the Information Commissioner's Office (ICO). ico.org.uk/make-a-complaint, 0303 123 1113.
• Or the data protection authority where you live or work.

US families

For families in the United States (COPPA)

The US Children's Online Privacy Protection Act (COPPA) gives parents control over information collected from children under 13. Here is how Nesty works with it.

• Operator: Snoaper (Danish CVR 45076199). Contact us through our contact form at nesty.family/contact or by email at support@nesty.family. We reply within 2 working days.
• What Nesty Child Tablet collects from a child's tablet: the items listed under "Nesty Child Tablet" above, including app use, the tablet's precise location, and screenshots or camera pictures when a parent asks.
• How we use it: only to run the rules the parent sets and show the parent the tablet's status. Never for advertising, marketing or profiling.
• Who receives it: only the service providers listed above, who work for us, and YouTube when the child watches KidTube. We don't sell children's data or share it for advertising.
• Parent setup: a parent creates the account and sets up the child tablet themselves. Nesty Child Tablet collects nothing until a parent links it to their family.
• Parents' rights: you can review your child's information in Nesty Parent, or ask us for a copy. You can ask us to delete it. You can stop further collection at any time by removing Nesty from the tablet with your parent PIN (how to remove Nesty) or by deleting the child profile.
• Retention: we keep children's information only as long as explained in How long we keep it, and delete it when it's no longer needed.

Our promise

No selling, no ads, no ad tracking

• We never sell personal data, and never share it in exchange for anything.
• Nesty shows no ads. The apps contain no advertising or analytics tools and do not use the advertising ID.
• We never use your child's data to build a profile for marketing or to decide what to show them.

Security

How we protect your data

• All data travels over encrypted connections (HTTPS/TLS). Google encrypts stored data.
• The apps can't read the family database directly. Every request goes through our server, which checks that it comes from your family.
• Passwords are stored only as secure hashes. Parent tools on the tablet are locked behind your parent PIN.
• Only the people at Snoaper who need access to run and support Nesty have it.
• No system is perfect. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.

Changes

Changes to this policy

When we change this policy, we update this page and the date at the top. If a change matters, for example new data or a new use, we'll tell you in Nesty Parent or by email before it takes effect. Questions? Use our contact form or email support@nesty.family.