Privacy Policy

1. Who We Are

2. What Information We Collect

2.1 Account Information

• First and last name
• Email address
• Password (stored as a one-way cryptographic hash — we cannot see your password)
• Household name and your role within the household (Admin, Member, Co-Parent, Child)

2.2 Home & Household Information

• Home profile details: city, province, year built, square footage, home features (pool, fireplace, irrigation, heating type, roof type)
• Household member names and roles
• Family calendar events and details you create
• Tasks and assignments created within your household
• Grocery lists and items
• Weekly schedule entries (recurring activities, lesson times, and household routines you add)

2.3 Home Management Data

• Maintenance tasks, scheduled dates, completion dates, costs, and notes
• Photos you choose to attach to maintenance records
• Home budget entries: expense amounts, dates, and categories
• Home History Timeline entries
• Seasonal checklist completion status
• Home Health Score data derived from your maintenance records

2.4 Documents & Travel Information

• Document names, categories (warranty, insurance, manual, receipt, contract), and expiry dates
• Photos of documents you choose to upload
• Travel document information: person's name, document type, and expiry date

2.5 Meal Planning & Other Features

• Meal selections and weekly planning choices
• Emergency preparedness checklist status and go-bag inventory items
• Co-parent expense amounts, dates, and categories (shared only with your designated co-parent)

2.6 Ask Audrey AI (Audrey Gold — Explicit Opt-In Required)

• The text you type into Ask Audrey is processed locally on your device to identify the intended action (add a task, log an expense, find a vendor, etc.)
• When Audrey takes an action at your request — adding a task, event, grocery item, expense, schedule entry, or home record — that item is saved in your household's local app data, the same as if you had entered it manually
• Ask Audrey automatically checks every message for emergency signals (gas leaks, fires, medical emergencies, violence) and mental health crisis signals. This check runs entirely on your device. No emergency-related content is ever transmitted anywhere.

Voice commands (optional)

If you tap the microphone button, your voice is processed by Apple's Speech Recognition (iOS) or Google's Speech Recognition (Android) — built into your device's operating system. Audrey never stores, transmits, or has access to your audio. The microphone is completely inactive whenever the Ask Audrey screen is closed or the app is in the background. Microphone access requires your explicit approval in the iOS/Android permission dialog.

Current version — fully on-device

All Ask Audrey processing happens entirely on your device. Nothing is sent to any external server or AI system in the current version of the App.

Future cloud AI version

When Anthropic cloud AI is activated in a future update, only the request you type and basic home context (city, province, home type, year built, key features such as pool or fireplace) will be transmitted. Your GPS coordinates, document data, and personal identifiers will never be sent. Existing users who have opted in will be notified and asked to re-confirm before any cloud processing begins. Anthropic does not use API data to train its AI models.

Disabling Ask Audrey

You can disable Ask Audrey at any time through Settings → Ask Audrey AI. Any data already added through Audrey (tasks, events, expenses, etc.) remains in your app until you delete it manually. Ask Audrey is available exclusively to Audrey Gold subscribers and requires a separate explicit opt-in.

2.7 Device & Technical Information

• Device push notification token (to deliver reminders to your device)
• App version and device type
• Basic usage information (which features are used, frequency) used only to improve the App

2.8 Payment Information

Payment processing for subscriptions is handled by Apple App Store (iOS), Google Play (Android), or Stripe. We do not store your credit card, debit card, or banking information.

3. How We Use Your Information

We use your information solely to:

• Create and manage your account and household
• Provide the features of The Audrey App
• Send push notifications for reminders you have requested (maintenance tasks, document expiry alerts, task due dates)
• Send transactional emails (password reset, account confirmation)
• Process subscription payments and manage your subscription tier
• Improve the App using anonymized, aggregated usage data
• Respond to your support requests
• Comply with applicable Canadian law

4. How We Share Your Information

We share your information only with the service providers listed below, solely to deliver the App's services. All providers are contractually required to protect your data.

Apple Inc.

Used for App distribution, TestFlight, and in-app purchases. Privacy: apple.com/privacy

Stripe Inc.

Used for payment processing where applicable. We do not see your card details — Stripe handles them directly. Privacy: stripe.com/privacy

Expo Push Notification Service (Expo, Inc.)

Used to deliver push notifications to your device. Your device push token is registered with Expo's service, which routes notifications to Apple APNs (iOS) and Google FCM (Android). Privacy: expo.dev/privacy

Railway.app (Railway Corp.)

Used to host the App's backend server and database. Your household data is stored on Railway's secure servers. Privacy: railway.app/legal/privacy

Amazon Web Services (AWS)

Used for secure cloud storage of documents and photos you choose to upload. Privacy: aws.amazon.com/privacy

Anthropic, PBC (Future — Ask Audrey AI Feature)

If the Ask Audrey AI feature processes queries externally in a future version, queries you submit and relevant home data may be sent to Anthropic's API to generate responses. This feature will be strictly opt-in with clear disclosure before activation. Anthropic does not use API data to train its AI models. Privacy: anthropic.com/privacy

5. Data Storage & Security

Your data is stored on secure servers in Canada and/or the United States. We employ the following safeguards:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed using bcrypt — we cannot retrieve your password
• Sensitive data on your device is stored using encrypted secure storage
• Access to personal data is restricted to authorized personnel only
• We conduct periodic security reviews

No method of electronic storage is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account:

• Your personal data will be permanently deleted from our systems within 30 days
• Anonymized, aggregated data that cannot identify you may be retained for analytical purposes
• Financial records required by Canadian law (typically 7 years) will be retained for the legally required period

7. Your Rights (BC PIPA / PIPEDA)

Right to Access

You may request a copy of the personal information we hold about you by emailing info@nestalignco.com. We will respond within 30 days.

Right to Correction

If information we hold is inaccurate, you may request correction. Most information can be updated directly in Settings.

Right to Withdraw Consent

You may withdraw consent at any time by deleting your account. Note that this means you will no longer be able to use the App.

Right to Delete Your Account

You may delete your account and all household data through Settings → Data & Privacy → Delete Account. This is permanent and cannot be undone.

Right to Data Export

You may request your data through Settings → Data & Privacy → Export My Data. Your data will be emailed to you within 24 hours.

Right to Lodge a Complaint

If you believe we have not handled your information appropriately, you may contact the Office of the Information and Privacy Commissioner for BC (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca).

8. Children's Privacy

The Audrey App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe your child under 13 has provided personal information through the App, contact us at info@nestalignco.com and we will promptly delete it.

Children may be added as household members (role: Child) by an adult account holder, who is responsible for any use of the App by that child.

9. Push Notifications

The App sends push notifications for reminders you have set up — maintenance tasks, document expiry alerts, task due dates, and seasonal checklists. You may disable notifications at any time through:

• Settings → Notifications within the App
• Your device's system settings → The Audrey App → Notifications

10. Third-Party Vendors

The Vendor Marketplace connects you with independent home service businesses. Any interactions with vendors outside the App are governed by their own privacy policies. Nest Align Co. is not responsible for the privacy practices of third-party vendors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above, notify you via push notification or email of material changes, and for significant changes affecting your rights, request your renewed consent.

Continued use of the App after notification constitutes acceptance of the updated Policy.

12. Contact Our Privacy Officer

This Privacy Policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein.
© 2026 Nest Align Co. All rights reserved.