1. Who is responsible?
TwoNest is operated by Martin Preus, Denmark, who is the controller for the processing described here. For privacy questions and your rights, contact [email protected].
2. What do we process, and why?
- Account and profile: User ID, login information from Apple or email login, email address, name and your selected role. This is used to sign you in and identify you within the family. With Hide My Email, Apple may provide a relay address.
- Family: Family name, membership, invitations and children’s names and optional dates of birth. This connects the right people and displays the family’s content.
- Content: Photos, posts, hearts, parenting schedules, proposals, appointments and reminders that you create. This is used for the features you choose to use.
- Medical and dental appointments: An appointment’s title, time, location, note and associated child may contain health information. Only use the information the family needs to coordinate the appointment. Do not include medical records or unnecessary diagnoses. We do not process this information for advertising or tracking.
- Work rotations: If you use this feature, shift start dates, day/night shift, start time, duration and rest time are saved with the parenting proposal. This helps avoid overlaps and is visible to the other parent in the family.
- Notifications: The device’s push token, notification preferences and message status. This delivers notifications through Apple if you allow it. The “Discreet on the Lock Screen” setting (Profile → Notifications) is on by default, so the notification only says there is something new. If you switch it off, a notification may include the sender’s name and a reminder or proposal title; this text is sent through Apple’s push service and may appear on the Lock Screen. You can change permission in your iPhone’s settings.
- Subscription: Product ID, transaction ID, the purchase’s association with your account and family, status and expiry. This verifies the family’s access. When purchasing, the app sends your internal TwoNest account ID to Apple so the purchase can be linked to your account. Apple handles payment; TwoNest does not receive your full card details.
- Reports and blocking: If you use the app’s safety features, we process your account ID, family and content references, your description of the problem, and the report’s status and timestamps. The app does not automatically copy photos or complete messages into a report. A block stores the two account IDs, a name or role recorded at the time of blocking, and the time of the action. This information is used to investigate abuse and enforce the block. The other parent can see that sharing is paused but cannot read your private report.
- Operation and support: Technical events, security information and correspondence you send us. This is used for troubleshooting, protection against abuse and answering your request.
Information from the other parent may include your name, family information and content about the children. Adults in the family must only add and share information they are entitled to share. Avoid using free text and images for unnecessary health information or other particularly sensitive information. The app is for adults caring for children; children must not create their own accounts.
3. Legal bases for processing
We process necessary account, feature and subscription information to provide the service you request, under Article 6(1)(b) of the GDPR. Information about other family members and children, and necessary security and operational information, is processed on the basis of a balancing of interests under Article 6(1)(f): providing a private collaboration tool, protecting accounts and handling support. Particular consideration must be given to children when balancing these interests. Information may also be processed to comply with specific legal obligations under Article 6(1)(c).
You choose whether to allow access to selected photos and receive push notifications. Permissions can be changed in your iPhone’s settings. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.
For optional medical and dental appointments containing health information, processing is based on explicit consent under Article 6(1)(a) and Article 9(2)(a). The person creating the appointment must be entitled to consent on the child’s behalf and share the information with the other parent. The app asks for separate consent when such an appointment is created. We record the time, account and version of the consent text. You can use the rest of the app without creating health appointments. Withdraw consent by deleting the appointment if you created it, or contact support about deletion. Withdrawal does not affect the lawfulness of processing before withdrawal.
4. Who can see the information?
The family’s content is available to the connected parents. The other parent can save or export content they have access to, so share thoughtfully. There is no public photo feed.
We use Supabase for login, the database, photo storage and server functions. The app’s project is located in Ireland. Apple processes login, payment and push delivery under its own terms and privacy information. Our support email is provided through iCloud Mail. The Preus Studio website is hosted on Cloudflare Pages; the earlier app website remains hosted with OpenAI Sites and Cloudflare. Providers may process technical information, such as IP addresses and access logs, as part of operating these services. Authorised technical access may be necessary for support and operation.
An EU database location does not mean all providers only process information in the EU. If personal data is transferred outside the EU/EEA, the transfer must be covered by a valid transfer basis, such as an adequacy decision or EU Standard Contractual Clauses. Contact us for information about the relevant providers and transfer bases.
Providers with whom TwoNest shares personal information must provide the same or equivalent protection as described in this policy and required by the App Store’s rules. Processors may only use information for the agreed purposes and must have appropriate security, confidentiality and deletion terms. Supabase’s processing is covered by Supabase’s Data Processing Addendum. Hosting of the earlier OpenAI Sites website is covered by OpenAI Sites’ Data Processing Addendum. Apple’s independent services, including payments, Apple login, push notifications and iCloud Mail, are also described in Apple’s privacy policy. We do not send the family’s photos to OpenAI or another external image analysis service.
5. Retention and deletion
The account and family content are retained while they are used in the service, until they are deleted. Subscription expiry does not automatically delete family content: it can still be viewed and exported. Invitations expire after 72 hours.
Archiving a child is not deletion: the child is hidden from active selections for both parents, while information, photos, appointments and parenting schedules are retained. Both parents can restore the child. If you want the child’s information deleted, contact us so the request can be handled under the applicable rules.
If you leave a family without deleting your account, your own posts and events in that family are removed, pending proposals are withdrawn and open reminders are cancelled; shared history remains with the other parent.
When you delete your account, your account, profile and device registrations are removed. Your own posts and events are removed, pending proposals are withdrawn and open tasks are handled under the app’s deletion rules. The other parent’s content may remain in the family. Shared parenting schedules, agreed swap days and completed or cancelled reminder history remain with the other parent; you are shown there as “Former parent”, without your name or profile. Deleted photo files enter a cleanup queue; the system attempts to remove them immediately and retries during daily cleanup if this fails.
Technical logs and any backups follow the providers’ applicable retention practices. Information may be retained where necessary for a legal obligation or a specific legal claim. Contact us to ask what information about you is still retained. Copies exported by the other parent cannot be removed from their devices through TwoNest.
A report is retained while it is being handled and is deleted during daily cleanup once more than 180 days have passed after it was closed. Specifically necessary retention for a legal claim may extend this period. Reports you submitted are deleted with your account. A block remains until you remove it or either account is deleted; it also remains if you only leave the family. Removing your own block does not remove any block set by the other parent.
6. Your rights
Subject to the applicable rules, you may request access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interests. You can also contact us about your child’s information. Email [email protected]; we may ask for sufficient documentation to protect the account and child from unauthorised access. We normally respond to a rights request within one month.
You can complain to the Danish Data Protection Agency. Read more about your rights.
7. Security and photo metadata
Access to family content requires login and family membership. Photos are compressed in the app, and the app removes GPS location, camera data and other metadata before sending a photo to the server. The app uses server-side access control and encrypted network connections. No service can guarantee that data will never be lost or compromised.
In app versions with image checking, selected photos are analysed locally on your device for possible nudity before they can be shared. The photo and analysis result are not sent to an external analysis service and are not used by us for model training. The check can make mistakes. You can select another photo or contact support. Text submitted for sharing may be rejected by the server’s rules against certain serious threats and abusive incitement. Automated filters do not replace the ability to report content.
8. This website and changes
This website does not use its own analytics tools, advertising pixels, forms or marketing cookies. The hosting provider may process necessary connection and security information. If you follow an external link or send an email, the chosen service’s privacy terms also apply.
We update this policy when the service or processing changes. The date at the top identifies the current version.