Privacy Policy
1. In short
- Everything you record stays on your phone unless you choose to create or join a family.
- Nurtelio has no user accounts, asks for no name, e-mail address or phone number, and uses no advertising identifier.
- Your daily logging never shows ads. After a free week, the analysis screens (history, trends, growth curves) are unlocked either by a short rewarded video, shown only when you ask for it, or by Nurtelio Plus, a one-time purchase that removes ads for good.
- No analytics, no cookies and no other third-party services. Photos never leave your phone.
- When you share with a family, your records are stored on a server operated by the publisher in France and are visible only to the members you invite.
- You can delete everything at any time from the app, immediately and without asking us.
2. Who is responsible
The data controller within the meaning of the General Data Protection Regulation (GDPR) is Papouga, publisher of Nurtelio (postal address available on request at the contact address below, as permitted by article 6-III-2 of the LCEN for non-professional publishers). You can reach us at nurtelio@papouga.fr. No data protection officer is required for this service.
3. Scope
This policy covers the Nurtelio Android app and the Nurtelio synchronisation service reachable at https://nurtelio.papouga.fr. The Google Play Store, through which the app is distributed, is operated by Google under its own privacy policy.
4. Data we process, why, and for how long
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Records stored on your device (profiles, feeds, sleep, diapers, pumping, growth, health, mood, symptoms, notes, photos, reminders) | The app's core function. Stored only in the app's private storage on your phone; we have no access to them. | Not processed by us while they stay on your device. | Until you delete them or uninstall the app. |
| Device identifier and secret key (random values generated at first launch) | Authenticating your phone to the synchronisation service. Not linked to your identity. | Performance of the service you request (art. 6(1)(b)). | Until you delete your device data or the last family you belong to. |
| Family data (family name, display names chosen by members, roles, join dates, invite code) | Letting the members of a family share records and manage who has access. | Performance of the service you request (art. 6(1)(b)). | Until the family is deleted by its owner or left by its last member. |
| Synced records of a family, which include health data about a child or about you (feeding amounts, sleep, diapers, growth measurements, medication, vaccines, symptoms, mood, notes) | Keeping the members of your family in sync and letting you restore your records on a new phone. | Your explicit consent (art. 9(2)(a)), given when you create or join a family. You withdraw it by leaving or deleting the family. | Until the record is deleted in the app or the family is deleted. Deleted records are removed from the server as soon as every member has received the deletion, and in any case when the family is deleted. |
| Technical logs (IP address, date, requested URL in the web server log; device and family identifiers and error messages in the service log) | Security, abuse prevention, troubleshooting. | Legitimate interest in keeping the service secure and available (art. 6(1)(f)). | At most 30 days. Logs never contain the content of your records. |
5. What we do not collect
No name, e-mail address, phone number or postal address. No account or password. No location, no contacts, no analytics, no crash reporting service, no cookies. Photos attached to records are stored only on your phone and are never uploaded. We do not profile you and make no automated decisions about you. The advertising SDK described in section 12 is only initialised when you choose to watch a video, and never for Nurtelio Plus users.
6. Who can see your data
Records synced to a family are visible only to the members of that family. A person joins a family only with the invite code that you or another parent of the family gives them; owners and parents can generate a new code at any time and owners can remove members. We do not sell, rent or share your data with anyone else, and no third party processes it on our behalf. We would disclose data only if legally compelled to do so.
The synchronisation service runs on infrastructure operated by the publisher and located in France. Your data is not transferred outside the European Union.
7. Children
Nurtelio is made for adults: parents, guardians and caregivers. The records describe a child but are entered by an adult who has parental responsibility or acts with the parents' agreement, and who remains in control of them. The app is not directed to children and we do not knowingly collect data directly from anyone under 15. If you believe a child has sent us data directly, write to us and we will delete it.
8. Security
All traffic between the app and the server is encrypted with TLS. Every request is authenticated with your device's secret key, which is stored only on your phone and never appears in our logs. Access to a family's records requires membership of that family. Server data is stored in a directory restricted to the service account, and the server is kept up to date. No system is perfectly secure; if a breach were to affect your data we would inform you as required by law.
9. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time without affecting the lawfulness of earlier processing. Most of these rights can be exercised directly in the app: every record can be edited or deleted, the Account tab exports your records as a CSV file, the Family tab lets you leave or delete a family, and Settings lets you delete all data on the device and from the server. For anything else, e-mail nurtelio@papouga.fr; we answer within one month. You also have the right to lodge a complaint with your supervisory authority, in France the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).
10. Deleting your data
The data deletion page explains step by step how to delete a family, leave it, or erase your device's server data, and how to ask us by e-mail if you no longer have the app.
11. Google Play data safety summary
For transparency, this is how Nurtelio's processing maps to the categories of the Google Play Data safety section.
| Category | Collected? | Shared? | Details |
|---|---|---|---|
| Health and fitness — health info | Only if you create or join a family (optional) | Only with the family members you invite | Encrypted in transit, deletable in the app, not used for advertising. |
| Device or other IDs | Yes (random app-generated identifier; the advertising ID only when you watch a rewarded video) | Advertising ID with Google AdMob, only when you watch a video | The app identifier is required for the synchronisation service; the advertising ID is processed by Google to serve and measure the rewarded video, subject to your consent choices. |
| Purchase history | Only the fact that Nurtelio Plus was bought | No | Payment is handled by Google Play; we never see card details. |
| Personal info (name, e-mail, address, phone) | No | No | Display names chosen for family members are free text you control. |
| Photos and videos | No | No | Stored on the device only. |
| Location, contacts, financial info, messages, app activity, browsing, calendar, audio, files | No | No | Not accessed. |
| Crash logs, diagnostics | No | No | No analytics or crash reporting SDK. |
12. Advertising, consent and your choices
Nurtelio shows no advertising in the screens you use every day. After a free period, the analysis screens can be unlocked by watching a short rewarded video, and only when you tap the button to do so. These videos are served by Google AdMob (Google Ireland Limited for users in the EEA and the UK). Before the first video, and whenever the law requires it, Google's consent management platform (User Messaging Platform) asks for your choices: in the European Economic Area, the United Kingdom and Switzerland this is the TCF consent dialogue required by the GDPR and the ePrivacy Directive; in the US states with privacy laws it offers the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising. You can decline personalised advertising; videos are then served without personalisation, and if none is available the analyses are unlocked anyway. You can change your choices at any time from Settings › Nurtelio Plus › Advertising privacy options.
When a video is requested, Google receives the advertising ID of your device, its IP address, device and app information, coarse location derived from the IP address, and your interaction with the video, and processes them under Google's privacy policy and how Google uses information from partners. Nurtelio never sends your records, your child's data or your health data to the advertising SDK, which is not even initialised until you ask for a video. Nurtelio Plus users are never shown ads and the SDK stays inactive.
13. Nurtelio Plus
Nurtelio Plus is a one-time in-app purchase processed by Google Play under Google's terms. We do not receive your payment details; the app only stores whether the purchase is active on your Google account, in order to unlock the analyses and disable advertising. Purchases can be restored on a new phone from Settings › Nurtelio Plus and refunds follow Google Play's policy.
14. Changes
We will update this page if Nurtelio changes the way it handles data. The date at the top tells you when it was last revised, and material changes will be announced in the app before they apply.
15. Contact
Papouga · nurtelio@papouga.fr