Parents in control. Always.

NestBoard is a private organizer for one household. It is built for a family to use together. It is not somewhere children find on their own and sign up.

A parent or guardian creates the household and adds a profile for each child from inside their own account. Most children never need an email address or a login of their own. They use NestBoard on a device the family already shares, like a kitchen tablet.

A parent can also decide that an older child should be able to sign in on their own phone. The parent is the one who starts that, by adding an email address for the child and sending an invite. The child then sets a password.

Either way, an adult in the household sets it up and stays in control. A child cannot join a household without an invite sent from inside it.

Every child profile is created from an account that is already part of the household. There is no public sign-up a child can complete on their own, no directory of families, and no way to find or join a household from the outside.

By default a child profile has no email address and no password. It holds a display name, a color and initials, and whatever chores, events, routines, allowance, meals, or medication reminders the parent assigns. A parent can change any of it at any time.

If a parent wants that child to sign in on their own device, the parent adds an email address for the child and sends an invite. NestBoard emails a link, the child opens it and chooses a password, and from then on the child can sign in. Every NestBoard login needs its own address, so a child with a login has their own mailbox rather than sharing a parent’s. We store that address and a scrambled (hashed) version of the password. We never store the password itself.

A parent can cancel a pending invite before it is used, and unused invites expire on their own after seven days.

COPPA is the US Children's Online Privacy Protection Act. It requires a service to get a parent's consent before collecting personal information from a child under 13, to say plainly what it collects, and to let parents review and delete it.

In NestBoard a parent is the one who adds the child, so a parent is the one who gives that consent. Both places you can add a child now ask the same way. During first-time setup, a checkbox appears as soon as you put a child under 13 on your list, saying you confirm you are their parent or legal guardian and consent on their behalf. Setup will not move to the next step until it is ticked, and nothing about that child is recorded until it is. On the Family page afterwards, adding or editing a child lets you mark that the child is under 13, and once that is marked the same confirmation has to be ticked before the profile will save. NestBoard does not work out a child's age by itself, so in setup the age you enter is what raises the question, and on the Family page the marker is yours to set. Wherever consent is given, we store the date it was given. We do not check the relationship against anything, so this is a parent's word, recorded and dated, and not one of the formal verification methods the COPPA rule lists.

What we hold about a child depends on what the parent sets up. It can include a display name, a color and initials, a birthday if the parent enters one, a photo if the parent adds one, and the chores, events, routines, allowance, meals, or medications assigned to them. If a parent asks Robin to delete a child's medication, we keep a copy of it, without its dose history, for 30 days so the parent can undo it, then delete it. Removing the child's profile deletes that copy straight away.

A parent can also set food preferences for a child: diet choices such as vegetarian, foods they won't eat, and foods they reliably eat. We store them to plan meals, and share them with our AI provider only as needed for Robin's meal suggestions and the labels on recipes and planned dinners. They are deleted when the child's profile is removed. Within the household, adults and caregivers, including on a shared kiosk, can see food preferences; only an adult signed in on their own device can change them; children and guests are only told whether one exists.

A child who uses NestBoard can also rate a meal with a thumbs up or thumbs down and, if they like, leave one short note. We save the dish, the thumb, the note and the time with that child's profile. Those ratings and notes can be included in the meal suggestions Robin makes for the family, which means they are shared with our AI provider only as needed to make those suggestions. A child's thumbs down is only a note and never stops a dish from being suggested, and a rating from a parent on the same dish counts for more. They are deleted when the child's profile is removed.

If the parent has given the child their own sign-in, we also hold that email address, the scrambled password, and the ordinary technical records that come with using any app, such as sign-in times and the device token needed to deliver a notification.

If the household has connected Alexa, a voice profile identifier for a child may be stored only after someone says "I'm ..." with that child's name on an Echo. It is an opaque code Amazon assigns to the voice, never a recording, and we receive no audio. It only lets NestBoard know which family member is speaking, and a child recognized this way can listen but cannot change anything by voice. A parent can disconnect Alexa at any time in Settings, which deletes every stored voice identifier for the household immediately.

A parent can withdraw that consent at any time. Section 7 explains exactly how.

We do not show advertising in NestBoard, to children or to anyone else.

We never sell or rent a child's information.

We do not record what you type about your children. There is one place in NestBoard where we record a screen at all: for every new household on the web (in the UK, the EEA, and Switzerland, only after a yes to our analytics banner), the setup screens where a parent builds the household, and the first view of the dashboard straight afterwards. We added it in September 2026 to see where new households get stuck during setup, which we had no way to see before. Every character typed is masked on the device before anything is sent, so the first names and ages a parent enters for their children are not in the recording, and neither is any other word on the screen. What we receive is the shape of the page and where a finger landed. Those recordings are deleted after 14 days, nothing else inside NestBoard is ever recorded, and none of it happens in our Android, iPhone, and iPad apps.

We do not use family data to train AI models. OpenAI, which runs Robin, is under an agreement that bars it from training on it. Anthropic's Claude, which helps us with support emails, is not under such an agreement, so we keep its training setting switched off and give it only what a support question needs.

We do not run advertising or marketing trackers in the app a child uses, and we removed the ad measurement tags Meta and Pinterest used to have on our public pages. One thing we do still receive, because we would rather list it than let you find it: when an adult installs NestBoard after seeing one of our ads, Apple or Google tells us which campaign it came from. That is about the install, it concerns the adult who chose to download the app, and it carries nothing about a child.

We do not let anyone outside the household contact a child. There are no public profiles, no friend requests, and no messaging between households.

A child profile holds only what the household actually needs to run: a display name, a color, and the chores, events, routines, allowance, or medications assigned to that child.

If the household sets a home location for weather and lightning alerts, that location belongs to the household, not to the child, and is used only to power those features.

Like all NestBoard data, a child's information passes through the infrastructure and AI providers we list at mynestboard.com/subprocessors. They handle it on our instructions, and all of them except Anthropic are bound by contract not to use it for their own purposes. Anthropic's Claude helps us answer support emails, which can mention a child; that use runs under Anthropic's standard terms with its training setting switched off. When Claude helps us with support or looking into a problem, it never looks at a child's records (name, birthday, chores or anything else tied to a child's profile) unless the parent who wrote to us asks us to. From November 13, 2026, a photo emailed to your household's NestBoard address can show a child too: we send it to OpenAI to read the dates on it and do not keep it afterwards.

Chores on outside calendars: this is off unless a household adult turns on "Show chores in your calendar copies", and a child cannot turn it on. When it is on, each chore assigned to a child becomes a calendar entry showing the chore's title, its due date and time, whether it is done, and the child's first name. The entries go on the household's private calendar link and, if the household copies its calendar into Google, into the Google account that copy is connected to. Nothing else about a child is sent: no chore descriptions, points, money, photos or last names. Turning it off takes the entries out again.

Children also get less access than adults, not more. A child signed in to NestBoard cannot change household settings, cannot see or change billing, cannot add or remove members, cannot move money in allowance or savings, cannot read or change the household's health profiles, and cannot use Robin, our AI assistant. Those limits are enforced on our servers, not just hidden in the app.

A child profile's information stays for as long as the household keeps the profile. Remove the profile and the data tied to that child goes with it. Robin used to keep a separate note of small facts it had picked up about a person, like an allergy. It stopped saving those in September 2026, and we hold none of them for any household, so there are none tied to your child to remove.

Robin conversations are the one thing on a fixed clock. They are kept for 12 months and then deleted automatically. We keep them that long so Robin remembers your household across a school year rather than asking the same questions every few weeks.

Children cannot use Robin, as section 5 explains, but a child's first name can still show up inside a parent's Robin conversation, for example when a parent asks Robin to put a dentist appointment on the calendar. Those conversations are stored for the household as a whole rather than per person, so a past mention of your child stays until that 12-month window runs out. Removing the child's profile does not reach back into an older conversation. Deleting the household removes all of it from NestBoard at once.

The numbers here match our main Privacy Policy and our security page. If you ever see them disagree, the Privacy Policy at mynestboard.com/privacy is the one to trust, and please tell us so we can fix it.

Review: a parent can see everything tied to a child's profile from the Family page, and can download a copy of the household's data from Settings.

Correct: a parent can edit a child's information at any time.

Delete: a parent can remove a child's profile from the Family page. That deletes the records tied to that child, including chores and chore history, events, routines, allowance and points, school assignments, medical details, medications and dose history, and any comments they wrote.

Removing a child marks the profile itself inactive rather than erasing it, so the rest of your household history still reads correctly. What stays is only what that history needs: their first name, color and initials. Their birthday, their photo, their email address and the consent record are erased with everything else. Deleting the household erases it outright. If you would rather we erase a child’s profile completely without deleting your household, email privacy@mynestboard.com and we will do that.

If that child has their own sign-in, removing their profile removes the sign-in with it. Their email address and stored password are deleted, and any device they were signed in on is signed out straight away. You do not need to delete your household, and you do not need to wait on us. The Family page will not remove your own profile, so that nobody is signed out from under themselves mid-session. To close your own account, use Settings, then Privacy and Data. If you would rather we handled it, or you want the profile erased outright rather than kept as an inactive name in your household history, email privacy@mynestboard.com.

Withdraw consent: removing the profile, or deleting the household, ends our handling of that child's information. Deleting the household removes every child profile with it. An adult in the household does that from Settings, then Privacy and Data, then Delete this household, confirming by typing the household name. The household and every child profile in it are kept for 30 days and any adult signing back in during that window cancels the deletion, so if you want it gone and want to be sure, do not sign back in. Invites nobody has accepted yet are cancelled and connected Google and Outlook calendars are disconnected right away, or as soon as a calendar sync running at that moment ends, normally within the hour, and cancelling does not bring them back. The full steps are at mynestboard.com/delete-data.

Refuse further collection: a parent can remove a child's sign-in, turn off their notifications, or remove the profile entirely. Any of those stops us collecting anything further about that child.

NestBoard is operated by NestBoard LLC, a Florida limited liability company based in the USA. You can reach us at the addresses below about your child's information.

Children's-privacy questions: privacy@mynestboard.com. General questions and help: hello@mynestboard.com. A real person answers within a day.

This page is informational and complements our main Privacy Policy at mynestboard.com/privacy. It is not legal advice.

Effective date: September 21, 2026. Last updated: October 25, 2026.