Privacy Policy

Last updated: June 11, 2026

1. Introduction

ConvoNest LLC ("we", "our", "us", "ConvoNest") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application (the "App"), our website at convonest.ai (the "Website"), and related services (collectively, the "Services").

By using our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the App, on our Website, or by email. Your continued use of the Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

2. Information We Collect

2.1 Account and Identity Information

When you create an account, we collect:

• Your display name
• Email address
• Password (stored as a one-way hash by our authentication provider, never in plaintext)
• Profile information you choose to add (display photo, anniversary date, love languages, communication style)
• A unique user ID and a temporary pairing code used to connect with your partner
• Push notification token, if you grant notification permissions

2.2 Activity and Usage Information

We collect the information you generate while using ConvoNest:

• Your daily check-ins — mood word, sub-feelings, energy/calm/closeness sliders, and what you chose to share with your partner
• Connection score and Love Meter readings derived from check-ins, repair activity, and warm-stretch tracking
• Conversations with Nestor (your private AI relationship companion)
• Conflict-repair sessions — your perspective, your partner's perspective (only when both consent), and the final messages exchanged
• Journal entries you create (private or shared with your partner, by your choice)
• Lantern state (whether you've signaled you're in the mood; visible to your partner for 24 hours)
• Wish-game activity — desires you add to your pool, coupons you earn or grant, and game-play results
• Memories Nestor stores about you, with your control over each one
• Settings preferences — Nestor voice, tone, memory toggles, partner-share defaults, notification preferences
• App usage patterns and feature engagement (used to improve the product)

2.3 Technical Information

We automatically collect:

• Device information (type, model, operating system version)
• IP address and approximate region-level location
• App version, crash reports, and error logs
• Anonymous analytics events that tell us which features are used (never the content of those features)

2.4 Payment Information

If you subscribe to ConvoNest+, your payment is processed by Apple's App Store or Google Play Store. We never see or store your credit card information. Through our subscription management partner, RevenueCat, we receive your entitlement status (active, trialing, expired) and the product purchased — nothing more.

2.5 Information from Partner Pairing

When you pair your account with your partner, we facilitate the sharing of certain data between your accounts. Sharing is opt-in, granular, and reversible. You choose what your partner sees in Settings → "What your partner sees" (mood overview only, full check-in, or nothing). Your conversations with Nestor are never shared with your partner.

3. How We Use Your Information

3.1 To Provide and Improve Services

• Create and manage your account
• Enable partner pairing and the data sharing you've explicitly enabled
• Power Nestor's responses — including voice/tone preferences and the memory facts you've allowed
• Calculate your daily Love Meter and surface gentle insights
• Generate Tonight's invitations and other small practices
• Send the ambient signals you opt into (Lantern, check-in nudges, etc.)
• Improve App functionality and fix bugs

3.2 Communication

• Send service-related notifications (partner checked in, repair invitation, lantern lit, etc.) — only the kinds you've enabled
• Respond to your inquiries and support requests
• Notify you of important account or policy changes
• Send promotional emails only if you opt in

3.3 Business Operations

• Process subscription payments and manage your entitlements
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Enforce our Terms of Service

3.4 Aggregated and Anonymized Data

We may aggregate and anonymize your information so that it can no longer identify you personally. We use this anonymized data to research relationship-communication patterns and improve our AI safety. We never sell this data.

4. Legal Basis for Processing (EU/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data based on:

• Contract Performance: Processing necessary to provide the Services you've requested.
• Legitimate Interests: Improving our Services, analytics, fraud prevention, and security.
• Consent: Where you provide explicit consent — for partner pairing, push notifications, and marketing communications.
• Legal Obligation: Compliance with applicable laws.

5. How We Share Your Information

We share your information only in the following circumstances:

5.1 With Your Partner (when paired)

When you pair your account with your partner, we share the data you've configured to share. You can change what your partner sees at any time in Settings. You can also unpair at any time, which stops all future sharing.

5.2 Service Providers

We share information with carefully chosen third-party providers who help us operate the Services. They are contractually required to use your data only to provide their service to us and to protect it accordingly:

• Supabase — our database, authentication, and backend platform (US-hosted)
• Anthropic — provides Claude, the AI model behind Nestor's conversational, repair, and safety features
• OpenAI — used as a secondary model for some experimental features (rolling out gradually)
• Apple App Store and Google Play Store — for App distribution and subscription processing
• RevenueCat — manages subscription entitlements and receipts
• Expo — used for push notification delivery (Expo's push service forwards to Apple APNs and Google FCM)
• Vercel (or our static hosting provider) — for the Website
• Email and customer support tools — for transactional emails and support inquiries

5.3 Legal Requirements and Protection

We may disclose your information if required by law or in response to valid requests by public authorities (court orders, subpoenas, etc.). We may also disclose information when we believe doing so is necessary to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent fraud or imminent security threats
• Protect the safety of users or the public

5.4 Business Transfers

If ConvoNest is involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred. We will notify you via email and a prominent in-App notice of any such change in ownership or control.

6. AI Features and Your Conversations

Nestor — your private AI companion — is powered by Anthropic's Claude. When you send a message to Nestor, your message and a small amount of conversational context (your most recent messages, your name, your preferences, and any memory facts you've allowed) are sent to Anthropic's API to generate a reply.

Anthropic processes your conversation under their privacy policy and does not use API inputs to train their models by default. Your conversation transcript is stored only on our Supabase database and is scoped to your account — your partner cannot see it.

We additionally run a safety classifier on every message you send to Nestor. If we detect that you may be in crisis, abuse, or imminent danger, Nestor switches to a safety mode that surfaces real-world resources instead of attempting communication mediation.

7. Data Security

We implement industry-standard technical and organizational measures to protect your data:

• TLS encryption of all data in transit
• Encryption at rest in our Supabase database
• Row-Level Security (RLS) so that no user can ever read another user's data via the API — including across paired accounts, where only the data you've explicitly chosen to share is visible to your partner
• Service-role credentials kept in encrypted server-side vaults, never in client code
• Regular security review of dependencies and access logs

No system is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password.

8. Data Retention

• Account information: Retained while your account is active.
• Activity data (check-ins, conversations, journal): Retained to provide insights and historical context.
• Deleted accounts: Personal data is deleted within 30 days of an account deletion request, except where we are legally required to retain it (e.g., financial records, fraud prevention).
• Anonymized data: May be retained indefinitely for research and analytics.

9. Your Rights and Choices

9.1 Access and Portability

You can request a copy of your personal information by emailing support@convonest.ai with "Data Request" in the subject line. We will provide your data in a commonly used, machine-readable format within 30 days.

9.2 Correction

You can update your profile and preferences directly in the App's Settings. For other corrections, contact us.

9.3 Deletion

You can delete your account from the App's Settings, by visiting our account deletion page, or by emailing support@convonest.ai. We remove your personal information within 30 days, except where retention is required by law.

9.4 Memory & Context Controls

ConvoNest gives you fine-grained control over what Nestor remembers about you. In Settings → Nestor & AI → Memory & context, you can:

• Turn the memory feature on or off entirely
• Inspect every fact Nestor has stored about you
• Delete any individual memory
• Choose to share a memory with your partner — or keep it private
• Forget everything in one tap

9.5 Opt-Out of Marketing

You can opt out of marketing emails via the unsubscribe link in any such email or by adjusting your preferences in Settings. You cannot opt out of service-related communications about your account.

9.6 Partner Pairing Control

You can unpair from your partner at any time through the App's Settings. This stops all future data sharing. Data already shared remains on your partner's device unless they delete it.

10. Cookies and Tracking Technologies

Our Website uses minimal cookies — essential ones to remember your preferences and anonymous analytics cookies to understand site traffic. Our mobile App does not use traditional cookies but uses similar local storage to keep you signed in. We do not use third-party advertising trackers.

11. Children's Privacy

ConvoNest is not intended for use by individuals under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us at support@convonest.ai and we will delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in the United States (where Supabase, Anthropic, and our other US-based providers operate). When we transfer personal information internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

13. State-Specific Privacy Rights (U.S.)

13.1 California Residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act and the California Privacy Rights Act, including:

• Right to Know what personal information we've collected about you.
• Right to Delete personal information we've collected.
• Right to Correct inaccurate personal information.
• Right to Opt-Out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising).
• Right to Non-Discrimination for exercising your rights.

To exercise these rights, email support@convonest.ai with "California Privacy Request" in the subject line.

13.2 Virginia, Colorado, Connecticut, Utah, Texas, and Other State Residents

Residents of these states have similar rights — to access, correct, delete, obtain a portable copy, opt out of targeted advertising, and appeal decisions. Contact us using the same channel to exercise them.

14. Third-Party Links

Our Services may contain links to third-party websites or services (for example, links to mental health resources surfaced by Nestor during crisis mode). We are not responsible for the privacy practices of those third parties. Please review their policies before sharing personal information with them.

15. Changes to This Privacy Policy

When we make material changes, we will:

• Post a notice in the App
• Update the "Last updated" date at the top of this policy
• Email you (if you've provided your email)

Your continued use of the Services after changes become effective constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: