Privacy & Data

What we store — and where it lives

Everything you put into Nuga lives in one of three places: your own device, our private database, or the trusted service providers listed below. What goes to our database:

• Your account email, name, and profile photo, and your sign-in credentials (passwords are hashed — we never store them in plain text)
• Your pregnancy or baby details (due date, baby's nickname, number of babies)
• Journal entries, mood tags, and the week they belong to
• Photos you attach to journal entries or the bump/photo wall (stored in private, encrypted object storage)
• Kick counting sessions, contraction sessions, weight and symptom entries, and appointments
• Medications you log
• Postpartum tracking you choose to log: feeding, diapers, sleep, milestones, and daily check-ins
• Your Emergency Medical Profile, if you choose to create one — this can include blood type, allergies, medications, medical conditions, GBS status, transfusion and organ-donor preferences, provider and insurance details, and a health ID number. This exists so it can be shown to medical staff in an emergency; you control whether it's filled in at all, and only you (and anyone you explicitly share it with) can see it.
• Your push notification token, so reminders and milestone alerts can reach you
• Basic purchase status (whether you're a premium subscriber) — see "Service providers we use" below for how this is processed

What never leaves your phone

Face ID / Touch ID, if you enable it, is used only to lock the app on your device and is handled entirely by iOS — we never see or store any biometric data.

Voice logging

Nuga lets you log feeds, diapers, and sleep by speaking instead of typing. Speech recognition always happens entirely on your device using Apple's on-device Speech framework — your voice audio itself is never sent to a server, ours or anyone else's, and we do not store or listen to your voice recordings.

For feeding, diaper, and sleep entries, the resulting text transcript (not the audio) is then sent to our backend and to Google's Gemini AI so it can pull out structured details — like amount, duration, or type — and pre-fill the entry for you. This transcript handling follows the same data-sharing practices described under "Ask Nuga (AI features)" below. Voice input elsewhere in the app, like dictating a message to Ask Nuga or a note in Duty Log or Tasks, is transcribed on-device the same way but is not run through this additional parsing step.

In every case, voice input only pre-fills what you're creating — Nuga never saves a voice-logged entry automatically. You always review the pre-filled result and tap to confirm before anything is saved.

Ask Nuga (AI features)

Ask Nuga and the daily "Today's Briefing" card use Google's Gemini AI to generate answers and suggestions. To make those answers actually about your journey rather than generic, we send Gemini relevant context from your account — things like your due date or baby's age, journal entries, medications, symptoms, appointments, and emergency contact details. We never send your insurance policy number or health ID number to Gemini, even though those fields exist elsewhere in the app.

This data is sent to Google solely to generate a response, is handled under Google's own API terms, and is not sold or shared with anyone else. AI answers are generated by a model, not a medical professional — they can be incorrect or incomplete, and they are never a substitute for advice from your doctor, midwife, or pediatrician. See our Terms of Use for more on this.

Service providers we use

We work with a small number of trusted vendors to run the app, and we don't use any advertising SDKs or sell data to anyone.

• Google, whose Gemini AI powers Ask Nuga and the daily briefing (see above), and whose Sign in with Google you may use to create your account.
• Sentry, for crash reports and basic product analytics. Personal details like your name, email, and health data are scrubbed before anything is sent, so Sentry only sees an internal, anonymized ID.
• RevenueCat, to manage subscriptions and the Founding Member Pass; it receives your internal user ID to keep your purchase linked to your account, along with standard purchase/transaction data from Apple.
• Apple, for Sign in with Apple and push notifications.

We don't run ads, use advertising identifiers, or share your data with data brokers.

Neighbors — what's visible to others

If you post to Neighbors, that post is visible to parents within two weeks of your due date. Posts are anonymous — no name, no photo, nothing tied back to your profile. You can delete any post you've made at any time.

Partner sharing

If you generate an invite code and share it, your partner or family member can see your journal entries, kick sessions, contraction sessions, appointments, and milestone progress — the same things you see. You can revoke their access at any time from Settings. When you remove a partner, their access ends immediately.

Deleting your data

You can delete any pregnancy profile and all its data directly from Settings. This permanently removes all journal entries, sessions, photos, and appointments associated with that profile.

You can also delete your entire account directly from Settings, instantly — no waiting period and no need to email us. Doing so permanently removes your account, all pregnancy and postpartum data, your Emergency Medical Profile, journal entries, photos, and push notification token. We keep a minimal internal record that an account was deleted (for security and abuse prevention) — this record contains no health or journal data. If you'd rather have us do it for you, you can still reach us at nuga@nugaapp.com.

About your photos

Photos you add to your journal or bump wall are stored in private object storage. They are never publicly accessible, never indexed, and never shared with anyone. Only you (and any partners you've explicitly invited) can see them.