Privacy Policy

This is an English translation of our policy for users in Vietnam. If the English and Vietnamese versions differ, the Vietnamese version prevails.

Nestbound Privacy Policy

Effective from 04/10/2026 · Updated 05/10/2026: account deletion right inside the app.

Nestbound is a pregnancy companion app for husbands; the wife can join using an invite code. This document explains what data the app processes, why, who can see it, where it is stored, how long it is kept, and what you can do with your data — under Law No. 91/2025/QH15 on Personal Data Protection and Decree No. 356/2025/ND-CP.

Nestbound is not a medical tool. The app does not diagnose, does not prescribe and does not replace your doctor's advice. Before any decision about health, ask a doctor.

1. Who is responsible for your data

The data controller and processor is Mr Trịnh Xuân Hải (an individual), in Hanoi, Vietnam. He is directly in charge of protecting the app's personal data. Contact: support@pregdad.com. "We" in this document means the operator named above.

2. Health data — and it may be about someone else

The due date, check-up appointments with notes (which may include symptoms), ultrasound photos and the pregnancy journal are sensitive personal data (data about health status). We process them only to run the features described in section 4.

Most of this data is about the wife, while the person entering it is usually the husband. The app lets the husband enter it before the wife joins the app or gives her consent. If you enter someone else's health data, you must make sure that person knows and agrees.

If you are the wife — even if you do not have an account yet — you can ask to know, correct or delete what has been entered about you, by emailing support@pregdad.com, within the time limits in section 10.

3. Data we collect

Account. Your email, to send a 6-digit sign-in code; the app does not use passwords. Your display name, if you fill it in. Your birth year, to confirm you are 18 or older. Your role in the couple (father or mother). The time you accepted the terms and the version you accepted.

Pregnancy. The due date; the pregnancy week is calculated from it.

Check-ups. Date and time, name of the check-up, place, notes, whether the father goes along, and a photo of the check-up notes if you add one.

Journal. What you write, the mood you choose, photos (including ultrasound photos) and voice recordings. The app records only when you press record. Photos are compressed on your phone before they are uploaded.

Meals and dishes. Meals eaten (which meal, when, which dishes, how much), notes, nutrition figures where available; dishes you save; dishes you pick for the shared menu; the food preferences you declare.

Dish suggestion assistant. What you type to the assistant and its replies.

Activity in the app. Each time you mark a task as done, with the time; tasks you add yourself; your consent choices and when you made them; system logs of actions such as creating a check-up, writing a journal entry, using an invite code. System logs record the names of the fields that changed, not the content you entered.

Notifications and device. Your push notification token; a random device ID the app creates itself; your on/off choices and reminder times; the history of notifications sent to you; your phone's time zone and language.

Technical. Every request from the app carries the app version and the platform (iOS or Android). Your IP address is used briefly in memory to limit attempts at invite codes, may appear in the server's error logs when a request fails, and may be recorded by the sign-in service to protect your account. When the app closes unexpectedly, Expo's update component may send Expo an error log (at most 1,024 characters) with a random installation ID, without your identity.

We do not collect your location (the app does not use location services), your contacts, your phone number or payment information. The app has no third-party advertising or analytics SDK, does not use the device's advertising ID, and does not track you across other companies' apps or websites.

4. What we use data for, and on what basis

We process data based on your consent, for each purpose below. We process health data only to run the feature you are using.

• Running features: signing in, calculating the pregnancy week, choosing tasks and content by week, sending reminders, saving the journal, pairing, suggesting menus.
• Support and operations: replying when you contact us, handling errors and incidents (see section 5).
• Knowing whether the app is useful, through aggregate figures: the share of people still using it after 28 days, the share who pair within the first 7 days, the share who turn off notifications. These figures are calculated from accounts, pairing times, task check-offs and notification choices — they do not read symptoms, check-ups, the journal or the due date.

Daily reminders use wording we write in advance, not content you enter yourself. We do not use your data for advertising, do not sell data, and do not use health data for marketing.

5. Who sees what

You see everything you enter.

Your partner, once the two of you are paired, sees: the due date and the pregnancy week; shared check-ups, including the written notes; your display name; and the journal entries you mark Shared, together with the photos and recordings in them. Private entries are seen only by you. "Shared" means shared with your partner, never public.

The husband can see which meals the wife has logged and at what time — not the dishes or the nutrition figures. The wife can ask by email for this to be turned off.

Two things open only with consent, switched on or off in the Privacy section of the Profile screen, and only the person who holds the right can change them:

• The wife consents: only then are photos attached to check-ups shown to the other person.
• The husband turns on sharing: only then does the wife see the list of tasks the husband has done. The wife never sees tasks not yet done, completion rates or the total number of tasks. The app has no function for one person to remind or chase the other.

Someone who has your invite code, after signing in, can preview your role, the due date and the pregnancy week before joining. You can change the code; the old code will stop working.

We (the operator) have an internal admin tool that can read an account's profile. We open a profile only when you contact support, when investigating an error or a security incident, or when the law requires it. Each opening is recorded in the system log.

We provide data to state authorities only when the law requires it.

6. Dish suggestion assistant and artificial intelligence

The assistant calls a third-party AI service only when you give separate consent for that, the first time you open the assistant. Without consent, the assistant still works using built-in rules and sends nothing outside. You can withdraw consent at any time in the Privacy section.

How it works: the AI model does only two things — work out what kind of question you are asking, and rank dishes from a list edited in advance. It does not write medical advice and does not create new dishes; every sentence the assistant shows is a sentence written in advance.

Sent: what you type (at most 500 characters), the pregnancy week, your role, your food preferences and information about the candidate dishes. Not sent: your name, email, photos, allergies or diet.

Providers: Google (Vertex AI, servers in the European Union) and OpenAI (United States, used only as a fallback). OpenAI keeps requests in abuse-monitoring logs for up to 30 days and then deletes them, unless the law requires longer, and does not use them to train its models. The content of conversations is deleted after 90 days.

7. Parties that process data on our behalf

We do not share your data with anyone for advertising purposes. Photos and recordings go straight from your phone to private storage; to view them, the app requests a temporary link that expires after at most 15 minutes.

8. Storage abroad and protection

Your data is stored on servers outside Vietnam — mainly in Singapore, and wherever the servers of the providers in section 7 are located. This is a transfer of personal data abroad under Law No. 91/2025/QH15. The providers in section 7 process data only to provide their services to us.

The connection between the app and the server is encrypted (HTTPS). The sign-in session on your phone is stored in encrypted form. The photo storage is private, with no public links. Backups are encrypted (AES-256-GCM). Access to read data in the system is limited to the operator.

If there is a data breach, we notify the specialised personal data protection authority under the Ministry of Public Security no later than 72 hours after discovering it, and we notify you if the breach affects you.

9. How long data is kept

• Account data is kept until you delete your account.
• Conversations with the assistant are deleted after 90 days.
• System logs and notification history are kept for at most 12 months.
• Backups are kept for at most 30 days. Data you have deleted may remain in backups made before the deletion, until those backups expire. If we have to restore from a backup, your current privacy choices (consents, entries moved to private or deleted, devices signed out) are kept as they are.
• Unfinished uploads (not completed after more than 1 hour) are cleaned up automatically every day.

When you delete something in the app: meals are deleted permanently; journal entries and tasks you added yourself disappear from the app but remain stored on the server, including attached photos and recordings, until you ask for permanent deletion or delete your account; the same applies to photos removed from a check-up. When you sign out, the app sends a request to delete that phone's push notification token from the server.

When you delete your account, deletion happens immediately:

• your sign-in account, your email and all your data — including hidden journal entries, photos and recordings — are permanently deleted;
• the couple's shared journey (due date, check-ups, check-up slip photos) is deleted with it;
• your partner keeps their account and their own data, and is told that you have left.

What remains after deletion:

• one statistics row with no name, email or identifier (role, creation time, number of tasks done), so that our user figures are not distorted;
• system logs and consent records still carry a random ID of the old account, without a name or email. We keep them as evidence that we handled things correctly.

Backups containing your data delete themselves within 30 days, and are not used to restore a deleted account.

10. Your rights and how to exercise them

You have the right to: be informed about the processing of your data; consent or not consent, and withdraw consent; view and correct your data; request a copy, deletion, or restriction of processing; object to processing; and make complaints and denunciations and claim compensation in accordance with the law.

Right inside the app: withdraw or give again your consents in the Privacy section; move each journal entry between Private and Shared; delete as described in section 9; turn notifications on or off; change the language; and delete your account: Profile → Privacy & data → Delete account (the app is in Vietnamese for now: Hồ sơ → Quyền riêng tư & dữ liệu → Xoá tài khoản). Before deleting, the app states clearly which data will be deleted and how the couple's shared data will be handled; once you confirm, deletion happens immediately and cannot be undone.

Every other request — receiving a copy of your data, correcting information, permanently deleting part of your data, restricting or objecting to processing, or deleting your account when you cannot open the app — send an email to support@pregdad.com from the address you use to sign in (a wife without an account should state the husband's account clearly). We respond within 2 working days, and complete the request within:

You have the right to complain to the specialised personal data protection authority under the Ministry of Public Security.

11. Age

Nestbound is only for people aged 18 or older. You confirm this when you start using the app. If we learn that an account belongs to someone under 18, we delete that account.

12. Changes to this policy

When the policy changes, we update the date at the top of the page and announce it in the app before the new version takes effect. If a change needs your new consent, we will ask for it again.

13. Contact

Any question about privacy: support@pregdad.com · Trịnh Xuân Hải, Hanoi, Vietnam.