Privacy policy

Who is responsible

The controller responsible for the processing described in this policy is Denis Boliachkin, a private individual based in Spain. This policy covers the Nanuca app, the website nanuca.boldenleo.com, support communications and the beta programme. For privacy questions or to exercise your rights, email support@nanuca.boldenleo.com. Full publisher details are on the Legal Notice page.

We do not sell personal information, show advertising or use your information for advertising.

The app and your journal

Nanuca is intended for adults: parents and other caregivers. Your child’s profile, records, notes and settings are stored only on your device, and records may include health information. The app has no account, synchronisation or shared access, and the journal is not sent to our servers. We do not receive it and cannot recover or delete it remotely.

Exported files and device backups remain under your control; deleting data in the app does not affect them. If you allow sharing with app developers in your device settings, Apple may provide us with crash reports and usage statistics. We use them only to fix problems and improve the app, based on our legitimate interest in providing a reliable app.

If you use Siri or Shortcuts, your request is handled by Apple’s system features under your device settings; Nanuca has no voice recording of its own. Live Activities and notifications may show information about your child’s sleep on the Lock Screen and in the Dynamic Island, where others may see it. You can manage them in Nanuca and in your device settings.

Support messages

When you contact us by email or through the contact form, we receive your email address, your message and any attachments you choose to send. An email address is required so that we can reply. We use this information only to reply and investigate the issue, based on our legitimate interest in helping users. Please do not send personal details, health information or real journal entries; a fictional or redacted example is better.

We delete support correspondence and attachments within ten calendar days after the enquiry closes. An enquiry closes when the exchange ends, including after 30 days without a reply to a clarification request.

Beta programme

A beta application consists of your email address and the website language. An email address is required to apply; without it we cannot invite you. We use it for the TestFlight invitation, testing messages and delivery of the Premium code after release; it is not a marketing newsletter. The legal basis is your request to take part and the beta programme terms.

During testing, Apple collects crash and usage data and provides it to us together with any feedback you send through TestFlight, which may include your name, email address and screenshots. We use it only to fix problems and improve Nanuca. The legal basis is our legitimate interest in providing a reliable app. Reports and feedback are kept in App Store Connect, where Apple sets the retention periods; copies we keep outside App Store Connect are deleted once the issue is resolved. Apple processes tester information under its own privacy policy.

Pending applications are reviewed while recruitment is open; when recruitment closes, applications still pending are treated as declined. Declined and withdrawn applications are deleted within 30 days. Records of accepted participants are kept until 30 days after the code’s redemption deadline. If the programme is cancelled, its records are deleted within 30 days. To withdraw, email support@nanuca.boldenleo.com.

Website operation and security

Hosting, content-delivery, email-delivery and security providers process technical information needed to run the site, such as IP addresses and request metadata. To prevent spam, the forms use an anti-spam check and short-lived rate limiting by IP address. We do not keep logs containing the text of your messages or a database of visitor IP addresses. The legal basis is our legitimate interest in operating a secure website.

Optional website analytics

Only with your consent, we count page views, clicks on main buttons and approximate loading speed to improve the site. We receive the event type, site section, button placement, language and a loading-time range. The data is combined into daily totals straight away and contains no identifiers, IP addresses, full URLs or form contents. Daily totals are kept for 90 days.

The site works the same without consent. You can change your choice using Analytics settings in the footer. Withdrawing consent stops collection; daily totals already counted cannot be changed because they are not linked to you. If Do Not Track or Global Privacy Control is enabled in your browser, analytics stays off.

Your choice and its date are stored in your browser’s local storage for up to 180 days, without an identifier. After that, or if you clear browser storage, we ask again.

Recipients and international processing

Information is received by providers of hosting, content delivery, anti-spam verification, analytics storage and email, and by Apple for TestFlight and the App Store, only as needed for their functions. Processing may take place in the European Economic Area and other countries, including the United States and India; an EU storage region does not exclude access by a provider’s support staff from outside the EU. International processing is subject to applicable data-protection requirements, including contractual safeguards where required. You can ask us for details of recipients and safeguards.

The deletion periods in this policy apply to copies we control. Providers may keep backups for a limited time under their own terms. We keep particular information longer only where the law requires it or it is needed for a specific legal claim.

Your rights and changes to this policy

You can request access to, correction, deletion, restriction or portability of your information, object to processing based on legitimate interest and withdraw consent. We reply within one month; if we need more time (up to two additional months), we will tell you within the first month. We ask for identity verification only where it is genuinely necessary. Send requests to support@nanuca.boldenleo.com.

You can also complain to the Spanish Data Protection Agency (AEPD) or another competent authority. Changes to this policy are published with a new date; if a new purpose requires consent, we will ask for it separately.