Privacy Policy
Last updated: August 16, 2026 — English version
In case of any discrepancy between versions, the French version prevails.
In short
- Most of what you record in Nidalya — journal entries, photos, health record, prescriptions, ultrasound scans — stays on your phone and is never transmitted.
- Our servers only receive what is necessary for your account, your profile (first name, dates, sex), and any appointments you explicitly choose to share.
- Those servers are hosted in France, in Paris.
- An appointment you don't share never leaves your phone — neither its content nor its existence.
- The free plan shows non-personalized ads; no health, pregnancy, or child data is ever shared with them.
- You can delete your account and all your data, immediately and permanently, from within the app.
- We never sell, rent, or share your data with anyone.
- No audience-measurement tools, no profiling, no automated decision-making.
1. Who is responsible for your data
Nidalya is an application published by Sihem ZIANE EI (also known as ROIT), a sole trader (entrepreneur individuel) under French law, trading under the commercial name LYVERAPP.
| SIREN (company number) | 990 132 946 |
|---|---|
| Trade register | Créteil, registration no. 2025A04673 |
| Address | Appartement 262, 9 rue Gisèle Halimi, 94470 Boissy-Saint-Léger, France |
| Contact | contact@nidalya.com |
| Data Protection Officer | None appointed: not required for our activity. |
2. How Nidalya works
Nidalya supports parents through pregnancy and the early years of their child's life, with around twenty modules: pregnancy calendar, medical appointments, weight, growth charts, vaccinations, health record, prescriptions, ultrasound scans, journal, breastfeeding, sleep, diapers, contractions, identity documents, checklists, name lists, and a parents' corner.
The app is designed "local first": the vast majority of what you enter stays on your phone. Our server only receives a limited subset, described in section 4.
Nidalya is free to download. The free plan is funded by advertising. Four monthly subscriptions remove ads and unlock additional features (section 14).
Nidalya is intended for adults — parents and parents-to-be. It is not an app for minors (see section 12).
3. What stays only on your phone
The following data is stored in your phone's memory and in the app's private storage. It is never sent to our servers:
- Health and medical tracking: weight and measurements, growth charts, health record, vaccinations and doses, prescriptions and treatments, ultrasound scans and reports, contractions, baby kicks, breastfeeding, bottles, sleep, diapers.
- Personal content: the journal (text, photos, voice notes) and its trash, photographed identity documents, name lists, checklists.
- Media files: photos and images, journal voice recordings, profile avatar — a photo chosen as an avatar remains that photo, on your phone, with no transformation or transmission.
- Settings: theme, language, date and time formats, notification preferences, help screens already seen, cached subscription status.
Automatic backup. The app regularly writes a snapshot of this data to a local file, within its private storage. If you have enabled your phone's own backup (iCloud on iOS, Google backup on Android), this file may be included in it. This is not a Nidalya service: this backup belongs to your phone, managed by Apple or Google under their own terms. We have no access to it.
There is no manual export feature for this data.
4. What we receive on our servers
Creating an account is required to use the app. There is no guest mode and no offline use without an account. The account is used for authentication, syncing across devices, co-parent sharing, and subscription management.
Everything you record in Nidalya stays on your phone. Only what is necessary to find your account on another phone, and to share with the co-parent you choose, is sent to our servers, hosted in France: your account credentials, your profile details (first name, dates, sex), and only the appointments you have explicitly marked as shared. A private appointment never leaves your device — neither its content nor its existence.
4.1 Account
Email address; password — never stored in plain text, only as a cryptographic hash; account creation and last sign-in dates, email confirmation status. If you sign in via Apple or Google: the identifier provided by that service and an email address (Apple may provide an anonymous relay address, at your choice).
4.2 Profiles
The profile's first name (parent or child), its type (parent, pregnancy, postnatal, child), the child's sex, the estimated due date, the date of birth, the chosen avatar, the selected theme, and the layout of your dashboard.
This data qualifies as health data under the GDPR: a due date reveals a pregnancy. Medical detail itself stays on your phone (section 3); only these few structural fields are on our servers, to enable syncing and sharing.
4.3 Co-parent sharing
A 6-character pairing code links two accounts; it expires automatically after 24 hours and can only be used once. The link between the two accounts and their display names are stored. For each child and each module, a read or write permission is set — read-only by default; write access must be explicitly granted.
4.4 Shared appointments
Only for appointments you explicitly choose to share (a dedicated toggle, per appointment): date, time, type of practitioner, practitioner's name, address, note, and the first name of the profile concerned. An appointment marked private is never transmitted — neither its content nor its existence.
4.5 Notifications
Your device's push token, platform (iOS or Android), language, and device name, used to notify you or your co-parent of an event. A child's first name may appear in the text of a notification (for example, an appointment reminder). A linked co-parent only receives a notification for a module if they have read access to that module for that child.
4.6 Contact form and reports
If you use the app's contact form (accessible once signed in, from Settings): the message type (bug, suggestion, contact), title, message, your optional first name and contact email — useful only so we can reply —, app version, platform, language, and an optional attachment (maximum 10 MB). You may also write to us without using the app, at contact@nidalya.com.
5. Who receives your data
We never sell, rent, or share your data for advertising or brokerage purposes. The following providers act solely on our instructions, to operate Nidalya:
| Provider | Role | Data involved | Hosting |
|---|---|---|---|
| Supabase | Database and accounts | Data listed in section 4 | France (Paris) |
| Resend | Transactional emails | Email address, verification code | Ireland (EU) |
| Expo (Expo Push) | Notification delivery | Device token, notification text | United States |
| RevenueCat | Subscription management | Anonymous purchase identifier, subscription status | United States |
| Apple / Google | Payment, sign-in, phone backup | Under their own terms | United States |
| Google AdMob | Ad display on the free plan | See section 15 — never health data | Google Ireland; transfers to the United States |
No artificial intelligence service. No photo, no app content, is ever sent to an artificial intelligence service — not to analyze it, not to transform it, not to train a model.
Transfers outside the European Union
Our database and emails are hosted within the European Union. Transfers to the United States are limited to notifications, subscriptions, payments and, for the free plan, ad display. They rely on the safeguards required by the GDPR (standard contractual clauses and/or the EU–US Data Privacy Framework). The bulk of your health data remains hosted in Europe.
6. What we don't do
- No personalized advertising, no advertising profile built from what you record in the app, no health data shared with any ad provider.
- No cross-app or cross-site tracking: we do not request Apple's advertising identifier and never show the "Allow Tracking?" prompt.
- No audience-measurement or behavioral-analytics tools.
- No tracker beyond the ads shown on the free plan, subject to your consent and revocable at any time.
- No selling, renting, or brokering of data.
- No access to your phone's location: location permission is never requested. An approximate location may still be inferred from the IP address by the ad provider, as with any connection to a server (see section 15).
- No profiling, no automated decision-making.
- No access, on our part, to the content of your journal, photos, voice notes, or health record: this data does not leave your phone.
- No photo ever sent to an artificial intelligence service.
- No medical advice: Nidalya is a tracking and organizing tool, it does not replace a healthcare professional.
7. Permissions on your phone
Each permission is requested only when you actually use the related feature, never at launch, and declining it does not prevent you from using the rest of the app.
| Permission | Use |
|---|---|
| Notifications | Reminders for appointments, vaccinations, bottles; co-parent alerts |
| Camera | Photographing a prescription, an ultrasound scan, a document, an avatar |
| Photo library | Importing an existing image for the same uses |
| Microphone | Recording a voice note in the journal |
| Files | Restoring a backup |
Photos and recordings stay on your phone. The only exception is an attachment you voluntarily add to a contact message.
8. Legal basis
- Performance of a contract: creating and managing your account, syncing, co-parent sharing, subscription management.
- Explicit consent, for health data — evidenced by your own actions: sharing module by module with a co-parent, the per-appointment sharing toggle, permissions granted at the point of use.
- Consent, for advertising only — collected through a form before the first ads are shown, revocable at any time in Settings → Ad Privacy. Your account and syncing rely on the contract, not on this consent: declining ads does not reduce your use of the app in any way.
- Legitimate interest: service security, abuse prevention, handling of bug reports.
- Legal obligation: retaining accounting records related to subscriptions, handled by Apple and Google.
You can withdraw your consent at any time: revoking a sharing permission, removing a co-parent link, disabling notifications, deleting a profile or your account.
9. How long we keep your data
- Co-parent pairing codes: 24 hours, then automatic expiry.
- Email verification codes: 60 minutes.
- Local data on your phone: kept until you delete a profile, delete your account, or uninstall the app.
- Contact messages and reports, along with their attachments: automatically deleted 12 months after being sent, every night, by a scheduled process.
- Account and server data: kept for as long as you use the service, and deleted immediately when you delete your account or request it.
10. Your rights
| Right | How to exercise it |
|---|---|
| Access | On request at contact@nidalya.com |
| Rectification | Directly in the app (editing profiles and data), or on request |
| Erasure | Directly in the app: Settings → Account → "Delete my account." Deletion is immediate and permanent: account, server data, and local data on your phone, including the backup snapshot. A single profile can also be deleted separately. See also our dedicated page (available in French, with an English summary). |
| Portability | On request at contact@nidalya.com, in a structured format. There is no automatic export feature within the app. |
| Objection / restriction | On request, or directly in the app (disabling notifications, removing a sharing link) |
| Withdrawing consent | At any time, within the app |
We respond within one month, extendable by two further months for complex requests. You may also lodge a complaint with the CNIL (cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.
11. Security
- All network exchanges are encrypted (HTTPS/TLS).
- Passwords are stored as a cryptographic hash, never in plain text.
- Access is restricted at the database level itself: you can only technically access your own data and any data a co-parent has explicitly granted you access to.
- Email addresses are verified with a 6-digit code.
- Local data is protected by your phone's app-level isolation and its own encryption.
No system is infallible; we continue to improve these measures over time.
12. Children and parental authority
Nidalya is intended for adults: no account is meant for a minor. Data concerning a child is entered by the parent, under their parental authority, in the interest of tracking the child. The parent who creates a child profile remains its owner: only they decide what is shared with a co-parent, module by module, and can delete this data permanently at any time.
13. Terms of use
Nidalya does not publish its own terms of service. The app is distributed under the standard end-user license of the download platform (Apple or Google Play). Details are on our terms page.
14. Subscriptions
Four monthly subscriptions (from €0.99 to €5.99) grant access to multiple profiles, extended co-parent sharing, and backup. Payments are processed exclusively by Apple and Google: we never receive, see, or store any banking information. Management and cancellation are handled in your Apple or Google account settings.
15. Advertising (free plan)
Nidalya's free plan displays ads, provided by Google AdMob (Google Ireland Limited). This is the only processing in the app whose legal basis is your consent.
- Ads are shown only on the free plan; any paid subscription removes them.
- They are non-personalized: chosen based on screen context, language, and an approximate geographic area — never based on browsing history, an interest profile, or past behavior.
- No advertising profile is built from app content: no health data, no pregnancy dates, no child data, no journal or health-record content is shared with the ad network or used to select an ad.
- No advertising identifier is requested: the app does not show Apple's "Allow Tracking?" prompt, and performs no cross-app or cross-site tracking.
Data received by the ad provider (per Google's public documentation): the IP address, from which an approximate city-level location may be inferred — the app itself never reads or requests your phone's location; a device or app identifier; ad-related data (impressions, taps); technical performance and crash data for the ad module.
Your consent. A consent form is shown before the first ads appear, in the European Union, the EEA, and the United Kingdom. If you decline, your access to the app is not restricted: ads are still shown, but in limited mode, without an advertising identifier and without storage on your device. You can change your mind at any time in Settings → Ad Privacy. Declining does not degrade any pregnancy- or health-tracking feature.
Nidalya does not retain any advertising data on its own servers; retention periods are those applied by Google, described in its ads policy.
Changes to this policy
We may update this policy, in particular if a new Nidalya feature changes how your data is processed. We will inform you in the app of any substantial change. The date at the top of this page reflects the latest update.