Draft, under legal review
Privacy policy
Last updated October 9, 2026
Nanny helps families find, book and keep watch over childcare, and helps caregivers and daycare centers do their work. That means handling information about adults and about the children in their care. This policy explains what we collect, why, who can see it and the choices you have. Nanny is operated by XII Studios LLC (“we”, “us”).
The short version
- We do not sell your data, share it for advertising or track you across other apps and websites.
- We never store ID or selfie images. Our ID partner keeps them; we keep the result and the date.
- Location is read once, when a caregiver clocks in to a booked shift. Never off shift.
- Children's health and emergency details are visible to a caregiver only during an active booking with that child.
- You can delete your account in the app at any time, and the deletion reaches our vendors too.
What we collect
Your account
You sign in with Apple or with your phone number. We receive an account identifier and, if you choose to share them, your name and email address. If you use Hide My Email, we only see a relay address. We confirm your phone number with a one-time code.
Families
Your neighborhood, schedule, care needs, pay range, house notes and pets. For each child: age, and optionally a first name and photo. For the emergency card: allergies, medications, conditions, pediatrician, insurance and emergency contacts. Your pickup list of authorized adults and their code words. Your home address, used for bookings and for confirming a caregiver's arrival.
Caregivers
Your profile, photos and intro video, rate, availability, experience, age groups, languages and references. The status and date of each check you choose to complete (ID, background check, CPR and first aid, driving record), and the CPR certificate you upload.
Daycare centers
Center details, rooms, staff, openings and waitlist, and the enrollment, attendance, check-in, pickup and daily report records your center creates. Families provide their own children's details through enrollment packets.
Bookings, payments and payouts
Booking details, timesheets and clock-in and clock-out times. Payments and payouts are processed by Stripe. Stripe receives your card or bank details; we receive limited information such as the payment status and the last four digits. We do not hold a wallet or a stored balance.
What you create
Messages, reviews and replies, Circles posts, timeline updates, photos, notes and incident reports. Kids' photos are private, have location data removed and are never searchable.
Location
When a caregiver clocks in to a booked shift, the app reads the device's precise location once to confirm arrival at the family's home, with the caregiver's permission and a state notice where required. We do not collect location at any other time.
Reports and safety
Reports you make or that are made about you, and the decisions our Trust and Safety team records about them.
Device and service data
Basic technical data such as device type, app version, crash reports and server logs (including IP address), used to run, secure and fix the service. We do not use advertising identifiers.
This website
If you join the waitlist we receive your email address, whether you are a parent, caregiver or daycare, an optional ZIP code and an invite code if you followed one. The website uses no analytics, advertising or tracking cookies.
How we use it
- To run Nanny: profiles, ranking by fit, messages, bookings, payments, timelines and Live Activities.
- For trust and safety: verification, scam warnings in chat, moderation of reports and content.
- To support you, and to send the service messages and notifications you have turned on.
- To meet legal duties, such as tax records, and to respond to lawful requests.
- To improve Nanny using aggregated, de-identified information.
We do not use children's information, photos or private messages to train AI models, and we never create risk scores, safety scores or AI summaries about any person.
Who can see what
| Information | Who can see it |
|---|---|
| Caregiver profile, badges with dates, reviews | Signed-in families |
| Family card: kids' ages, schedule, neighborhood, reliability | Signed-in caregivers. Never kids' names, photos or your address before you connect |
| Your address and kids' first names | The caregiver you book, for that booking |
| Emergency card: allergies, medications, conditions, contacts | The caregiver only during an active booking with that child; your center if enrolled |
| Live shift and timeline | You and family members you give that access to |
| Circles posts | Verified members of that circle, with your first name and neighborhood |
| Reports | Our Trust and Safety team only. Never published |
Service providers
We use a small number of providers who process data only on our instructions: Stripe (payments, payouts and ID verification through Stripe Identity), Checkr (background checks and driving records, ordered by the caregiver under the Fair Credit Reporting Act), Apple (sign in, notifications and subscriptions), and cloud providers for hosting, storage and email. Checkr and Stripe Identity act under their own privacy policies and legal duties for the checks they run.
We may disclose information if the law requires it, to protect someone from serious harm, or as part of a merger or sale, in which case this policy continues to apply. Our law enforcement request policy is available on request from safety@joinnanny.com.
Sensitive information
Some of what we handle is sensitive: precise location at clock-in, identity verification (which may involve biometric processing by Stripe Identity under its own notice and consent), background check results, payment information and children's health information. We use sensitive information only to provide the service you asked for, for trust and safety and to meet legal duties. We do not use it to infer things about you or to profile you, so there is nothing further to limit, but you can still ask us to.
Consumer health data notice
This section applies to consumer health data under the Washington My Health My Data Act and similar laws in Nevada and Connecticut.
- What we collect: children's allergies, medications, conditions, pediatrician and insurance details, immunization records sent through daycare enrollment, and incident reports involving injury, illness or medication given.
- Where it comes from: parents and guardians, and caregivers or centers who record incidents.
- Why: so the people caring for a child know what they need to in an emergency, and so a parent knows what happened during care.
- Who receives it: the caregiver during an active booking with that child, the child's enrolled center, family members you authorize, and our hosting providers. We never sell it.
- Your rights: you can see, correct, export or delete it, and withdraw consent, in the app or by emailing privacy@joinnanny.com.
Children
Nanny is for adults: parents and guardians, caregivers and centers. Children do not use the app, and it is not directed to children. We collect information about children only from their parent or guardian, or from a center acting for that parent, and only to arrange and support their care.
How long we keep data
We keep your account information while your account is open. Booking and payment records are kept as long as tax and accounting law requires. Safety reports and moderation records may be kept longer where needed to protect people. Everything else is deleted on a schedule.
To delete your account, open Account in the app and choose Delete account. We delete your account, profile, photos and content from our live systems, and ask our vendors to delete what they hold for us. Backups are overwritten within 30 days.
Your rights
Depending on where you live, including California, you can ask to know, access, correct, delete or export your personal information, and to opt out of sale or sharing (we do neither). Most of this is in the app. For anything else, email privacy@joinnanny.com. You can use an authorized agent. We respond within 45 days, verify requests to protect your account, and never treat you differently for using your rights.
Security
Data is encrypted in transit and at rest. Children's medical fields are encrypted again in the application. Files are stored privately and shared through links that expire in minutes. Access by staff is limited and audited. No system is perfect; if something goes wrong that affects you, we will tell you promptly.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.
Contact
XII Studios LLC, Los Angeles, California. Email privacy@joinnanny.com. See also our terms of service and community guidelines.