How Nimbo handles your family's information

Who we are

Nimbo (“Nimbo,” “we,” “us”) is a diary app for parents and caregivers of children with developmental and other differences, such as autism, ADHD, Down syndrome and speech delay. In the United States the app is called Nimbo: Your Child's Diary. This policy covers the Nimbo app for iPhone and Android and the website nimbodiary.com, for people in the United States. People in Brazil are covered by our Política de Privacidade.

Nimbo is built and run by one person: an independent developer based in Brazil, with no company or office in the US. The person responsible for Nimbo and for your information is Jailton Rocha Cardoso, Rua Tomé de Souza, 07, Alto Buenos Ayres, Caetité, BA 46401-534, Brazil.

For anything about privacy, email contato@nimbodiary.com. The person who reads it is the person who builds Nimbo.

What the app handles

The app only uses what you type or say in it:

Much of this is health information about a child. We treat all of it as sensitive, and that is why Nimbo keeps as little as possible off your phone.

What the app does not collect: location, contacts, your advertising ID, analytics or usage tracking, or crash-reporting data. Nimbo uses the microphone only while you record, and the camera or your photos only when you choose to save a document.

If you have allowed it in your phone settings, Apple and Google may share aggregated app statistics and crash reports with app developers. Those come from Apple and Google under their own policies, not from a tool inside Nimbo.

Where your data is stored

Everything listed above is stored on your phone, inside the app's own storage. Nimbo does not have accounts, logins or a server that keeps your records, so we cannot see your diary. Even so, we treat what is on your phone with the same care as if we held it.

The diary keeps the text of what you said, not the recordings. The app deletes your recordings from the phone when you leave the “Tell me about the day” screen, whether or not you save the day.

Because the data is only on your device:

• if you uninstall the app, switch phones or lose your phone, your records may be lost. There is no Nimbo cloud copy;
• you can export a backup in My profile → Backup and keep the file wherever you want (Files, Drive, email). It includes the app's data but not the photos and PDFs of your documents. The file is not encrypted, so anyone who has it can read it. Keep it safe. The app deletes its own temporary copy when the share menu closes;
• if your phone's own backup is on (iCloud on iPhone, Google on Android), the operating system may include the app's data in that backup, which lives in your Apple or Google account under their rules;
• anyone who unlocks your phone can open the app. Use a passcode or biometrics on your device.

When you tap “Organize the day”

Unless you share it yourself, diary data only leaves your phone at two moments: when you ask Nimbo to organize the day (this section) and when you chat with Nimbo (section 5). The first time, the app asks for your permission and explains what is sent and to whom. Nothing is sent until you agree. When you tap “Organize the day”, this happens:

1. The app sends your entryYour audio recordings, the text you typed and a short context: your child's age, conditions, therapies, goals (title and level), the date and the app language. The context does not include your name or your child's name. Goal titles are sent as you wrote them.
2. Nimbo's server receives itIt's a function on Supabase, a cloud hosting provider. Nimbo's Supabase project is hosted in Canada. The function works in memory and does not save the audio, the text or the result.
3. OpenAI transcribes the audioIt receives the recordings and, as vocabulary hints, the therapies and conditions you entered plus a fixed list of common terms. It returns the spoken text.
4. Anthropic (Claude) organizes the dayIt receives the transcript, your typed text and the context, and returns the day sorted into sleep, eating, hard moments, wins and the rest, plus optional suggestions for your goals.
5. The result comes back to your phoneThe app puts your child's name back where the AI used a placeholder and shows everything on the review screen, so you can check it before saving.

What these companies do with your entry

• Nimbo's server (Supabase): does not keep the content. The function's technical logs record only technical details, such as audio size and length, response time, the AI model used and the amount of text processed. They do not record what you said. Like any web service, Supabase's platform also keeps standard request records (for example time, status and the IP address of the connection), for up to 7 days.
• OpenAI (transcription): we use its business service (API). Requests come from our server, not from your phone, so OpenAI does not get your IP address. Under OpenAI's API data controls, API data is not used to train its models, and audio sent for transcription is not kept for abuse monitoring or saved by the service.
• Anthropic (organizing): we use its business service (API), also from our server. Anthropic's commercial terms don't allow it to train models on our requests. It deletes API inputs and outputs within 30 days. If its automated safety systems flag a request as a possible violation of its usage policy, it may keep that request for up to 2 years.

Either company may keep data longer if a law or court order requires it. We don't have a zero data retention agreement with OpenAI or Anthropic today. If that changes, we will update this page.

Their rules: OpenAI API data controls, Anthropic data retention, and the privacy policies of Supabase, OpenAI and Anthropic.

When you chat with Nimbo

In “Ask Nimbo” you can ask the mascot about eating, sleep, hard moments, medications and how to use the app. The answers are written by artificial intelligence (OpenAI), not by a person. To answer with your child in mind, each question is sent with some information from the app.

What is sent with each question

• your question and the latest messages of the conversation (up to 16);
• a family summary, built on your phone: your child's age, what you track (such as autism or ADHD), therapies and goals;
• medications (name, dose, times, supply and prescription status) and the doses checked off today;
• a summary of the last 7 days (mood, sleep, hard moments and what came before them, wins, and each day's summary) and your next appointments;
• today's date and the app language.

Where it goes and what is kept

• Nimbo's server (Supabase): the question goes through another Nimbo function in the same Supabase project. It does not save the conversation, and its logs record only technical details, such as the amount of text processed and response time.
• OpenAI: writes the answer. Our server sends each request with OpenAI's storage option turned off, so OpenAI does not save it as a stored conversation. That is not the same as deleting it right away: OpenAI keeps API request logs for up to 30 days for abuse monitoring, then deletes them, unless the law requires longer. It does not use API data to train its models.
• On your phone: the chat history stays only on your device, up to the 100 most recent messages. To delete it, use Clear conversation on the chat screen. “Delete all my data” also deletes it.

Reports, sharing and emails

The PDF report and the text summary are built on your phone. They only leave the app when you send them:

• the PDF goes through your phone's share menu, to the app you pick (Messages, email or another app). The app deletes its temporary copy of the PDF when the share menu closes;
• the text summary opens a text message (SMS or iMessage) to the professional's number, or your phone's share menu if there is no number.

Once sent, the report is in the hands of the person who received it and of the app you used, under their own privacy rules. The report contains your child's health information, so send it only to people who care for your child.

• Emergency card: the card's QR code contains the card text itself. Any phone camera can read it, without the app or the internet, so anyone who scans it sees that information.
• Documents: a saved photo or PDF only leaves your phone when you tap to open or send it.
• “Report this answer”: in the chat, this opens an email draft to us with the text of that answer. Nothing is sent unless you send the email.
• Emails to us: if you write to us, we receive your email address and whatever you include. Mail to contato@nimbodiary.com is forwarded by Cloudflare's email routing to our Gmail inbox (Google). Please don't send more health details than you need to.

Nimbo does not share your information with schools, providers, health insurers, employers or advertisers.

Reminders and subscription

Reminders

Nimbo's reminders (good morning, time to tell the day, medications, appointments, the trial reminder, the annual renewal reminder, the weekly summary) are scheduled on your phone. No server sends them, and nothing leaves your device for them.

Reminders can appear on the lock screen with your child's name or a medication name. To hide them, change Nimbo's notification settings on your phone.

Subscription

You subscribe through the Apple App Store or Google Play. Payment happens in the store: Nimbo never receives your card number or bank details.

To know whether your subscription is active, the app uses RevenueCat, a company that checks purchases with the store. RevenueCat receives an anonymous ID created by the app, purchase details (plan, dates, store country and currency) and the basic technical data any server receives when an app connects (such as IP address, device type and app version). It does not receive anything from your diary, your name or your child's name. This data is stored on RevenueCat's servers in the United States to manage your subscription. To ask us to delete it, email contato@nimbodiary.com.

The nimbodiary.com website

The website is a presentation page. It has no sign-up and no forms, uses no cookies of its own, and has no advertising pixels (such as the Meta Pixel) and no analytics tools.

To load the page, some technical data goes through providers, as on any website:

• Cloudflare, which hosts the site, receives technical data about the visit (IP address, browser, page visited) to deliver the page and protect it from attacks;
• Google Fonts, which serves the site's fonts, receives your IP address and browser information.

If we ever want to measure our ads on the website, we will update this section first and ask for your permission before any tracking starts. Tracking tools would never go on these legal pages or inside the app.

Privacy policies: Cloudflare and Google.

How we use information

We use information only to make Nimbo work for you:

• organize what you tell in the diary;
• answer your questions in “Ask Nimbo”;
• build summaries and reports on your phone;
• show your schedule and schedule reminders;
• manage the free trial and the subscription;
• answer your emails and requests;
• keep the website and server running and protected, and comply with the law.

What we never do: we don't sell your information, we don't share it for targeted or cross-context behavioral advertising, we don't build marketing profiles, and we don't use what you tell Nimbo to train AI models (our AI providers don't either). Health information is used only to provide the features you ask for.

When you set up the app, before you enter your child's conditions and therapies, a separate screen asks you to check a box agreeing that Nimbo can collect and use this health information, for you and on behalf of your child.

Before you use the AI features for the first time, the app shows a permission screen that says what is sent, to which companies and why. Nothing is sent until you tap “I agree, continue.” You can withdraw your permission anytime in My profile → Use of artificial intelligence. Nimbo then stops sending entries and questions to the AI providers until you allow it again. You can keep using the diary without AI and fill in the day yourself.

Who receives information

We only use service providers that help run Nimbo. They process information for us under their business terms, which limit how they can use it. We do not sell or rent information to anyone.

We may also disclose information if the law requires it (for example, a valid court order), to protect someone's safety, or as part of a merger or sale of Nimbo, in which case this policy would continue to apply to your information. Because we don't store your diary, there is usually very little we could disclose.

Categories of personal information (state law terms)

Some state laws ask us to describe information in fixed categories. Most of it stays on your phone, where we can't see it.

Sources: you (what you type or say), your device, the AI providers (the results you ask for) and the app stores (purchase status, through RevenueCat). We do not collect precise location, and we do not buy information about you. In the last 12 months we have not sold or shared personal information for advertising, and we have no plans to.

How long information is kept

• On your phone: until you delete it in the app or uninstall the app. Recordings are deleted when you leave the “Tell me about the day” screen. Backups you exported or made with iCloud or Google follow your own choices and their rules.
• Nimbo's server functions: content is not stored. It exists only in memory while your request is processed. Supabase keeps the function logs (technical details only, no content) and its standard request records for up to 7 days.
• OpenAI: audio for transcription is not kept. Chat requests may be kept in abuse-monitoring logs for up to 30 days.
• Anthropic: deleted within 30 days, or up to 2 years for a request its safety systems flag.
• Both AI providers: longer only if a law or court order requires it.
• RevenueCat: while your subscription exists and afterwards as needed for accounting, tax and legal purposes, or until you ask us to delete it.
• Emails you send us: as long as needed to answer you, and then up to 24 months after our last message, so we have a record of requests. Then we delete them.
• Website: Cloudflare and Google keep technical visit data under their own policies.

Your choices and deleting your data

To delete all your Nimbo data:

1. open the app and go to My profile;
2. under Privacy, tap Delete all my data;
3. confirm.

This deletes from this phone the diary, the chat with Nimbo, goals, schedule, medications, the emergency card, your documents (the list and the saved photo and PDF files), the app's temporary files and your settings, and cancels scheduled reminders. It can't be undone.

• To delete one day, open it in the diary and use the delete option.
• To delete only the chat, use Clear conversation on the “Ask Nimbo” screen.
• To stop sending data to the AI providers, withdraw permission in My profile → Use of artificial intelligence.
• Uninstalling the app also deletes its data from the phone. Copies in iCloud or Google backups follow your account's rules.
• To delete your subscription record at RevenueCat or emails you sent us, write to contato@nimbodiary.com.
• Deleting your data does not cancel your subscription. To cancel, use your App Store or Google Play subscription settings (see the Terms of Use).

What already reached OpenAI or Anthropic is deleted by them on the schedule in section 11. We send them no name, account or device ID, so neither we nor they can find one person's requests in their systems.

Security, breaches and HIPAA

• Entries and chat questions travel over encrypted connections (HTTPS).
• The access keys to OpenAI and Anthropic are kept on the server and are never inside the app.
• The server does not save the content of entries or conversations, and its logs don't record what you said or wrote.
• Only the person who runs Nimbo has access to the server configuration.

No system is 100% secure. If someone gets your health information without your permission because of a problem on our side or at one of our providers (a “breach of security”), we will tell you within 60 days of finding out, as the FTC Health Breach Notification Rule requires. Because we don't have your email or phone number, we will tell you in the app and on this website, and we will also notify the FTC and others when the law requires it. The notice will say what happened, what information was involved, what we are doing and what you can do.

HIPAA. Nimbo is not a doctor's office, a clinic or a health plan, and it doesn't work for one, so HIPAA (the federal law for medical records) does not apply to it. Other laws do, such as the FTC Act, the FTC Health Breach Notification Rule and state privacy and health data laws. This policy explains how we follow them.

Children's privacy (COPPA)

Nimbo is made for adults: parents, legal guardians and caregivers who are 18 or older. It is not directed to children under 13, and children do not use it. We do not knowingly collect personal information from children under 13.

Nimbo does hold information about a child: the parent or caregiver records information about their own child. We use it only to make the diary work for that family, never for advertising or profiling, and we treat it as sensitive health information.

• The recording feature is meant for your voice. Please record in your own words, away from your child. If your child's voice is captured by accident, the audio is used only for transcription: our server doesn't store it, OpenAI doesn't keep audio sent for transcription, and the app deletes the recording from your phone when you leave the screen. Nimbo never creates voiceprints.
• If you believe a child under 13 has used Nimbo or sent us personal information, email contato@nimbodiary.com and we will delete what we hold.

Your US state privacy rights

We give these rights to everyone in the US, whether or not your state's law requires it. You may have the right to:

• know what personal information we have about you and get a copy of it;
• correct inaccurate information;
• delete your information;
• get your information in a portable format;
• opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We don't do any of these;
• limit the use of sensitive personal information, and withdraw consent you gave. We already use it only to provide the features you ask for;
• not be treated differently for using your rights;
• appeal if we decline your request.

In practice, most of this is already in your hands: your records are on your phone, where you can see, correct, export and delete them. Because our server does not store the content of your diary or chats, we usually hold nothing of yours besides your subscription record at RevenueCat and any emails you sent us.

How to make a request

• Email contato@nimbodiary.com with the subject “Privacy request.” You don't need an account, and requests are free.
• To find the records we may hold, we may ask for the email address you used to write to us or the order ID of your App Store or Google Play purchase. We will only use it to handle your request.
• You can use an authorized agent. We may ask the agent for proof that you gave them permission.
• We will answer within 45 days. If we need more time, we may extend once by up to 45 more days, and we will tell you why within the first 45 days.
• If we decline your request, you can appeal by replying to our answer with “Appeal” within 60 days. We will answer your appeal in writing within 45 days. If you disagree with the result, you can contact your state attorney general.

California “Shine the Light”: we do not share personal information with third parties for their direct marketing. Do Not Track and Global Privacy Control: the app and the website don't track you across sites and don't sell or share your information, so there is nothing to turn off. We treat these signals as an opt-out anyway.

Consumer health data

Washington, Nevada and Connecticut have specific laws for consumer health data. Our Consumer Health Data Privacy Policy explains which health data Nimbo handles, why, who receives it, how we ask for your consent and how to use your rights there. It applies to everyone who uses Nimbo, wherever you live.

Where information is processed

Nimbo is run from Brazil. When you use the AI features, your entry and questions are processed by our server functions in Canada and by OpenAI and Anthropic in the United States and other countries where they operate. RevenueCat stores subscription data in the United States, and Cloudflare serves the website from its global network. Emails you send us are forwarded by Cloudflare to Gmail and read from Brazil.

These countries may have privacy laws different from your state's. We only use providers that commit to protecting the information they process for us.

Changes to this policy

Nimbo will keep growing, for example with sign-in and a cloud copy of your data. When a change affects what we do with your information, we will update this page before it happens and let you know in the app. If a change needs your consent, we will ask for it first.

The date of the last update is at the top of this page.