Privacy policy

Updated 17 October 2026. This policy covers the Cuddlio app and website. Contact the developer at hey@nourio.app about privacy, access, correction or deletion.

Information you choose to share

Cuddlio stores your email address and caregiver name to sign you in and identify you to your family. Your family can add a child’s name or initial and birth month, feeding types and amounts, feeding times and notes, and weight and height readings and dates. Use an initial instead of a full child’s name if you prefer. Cuddlio is for adults caring for children; children do not need accounts.

Existing beta accounts may also retain a profile-image URL and sign-in identity imported from Nourio. New Cuddlio email-code sign-ins do not grant access to a separate Nourio learning account.

We use this information to provide family collaboration, feeding and measurement history. Only active caregivers in your family can access shared child records. A family code starts a request; the owner must approve access. We do not use your family information for advertising or sell it.

Sign-in, device and service information

Email verification codes allow sign-in. The service stores hashed sign-in tokens, session expiration, device/installation identifiers, platform, app version/build, and sign-in IP address and user-agent. If you enable notifications, we also store an Apple push token, notification permission and delivery status, time zone and locale. Notifications are optional and can be turned off in the app or device Settings. A notification preview may show a caregiver’s name or feeding details; you can hide previews in device Settings.

Web and API requests can produce operational logs containing IP addresses, request metadata and errors, used to run, secure and troubleshoot the service. The app does not include advertising or cross-app tracking SDKs. Cuddlio does not access Apple Health, your contacts, photo library, microphone or location.

Stories and this device

The app requests the curated story catalog and images from our service and asset hosting. Downloaded story cover files are stored on your device under your account and removed on sign-out or account deletion. Reading screens may also use temporary image caches. Your private family information is not sent to an AI service to generate the curated stories. Feeding and measurement screens are records, not medical advice.

Service providers and Nourio

Cuddlio’s API is hosted at nourio.app, but Cuddlio accounts, family records, sign-ins and Apple push registrations are separate from the Nourio learning product. An explicit account link supports the existing Nourio beta family screens; deleting your Cuddlio account does not delete your separate Nourio learning account.

Service providers process information needed to deliver the product: Hetzner for application hosting, AWS for database and story asset storage, Brevo for sign-in email, Apple for push notifications and app distribution, and Cloudflare for the public website. Providers may process information outside your country. We may disclose information when required by law or to protect the service and its users.

If you separately join the website’s early-access mailing list, Kit processes the email you submit for that list. It is separate from signing in to the app. You can unsubscribe using the link in those emails. If you contact support, we use your message and contact details to respond. Please do not send verification codes or unnecessary child or health information.

Deletion and retention

In the app, open Profile → Privacy and data → Delete my account. If you are the only active caregiver, confirm deletion of your account and family: this removes the child profile, all meals and notes, measurements, and family requests. If other active caregivers share the family, transfer ownership to one of them first; deletion must not erase their shared family. A non-owner can delete their account directly.

If your installed version does not offer sole-caregiver deletion, email hey@nourio.app to initiate it without inviting another caregiver. Contact us too if a shared-family ownership transfer is not possible.

Account deletion removes your Cuddlio account, sign-ins, device registrations and memberships. In a family that remains, your own meal notes and account attribution are removed; shared feeding and measurement values and child details remain for the other caregivers. Notes written by others can contain information about you; contact us if you need help addressing that information. Your separate Nourio account and the public story catalog are unchanged.

Family records remain while the family uses the service. Sign-in sessions expire after 30 days; unused email codes expire after 15 minutes. Operational logs, queued email and backups may retain information after deletion until their normal rotation or expiry, or longer where legally necessary. We do not promise immediate erasure from backups. Contact us for help with retained data or a deletion request you cannot complete in the app.

Your choices

You can edit your caregiver name, ask the family owner to correct child details, and edit or delete entries you recorded. The family owner can also manage shared entries and caregiver access. Contact hey@nourio.app to request access, correction, deletion or a copy of your information, or to raise a privacy concern. Depending on your location, you may also have rights to restrict or object to processing, portability, and to complain to a data-protection authority.