Privacy Policy

nanoGOAT LLC ("nanoGOAT," "we," "us," or "our") operates nanoGOAT Parent, a caregiver companion app for families. This Privacy Policy explains what information Parent collects, how it is used, and the choices you have.

Parent is a different product from nanoGOAT AAC. AAC is a local-first talker for children. Parent is a signed-in app for caregivers with accounts, optional photos, and cloud-backed progress. See the AAC policy at/aac/privacyif you use that app.

1. Who This Policy Covers

This policy covers the nanoGOAT Parent mobile application and related Parent backend services operated by nanoGOAT LLC (a Colorado limited liability company), including account authentication, cloud storage of Parent content, and the account-deletion web flow at nanogoat.io.

It does not cover nanoGOAT AAC, third-party app stores, or third-party sites you open from links inside Parent.

2. Information We Collect

2.1 Account and identity

• Email address (or Apple/Google account identifiers when you use those sign-in options)
• Display name or profile fields you choose to provide
• Authentication tokens and session metadata needed to keep you signed in securely

2.2 Parent content you create

• Child profiles, plays, runs, Outcomes, day logs, journal entries, and check-ins you record
• Visual-support boards and their content
• Photos, captions, and moment/keepsake content you upload or capture in the app
• Preferences, app icon choice, notification settings, and similar configuration
• Any feedback or support messages you send us

2.3 Technical and diagnostic data

We may collect limited technical information to operate and improve Parent, such as app version, device type/OS version, crash and error diagnostics, and basic usage events needed for reliability (for example, whether a sync completed). We configure diagnostic tools to avoid intentionally collecting family content or unrelated personal data. Sentry provides crash diagnostics when enabled; screenshots and default personal-information collection are disabled. We do not use Parent data for third-party advertising.

2.4 Information about children

Parent is designed for caregivers, not as a child's primary app. You may store notes or photos that relate to a child in your care. That content is treated as part of your account data. See ourParent COPPA Policyfor children's privacy commitments.

Caregivers can hand a child the visual-support tools, including timers, schedules, first-then boards, and feelings tools. Analytics records which type of tool is opened or used, including during child-locked use, under the caregiver's account. These events do not include the child's identity, board content, or selected feelings.

2.5 Waitlist and beta

If you join the Parent waitlist, we keep your account reference, the time you joined, and how you arrived (for example, the website). If you join the beta (at most 10 testers), we also keep the beta terms version you accepted and the time you accepted it. We use this to hold your spot and email you if a tester spot opens. Deleting your account deletes these records with it.

2.6 Product analytics

We use PostHog, with U.S. hosting, to understand how Parent is used and improve its features. Collection begins during onboarding, before sign-in, using a generated installation identifier. After sign-in, that usage history is linked to your internal parent account identifier. This is account-linked data, even though we do not send your name or email to PostHog. Signing out resets the analytics identity for future events; it does not erase events already collected.

• Onboarding steps, sign-in completion, purchase attempts and results, and app openings
• Use of runs, journals, keepsakes, visual supports, and sharing features
• Whether an entry includes a photo or note, without sending the photo or note itself
• Event times, local dates, time-zone offsets, and technical app, operating-system, and device information
• Feature-flag assignments and exposure to supported feature variations

Product analytics does not include names, email addresses, child identifiers, photos, captions, journal text, play wording, selected feelings, or Outcome values. Session replay and automatic screen recording are disabled. Events request that IP-based geolocation enrichment be disabled. Service providers receive network information necessary to deliver requests. Sharing events describe the share action and its reported result, not the recipient or the shared content.

2.7 Subscriptions

RevenueCat manages subscription access and purchase restoration. It receives purchase and subscription records, your internal account identifier after sign-in, and your email, display name, phone number, and sign-in provider when available from your account. It also receives technical information such as app and operating-system versions and country, and the vendor device identifier on Apple devices. We do not request advertising tracking permission or intentionally collect advertising identifiers. Family content is not sent to RevenueCat. Payments are handled by your app store; we do not receive your full payment-card details.

3. How We Use Information

• Provide, sync, and back up Parent features you use
• Authenticate you and secure your account
• Send transactional messages (for example, security or account notices) when needed
• Diagnose crashes, prevent abuse, and improve reliability
• Understand onboarding and feature use, evaluate product improvements, and manage subscriptions
• Respond to support requests and legal obligations

We do not sell personal information. We do not use Parent content to train third-party advertising models.

4. How We Share Information

We share information only as needed to run Parent:

• Service providers that process data on our behalf (for example, cloud hosting, authentication, crash diagnostics), under contractual limits. These include Supabase for accounts and cloud content, RevenueCat for subscriptions, Sentry for diagnostics when enabled, and PostHog for product analytics and feature flags.
• App stores and OS vendors when you download Parent or use platform sign-in (Apple, Google, Amazon) under their own policies.
• Legal and safety disclosures if required by law or to protect rights and safety.

We do not sell or rent your personal information.

5. Storage, Retention, and Security

Account and cloud-backed Parent content are stored on infrastructure we operate or contract (currently including Supabase-hosted services for authentication and data). We retain account data while your account is active. After you delete your account, we delete or de-identify associated account and family content within a commercially reasonable period, except where we must retain limited records for security, fraud prevention, or legal compliance.

Analytics records are held separately from your family content. The in-app account deletion flow does not automatically erase PostHog records. Contact [email protected] to request deletion of account-linked analytics. We may need to verify your account and may be unable to link pre-sign-in events to you without their installation identifier.

We use industry-standard safeguards (encryption in transit, access controls). No method of transmission or storage is 100% secure; please secure your sign-in account and keep your device secure.

6. Your Choices and Rights

• Access or update account profile information in the app where offered
• Delete individual photos or content in-app
• Delete your account and cloud-backed family content viananogoat.io/account/delete
• Email privacy requests to [email protected]

Product analytics is enabled in store builds, including before sign-in. Parent does not currently provide an in-app analytics opt-out switch. Contact us with questions or requests about analytics processing.

Depending on where you live (for example Colorado or California), you may have additional rights to know, delete, correct, or opt out of certain processing. We will not discriminate against you for exercising privacy rights. Contact us to make a request; we may need to verify your identity.

7. Children's Privacy

Parent accounts are for adults (parents, guardians, and other caregivers). Children should not create Parent accounts. For details, see ourParent COPPA Policy.

8. International Users

We are based in the United States. If you use Parent from outside the U.S., you understand that your information may be processed in the U.S. and other countries where our providers operate.

9. Changes

We may update this Privacy Policy. When we make material changes, we will update the effective date on this page and, where appropriate, provide additional notice in the app or by email.

10. Contact

Related

• Parent Terms of Service
• Parent COPPA Policy
• Delete account
• AAC Privacy Policy (separate product)