AndoNest Privacy Policy
DRAFT — prepared by Claude (AI) for the owner on 2026-10-24. Not legal advice. Pending review by a licensed attorney before publication. Bracketed items must be completed.
Last updated: [DATE]
This Privacy Policy explains how [PCG GROUP LLC, an Arizona limited liability company doing business as AndoSuite] ("AndoSuite," "we," "us") collects, uses, shares and protects personal information when you use the AndoNest apps, the websites at andonest.com and related domains, and related services (the "Service"). It is part of our Terms of Service.
Our core commitments: we do not sell your personal information; we do not use your content for advertising; we do not let AI providers train on your content; support staff do not read your messages, recordings or child records except with your permission, to secure the Service, or when legally required.
1. Who this policy covers
- Users: adults (18+) with an AndoNest account. - People described in the Service: for example children, other family members, caregivers, schools and doctors whose information users enter. Users who enter this information are responsible for having the right to share it. - Website visitors.
AndoNest is not directed to children and does not allow children to create accounts. We do not knowingly collect personal information directly from children under 13. Information about children is entered by their parents, guardians or other authorized adults.
2. Information we collect
Information you provide - Account information: name, email, password (stored only in hashed form), phone number if you add one, language, time zone, profile photo. - Family information: family names, members, roles and permissions, households. - Content: messages, call recordings and transcripts (where enabled), calendar entries, exchanges, approvals, expenses, receipts, notes, journal entries, documents and photos. - Child information you choose to enter: name, birth date, school, teachers, activities, and — only if you opt in — health information (see Section 5). - Imported data: information you import from other services (for example OurFamilyWizard, TalkingParents or AppClose exports) or school calendars. - Support and feedback: messages you send us, survey answers. - Payment information: handled by Apple, Google or our payment processor (for example Stripe). We receive limited details such as plan, status, the last four digits and expiry of a card, and billing country — not full card numbers.
Information collected automatically - Device and app information: device type, operating system, app version, language, crash reports and diagnostic logs. - Usage information — only if you allow analytics: which screens and features are used, without the content of messages, recordings or child records. - Security information: sign-in times, IP address, and approximate location derived from IP (for fraud prevention and security). We do not collect or share precise or live location. - Website: standard server logs; essential cookies only, unless you consent to optional analytics.
3. How we use information
- To provide the Service: create accounts and Families, show shared information to permitted members, sync devices, send notifications and reminders, generate reports and exports you request. - To provide features you turn on, including AI features (onboarding help, briefings, tone checks, rewrites, summaries, transcripts, translation) and imports. - To secure the Service: authenticate users, prevent fraud and abuse, keep audit logs and tamper-evident records. - To process payments, subscriptions, price locks, referrals and complimentary accounts. - To provide support and respond to requests. - To improve the Service using aggregated or de-identified data, and analytics only where you consented. - To comply with law, enforce our Terms, and protect the rights, safety and property of users, children, the public and AndoNest.
We do not: sell or rent personal information; share it for cross-context behavioral advertising; use your content to target ads; or allow AI providers to train models on your content.
4. How information is shared
- With your Family members, according to the roles and permissions set in that Family. This is the main purpose of the Service. Anything you share with a Family can be seen, saved or exported by members with permission, and we cannot control what they do with it after they see it. - With people you invite or authorize, such as caregivers, professionals with time-limited access, or recipients of an emergency-card link you create. - With service providers who process data for us under contracts that require confidentiality and security and limit their use of the data: for example cloud hosting and database (Supabase), content delivery and email routing (Cloudflare), forms for beta sign-ups (Google Forms), app stores (Apple, Google), payments (Stripe or the stores), push notifications, email delivery, crash reporting, analytics (only with consent), and AI processing (for example Anthropic) under no-training and limited-retention terms. - For legal reasons: to comply with valid legal process (subpoenas, court orders, warrants), as described in our Legal Process Policy; to protect against harm to a child or any person; or to protect our rights. Where permitted, we try to notify affected users before disclosing their information. - In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy. - With your consent or at your direction.
5. Child health information (opt-in)
Health information about children — such as allergies, medications, vaccinations, blood type, conditions, doctors and insurance — is entirely optional. Before you add it, the app explains how it is used and asks for your explicit consent for each category. You can withdraw consent and delete this information at any time. It is shown only to Family members you grant access to, is never used for advertising, and is never used to train AI models.
Consumer health data notice (for example, Washington and Nevada residents). We collect the health information described above only with your consent, only to provide the features you use, and we share it only with the Family members you authorize and the service providers listed in Section 4. We do not sell consumer health data. You may access, delete, or withdraw consent for your consumer health data, and request a list of the third parties with whom we've shared it, by contacting privacy@andosuite.com. We do not use geofencing around health-care facilities.
6. AI features
When you turn on an AI feature, the content that feature needs (for example a draft message for a tone check, or imported records for onboarding) is sent to our AI provider to produce the result. Our providers process it under agreements that prohibit training on your content and limit retention to what is needed to provide and secure the feature. AI features can be turned off in settings. AI output may be inaccurate; see the Terms of Service.
7. Calls and recordings
Where offered, recorded calls and their transcripts are stored with your Family's records for the retention period shown in the Service (currently 12 months) and then deleted unless exported. Every recorded call announces that it is being recorded.
8. Retention and deletion
- We keep information for as long as your account is active and as needed to provide the Service. - Deleting your account removes your personal account information. Records you contributed to a Family's shared history remain available to that Family's other members, labeled "Former member," because they are part of the shared record (for example for court or co-parenting purposes). - When a Family is deleted, its data is permanently deleted 30 days later, to allow recovery from mistakes. - Backups are kept for a limited period (up to [35] days) and then overwritten. - We may keep limited information longer when required by law, to resolve disputes, prevent fraud or abuse, enforce our agreements, or comply with a legal hold. - After a trial ends without a subscription, the account becomes read-only; information remains until you delete it or the account is closed under our Terms.
9. Security
We use reasonable administrative, technical and physical safeguards, including encryption in transit (TLS) and at rest, access controls that separate each Family's data, least-privilege staff access, two-step verification options, audit logs, and tamper-evident record chains. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your devices, passwords and recovery codes. If we learn of a security breach affecting your personal information, we will notify you and authorities as required by applicable law, including Arizona's data-breach notification law.
10. Your choices and rights
- Access, correction, export and deletion: use the in-app tools or contact privacy@andosuite.com. Export is available on every plan and during read-only status. - Analytics and AI: turn optional analytics and AI features on or off in settings. - Notifications and email: control them in settings; service emails (for example security or billing) may still be sent. - Health data consent: withdraw at any time (Section 5). - State privacy rights: depending on where you live (for example California, Colorado, Virginia, Connecticut, Texas, Oregon and others), you may have rights to know, access, correct, delete, or port your personal information, and to opt out of sale, targeted advertising or certain profiling. We do not sell personal information or engage in targeted advertising. To exercise rights, contact privacy@andosuite.com; we will verify your identity and respond within the time required by law, and you may appeal a decision by replying to our response. We will not discriminate against you for exercising your rights. - Do Not Track / Global Privacy Control: we honor Global Privacy Control signals as an opt-out of optional analytics on our website.
Requests about another member's information, or about a Family's shared records, may be limited where honoring them would affect other members' rights or our legal obligations.
11. International users
AndoNest is operated from the United States, and information is stored and processed in the United States and other countries where our service providers operate. If you use the Service from outside the United States, you consent to this transfer.
12. Changes
We may update this policy. If changes are material, we will notify you in the Service or by email before they take effect.
13. Contact
Privacy questions or requests: privacy@andosuite.com · Legal: legal@andosuite.com · [PCG GROUP LLC (AndoSuite), MAILING ADDRESS]