Privacy Policy
Last updated: 13 June 2026
GatherNook (“we”, “us”) is a private space for families to keep the people and moments that matter to them. We take your privacy seriously and only collect what we need to run the service. This policy explains what we collect, why, and the rights you have — including under the EU/UK General Data Protection Regulation (GDPR).
This is a plain-language template prepared to reflect how GatherNook works. Please have it reviewed by a qualified lawyer before relying on it for full legal compliance in your jurisdiction.
Who is responsible for your data
The data controller is the operator of GatherNook. For any privacy question or to exercise your rights, contact privacy@gathernook.com.
What we collect
- Account data — your name and email address, and a password (stored only as a secure hash by our authentication provider).
- Family content you create — family members and relationships, important dates, memories, notes, gift ideas, tasks, and any photos you upload.
- Technical data — essential session cookies and basic server logs needed to keep you signed in and operate the service.
Why we use it (legal bases)
- To provide the service (performance of a contract) — creating your account and storing the family content you choose to add.
- To keep the service secure and working (legitimate interests) — authentication, preventing abuse, and fixing problems.
- To send reminders/notifications you opt into (consent) — e.g. birthday push notifications, which you can turn off any time.
Who we share it with
We do not sell your data. We share it only with the processors that run the service on our behalf, under data-processing agreements:
- Supabase — database, authentication and file storage.
- Vercel — application hosting.
- Resend — sending account & confirmation emails.
International transfers
Our infrastructure may process data outside your country (for example, in the United States). Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses offered by our processors.
How long we keep it
We keep your data for as long as your account is active. When you delete your account (or a family workspace you own), the associated data is removed from our database. Backups are rotated on a limited schedule.
Your rights
Under the GDPR and similar laws you can:
- access a copy of your data (we offer a one-click export in Settings);
- correct inaccurate data;
- delete your account and data (right to erasure, available in Settings);
- port your data (export as a machine-readable file);
- object to or restrict certain processing;
- withdraw consent for notifications at any time;
- lodge a complaint with your local data-protection authority.
Children
GatherNook is a family tool used under the control of a parent or guardian (the family’s admin). A child’s profile is created by that parent/guardian, who affirms consent, and we deliberately collect the minimum for children — their name and birthday (and an optional login email if the parent chooses to give them access). We do not collect a child’s address, phone, or other profile details.
Children can view their family’s photos, but cannot upload photos unless the parent explicitly enables it for the family and accepts an acknowledgment. Uploaded images are routed through content scanning; unlawful content is removed and reported as required by law.
A parent/guardian can review, export, or delete a child’s information at any time from Settings. If you believe a child has provided information without appropriate consent, contact privacy@gathernook.com and we will delete it.
How long we keep data & retention
We keep personal data only as long as needed to provide the service: for the life of your account, or until you (or a parent, for a child) delete it. Deleting your account or your family workspace removes the associated data from our active database; backups are rotated on a limited schedule and then overwritten. We periodically review stored data and remove what is no longer needed.
Cookies
We use only essential cookies needed to sign you in and keep the app working. See our Cookie Policy for details.
Changes
We may update this policy as the product evolves; we’ll revise the date above and, for material changes, let you know in-app.
Contact
Questions or requests: privacy@gathernook.com.