Privacy Policy

Your family's data. Your rules.

Effective date: March 29, 2025

Nauvl is a memory platform for parents. We take what you share with us — messages, photos, videos, voice notes — and help you preserve and understand it. This document explains exactly what we collect, why we collect it, who sees it, and how you can access, export, or delete it at any time.

What we collect

Your account information. When you sign up, we collect your phone number. Optionally, you may provide your name and email address. We use your phone number to send you a one-time code to verify your identity. Your email is used only for account recovery and billing receipts — never for marketing without your explicit consent.

Your child's information. You provide your child's name and date of birth when creating a memory archive. This is used to calculate their age at the time of each memory and to give Ren developmental context. We store only what you give us.

Your memories. Every message, photo, video, and voice note you send to Ren is stored in your private archive. We keep the raw content alongside Ren's response and the metadata Ren adds (age, tags, enrichment notes). Nothing you share with Ren is ever made public or used to train AI models.

Usage data. We collect basic logs — which features you use, when you log in, and error reports — to keep the service running and improve it. This data is never tied to the content of your memories.

Payment information. If you subscribe, payment is processed by Stripe. Nauvl never sees or stores your card number. Stripe is PCI-DSS compliant and handles all billing data directly.

How we use your data

To provide the service. Your memories are processed by Ren (powered by Anthropic Claude) to generate enrichment notes, tags, developmental insights, annual portraits, and compilations. This processing happens on your behalf and is not used to improve Anthropic's models or shared with any third party.

To send you messages. We send OTP codes and, if you've subscribed, billing receipts via your phone number or email. If you've enabled it, we may send occasional re-engagement nudges (e.g. "You haven't written to Ren in a while") — you can opt out of these at any time by replying STOP.

To improve Nauvl. Aggregate, anonymized usage patterns (never memory content) help us understand what's working and what isn't.

We do not sell your data. We do not run ads. We do not share your child's information with anyone except as described here.

SMS & messaging

Nauvl's core experience is built on SMS and MMS. When you create an account, you consent to receive SMS and MMS messages from Nauvl, including:

  • One-time verification codes to authenticate your account
  • Responses from Ren to messages you send
  • Re-engagement nudges if you haven't sent a memory in a while (opt-out any time by replying STOP)

Message frequency varies based on how often you text Ren. Expect roughly one inbound message per memory you send plus any Ren-initiated nudges (typically no more than 2–4 per month). Message and data rates may apply — standard carrier rates apply to all messages.

To opt out, reply STOP to any message from Nauvl. You will receive a confirmation and no further non-essential messages will be sent. To resume, reply START. Reply HELP for help or contact us at hello@nauvl.com.

Your SMS opt-in data and consent are never shared with any third party. Your phone number and messaging consent are used solely to deliver the Nauvl service to you. Our SMS delivery provider (Telnyx) receives your phone number to route messages, but does not receive your opt-in consent record and may not use your number for any other purpose.

Supported carriers include all major US and Canadian carriers. Nauvl is not responsible for delayed or undelivered messages due to carrier conditions.

Third-party services

Nauvl uses a small number of trusted third-party services to operate:

  • Anthropic (Claude) — processes your memories to generate Ren's enrichment notes. Your data is sent to Anthropic's API under their enterprise data-processing terms. Anthropic does not use API inputs to train their models.
  • Telnyx — delivers SMS/MMS messages to and from your phone. Your phone number is shared with Telnyx solely to route messages. Your SMS opt-in consent is not shared with Telnyx or any other third party. Message metadata (timestamps, delivery status) is retained for a limited period for debugging.
  • Stripe — processes subscription payments. Stripe's privacy policy governs how they handle billing data.
  • Replit / cloud infrastructure — our servers and database run in a managed cloud environment. Data is encrypted in transit (TLS) and at rest.

How we store and protect your data

All data is encrypted in transit using TLS and encrypted at rest in our database. Media files (photos, videos, audio) are stored in private object storage — they are never publicly accessible by URL and require authentication to retrieve.

We maintain access logs, security monitoring, and restrict employee access to production data to the minimum necessary to operate the service.

Child data

Nauvl is designed for parents. You share your child's information as the parent or guardian creating and managing the archive. We collect only what you provide, and only for the purpose of building your child's memory record. Nauvl does not knowingly collect information directly from children under 13. If you believe information about a child was submitted without parental consent, contact us immediately at hello@nauvl.com.

Child information (name, date of birth, memories) is stored solely within your account and is never shared with or accessible to any other parent, user, or third party.

Your rights

You have the right to:

  • Access your data. Export your entire archive — all memories, Ren's notes, and media — at any time from Settings.
  • Correct your data. Update your name, email, or child's profile from within the app.
  • Delete your data. Delete individual memories or your entire account from Settings. Account deletion removes all stored data within 30 days.
  • Opt out of communications. Reply STOP to any SMS from Ren to stop all re-engagement messages. You'll still receive OTP codes needed to sign in.
  • Data portability. Export your archive as a self-contained file that does not require a Nauvl account to read.

If you are in the EU or UK, you have additional rights under GDPR including the right to erasure, restriction of processing, and the right to object. Contact us at hello@nauvl.com to exercise any of these rights.

Data retention

We retain your account and memories for as long as your account is active. Your data is never automatically deleted due to inactivity, trial expiry, or plan changes. Data is only deleted when you explicitly request account deletion.

If you delete your account, we begin the deletion process immediately and complete it within 30 days. Backup snapshots containing your data are purged within 90 days.

Some anonymized usage logs may be retained longer for operational and legal purposes but contain no personally identifiable information.

Changes to this policy

If we make meaningful changes to how we handle your data, we will notify you via email or a notice in the app before the change takes effect. The effective date at the top of this page will be updated.

Contact us

Questions, requests, or concerns about your privacy? We're here.

Email: hello@nauvl.com