Your privacy in this Beta.

Account information

Supabase provides account authentication and the hosted database. Your email, selected account path, acknowledgment of the Beta notice, and authentication/session records are stored to operate your account. Passwords are handled by Supabase Auth; NestLife does not display or log them. Account verification and password reset emails are sent through the configured email provider.

Application previews and saved Needs

Application fields use fixed fictional examples and a limited set of sample choices. Enabled accounts can save those choices and sample Need bookmarks. Other account holders cannot read these records. A submitted test request stays private and read-only; it is never automatically published or marked verified.

Do not supply real addresses, income records, government ID, account numbers, medical information or children’s identifying details. Applicant document uploads are not available. The only supported upload is an optional private profile photo.

Cookies and access

Hosted and local account modes use essential session cookies for sign-in. Hosted session cookies are HttpOnly and use Secure protection over HTTPS. Application records and session tokens are not stored in browser local storage. Your Day, Night or Automatic appearance preference is saved on this device in browser local storage. No advertising, analytics or third-party trackers have been added.

Vercel hosts the website. Hosting and authentication providers may process technical request information as part of delivering and protecting their services. Authorized project operators retain administrative access to the hosted services; account privacy does not mean that those operators cannot access stored data.

Profiles and administrator review

Hosted account holders can choose a private nickname and illustrated avatar. You may also save a private profile photo. The website accepts JPEG, PNG or WebP up to 2 MB, resizes it to a small square JPEG, and removes image metadata before saving it in the hosted database. The app displays it only in your own account, never on public Needs. You can replace or remove it in account settings. Do not upload children’s photos or private documents. Only explicitly assigned administrators with multifactor authentication can use the app’s review workspace. It shows submitted fictional tests, not unfinished drafts. Administrative reads and changes are recorded. Internal review statuses and fixed notes are for testing only and do not approve assistance.

Beta feedback

Signed-in testers can send fixed choices identifying a screen, problem type and impact. Reports contain your account reference and a timestamp, but no message text or attachments. The administrator sees grouped counts for the last 30 days. Do not include private family information. Account deletion removes your reports from the active database.

Pretend contributions and team interest

Pretend checkout stores your account reference, fictional Need, demo amount, success or decline result, completion indicator and timestamp. No real donation, card data or tax receipt is involved. Private demo totals and badges are calculated from successful simulations. Administrators with MFA can inspect these transactions, related review events and timestamps of draft-save/delete or bookmark actions (without draft contents); no browsing history is collected.

If you express interest in joining the team, your account reference, chosen area and date are saved for administrator review. You can withdraw interest on the Join the Team page. Account deletion removes active simulation and interest records, subject to separate provider backup retention.

Keeping control of test data

You can remove saved Needs and delete unsubmitted drafts from My Account. Hosted account holders can request account deletion under Data controls and cancel the request while it is waiting. An administrator processes requested deletion; it is not immediate. Deletion removes the active account, nickname, avatar preferences, profile photo, feedback reports, bookmarks, applications and associated review records. Administrator audit events retain their action and time, with deleted account and application references cleared. Provider logs and backups have separate retention settings. A reviewed retention schedule and a confirmed public privacy contact are still needed before unrestricted registration or real applicant intake.

Before a real assistance pilot

Applicant agreements, verification consent, data retention and deletion, reviewer permissions, and operational responsibility still require review and implementation. Creating an account is not identity verification or approval for assistance.