Why this document exists
Most privacy policies are written by lawyers, for lawyers. This one is written by us, for you - the parent at 11pm trying to figure out whether the platform you just signed up to can be trusted with your child's diagnosis.
SnugsyNest is registered and operated in Indonesia and complies with Undang-Undang Perlindungan Data Pribadi No. 27 Tahun 2022 (UU PDP), the Personal Data Protection Law. We also follow the spirit of the UN Convention on the Rights of the Child when it comes to data about minors.
What we collect
From you, the parent or guardian, we collect:
- Full name, email, password (hashed with bcrypt), phone number when provided
- Profile photo if you upload one
- Posts, comments, and likes you make in NestLink (the parent forum)
- Bookings and consultation requests with professionals on NestHub
- Donation records when you support SnugsyNest
From your device, we collect technical information needed to run the service:
- IP address (used for security and rate-limiting, not stored long-term)
- Browser type and operating system (for compatibility debugging)
- Pages you visit on SnugsyNest (aggregated, never tied to advertising)
Your child's data
Your child's information is the most sensitive thing we hold. We treat it that way.
In NestGrowth (the development tracker), you may record your child's name, age, diagnosis, milestones, mood entries, therapy goals, and notes. None of this is visible to anyone outside your account. Not other parents. Not advertisers. Not search engines. Not even our staff, except in the narrow circumstances described below.
SnugsyNest staff may access your child's data only when:
- You explicitly ask for support and grant access
- We are legally required to (court order, criminal investigation)
- We need to fix a critical bug, in which case we work on anonymized copies
We do not sell child data. We do not allow third-party advertising trackers on pages that contain child data. We do not train AI models on child profiles.
How we use it
Your data powers the service in specific, predictable ways:
- Account and login management
- Showing you relevant professionals based on your city and stated needs
- Routing your booking requests to the right practitioner
- Sending you transactional notifications (booking confirmations, replies on your forum posts)
- Generating aggregate, anonymous statistics (e.g. “most-discussed topics this month”)
We do not use your data for behavioral advertising. We do not share your contact details with marketers. We do not sell parent or child profiles, full stop.
Sharing with professionals
When you book a consultation with a therapist or psychologist through NestHub, that professional receives:
- Your name and contact details
- The reason for the consultation as you wrote it
- Any context you choose to add about your child
They do not automatically get access to your full NestGrowth profile. If you want to share specific records (e.g. milestone history, recent therapy notes), you do that explicitly during or after the session.
Professionals on SnugsyNest sign a data handling agreement that mirrors UU PDP requirements. If they breach it, we remove them from the platform.
Where data lives
Our database runs on PostgreSQL hosted in a Singapore region of a major cloud provider. We chose Singapore because it is the closest jurisdiction with strong data protection law and reliable uptime - and because Indonesian regulation permits cross-border transfer to jurisdictions with comparable data protection standards (UU PDP Article 56).
We back up the database daily, with backups encrypted at rest. We retain backups for 30 days, after which they are permanently deleted.
When you delete your account, we erase your personal data within 30 days. Aggregate statistics that no longer identify you (e.g. “average post length per category”) may be retained.
Your rights under UU PDP
Indonesian law gives you specific rights over your personal data. We respect every one of them. You can, at any time:
- Ask us what data we hold about you
- Correct anything that is wrong
- Download a copy of your data in a machine-readable format
- Delete your account and have your personal data erased
- Object to specific processing, e.g. analytics tracking
- File a complaint with the Indonesian Personal Data Protection Authority (Lembaga PDP)
Request any of the above by emailing privacy@snugsynest.com. We respond within 14 working days, usually faster.
When this changes
If we make material changes to this policy - particularly anything affecting how child data is handled - we will email every registered account at least 30 days before the change takes effect. You will always have the option to delete your account before new terms apply.
Minor clarifications (typo fixes, link updates) may be made silently, but a complete version history is available on request.
Talk to us
For privacy questions, data requests, or to report a concern, the right address is privacy@snugsynest.com. For everything else, use hello@snugsynest.com.
You can also write to us by post:
SnugsyNest, Jakarta, Indonesia