Privacy policy

Last updated 8 November 2026

Nando is a private family organiser: a shared calendar, chores, meals, lists, notes and an assistant, used by a family on their phones and on a screen at home. This page explains what Nando keeps, why, where, and how to take it with you or erase it.

What Nando keeps

Your account: your email address and name, and a sign-in secret if you turn on two-step sign-in. Passwords are handled by Amazon Cognito; Nando never sees or stores them.
What your family adds: events, chores, meals and recipes, lists, notes and their images, photos for the photo frame (including photos emailed to the frame’s address, and the addresses of relatives you allow to send them), family members’ names, colours, birthdays and profile photos, diets and allergies you choose to note, kids’ profiles (kids have no login), their star jars, the family’s rewards and the requests and wishes made for them (kept 120 days). If you switch on the Sunday email, we send the week ahead to your own address; switch it off in Settings at any time. Calendar links you subscribe to (a school’s, iCloud’s, Outlook’s) are kept to read them every hour, and are never shown back.
Conversations with Ask Nando, kept for 6 months after you last use them, visible only to you.
Emails you forward to your family’s Nando address: read once to suggest things to add, then deleted (at most a day later). The suggestions wait for 30 days or until you act on them.
What came in: a one-line note of each forwarded email read (its subject and what was found) and each batch of emailed photos, shown to your family as it arrives and kept 30 days.
Notification settings for the devices where you turn notifications on.

Google Calendar

If you connect Google Calendar (Settings → Google Calendar), Nando:

reads and writes events of the one calendar you choose, to keep it and your family’s Nando calendar in step every few minutes;
keeps the events it syncs (title, time, place, description, and which guests are members of your family) and a sealed (encrypted) access token so it can keep syncing. It never stores the addresses of guests who aren’t in your family;
shows those events to the members of your family in Nando, and lets Ask Nando answer questions about them for you (see “The assistant” below).

Nando’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the calendar features you see in Nando. It is never sold, never used for advertising, never used to train AI models, and never read by people except where you ask us to help with a problem or the law requires it. You can disconnect at any time in Settings, or remove Nando’s access in your Google Account; disconnecting deletes the stored token.

The assistant and AI features

Ask Nando, Magic add (reading a photo, PDF, text or forwarded email) and recipe import use Anthropic’s Claude model through Amazon Bedrock, in the European Union. When you use them, the request and the family information it needs (for example the coming events and chores) are sent to the model to produce the answer. Amazon Bedrock does not store this data or use it to train models. The AI only suggests: nothing is added or deleted without you.

Talking to Nando: Nando listens only after you tap the microphone. Your phone or browser turns what you say into text (on Android and in Chrome this is done by Google’s speech service, under Google’s terms); Nando receives only that text. The answer is read aloud in Nando’s voice by Amazon Polly (AWS, in the European Union), which receives only the answer’s text and keeps nothing; without a connection your device’s own voice reads it. Nando never records or keeps audio.

Where it is kept and who can see it

Everything is stored on Amazon Web Services in Ireland (eu-west-1), encrypted at rest, and only reachable through the signed-in app.
The members of your family see the family’s things. A note you make private is seen only by you. Nobody outside your family sees anything of it.
Nando has no advertising, no analytics trackers and no data sales.
Service providers: Amazon Web Services (hosting, sign-in, email receiving, the AI model), Google (only if you connect Google Calendar), your browser’s push service (notifications) and Open-Meteo (the weather, asked by your browser with your approximate location, which Nando does not store).

How long, and your rights

Download everything: Settings → Your data → Download my data (one file).
Delete your account: Settings → Your data → Delete my account. Your account and personal data are erased. A family you were the last grown-up in is erased with everything in it; otherwise the family keeps what it shares and your private notes are erased.
Backups and old file versions disappear within 35 days of a deletion. Server logs are kept 30 days.
You can ask to see, correct or erase your data, or object to its use, by writing to support@mynando.app. If you are in the EU or UK you may also complain to your data protection authority.

Children

Children don’t sign in to Nando. A parent may add a child’s profile (a first name, a colour, chores, events and diet) to organise the family; only the family’s grown-ups see it.

Changes and contact

If this policy changes, the date at the top changes too, and anything significant is announced in the app. Questions: support@mynando.app.