Privacy notice

Version 0.1 · September 2026

Nestora is nursery-management software for nurseries in Egypt, provided by Nestora, operated by Omar Ahmed Mahmoud Sami ("Nestora", "we"). This notice explains what personal data passes through Nestora, why, where it is kept, who can see it, and what you can ask us to do.

It covers this website, getnestora.app, including the demo-request form, and the two apps: the staff app at app.getnestora.app and the parent app at parent.getnestora.app.

Your nursery decides; we process

Under Egypt's Personal Data Protection Law (Law 151 of 2020), the nursery that enrols your child is the data controller: it decides what is collected and why, and it holds the relationship with your family. Nestora is the data processor: we handle that data on the nursery's instructions, to run the service.

Questions about why your nursery records something, and requests to see, correct or delete data, go first to your nursery. We help the nursery carry them out, and you can also write to us directly (see Contact).

What data passes through Nestora

Nurseries and families enter the data. We do not collect anything about a child on our own.

• Staff and guardians: name, email, phone, role, language preference, and a sign-in account.
• Children's enrolment details: name, date of birth, classroom, guardians, the people authorised to collect the child, and documents the nursery uploads, such as a birth certificate.
• Attendance: check-in and check-out times, and who recorded them.
• Daily life: daily reports (meals, naps, activities), photos and videos, and developmental observations, when the nursery records them.
• Health information, only where the nursery records it: allergies, medical notes, vaccination or medical documents.
• Messages between the nursery and families, including attachments.
• Billing: invoices, payments, and payment-proof images a guardian uploads.
• Emergency alerts the nursery sends.
• What the apps need to work: a device token so we can deliver the push notifications you turned on, the language you chose, and server logs (see How we protect it).
• If you request a demo on this website: the nursery name, your name, email and phone, and the estimates you enter.

Photos and health information need consent

Some of this data is sensitive. The nursery asks a child's guardian for consent before it records health information or shares photos and videos, separately for photos shared only with the child's own guardians, photos in which the child appears that are shared with other families in the class, and any public use by the nursery. A guardian can withdraw consent at any time in the parent app or by telling the nursery. Nestora keeps a record of each consent and withdrawal so both sides can show what was agreed.

Where the data is kept

Nestora runs on Amazon Web Services in Frankfurt, Germany, with an encrypted backup copy in Stockholm, Sweden, so your data is stored outside Egypt. Nestora holds, or is obtaining, the permit the law requires for that transfer. If the law requires hosting inside Egypt, we will move the service and tell the nurseries.

Who can see it

Each nursery's data is separated from every other nursery's at the database level, and that separation is tested automatically on every change to the service.

Inside a nursery, access follows roles: a teacher sees their classroom, a branch manager their branch, the nursery's administrators the whole nursery. A guardian sees only their own children.

Nestora's own staff can reach data only to run the service, fix a problem, or carry out a request from the nursery, and that access is logged.

We do not sell personal data and we do not use it for advertising. The companies that help us run the service, and what they hold, are:

How long we keep it

For as long as the nursery uses Nestora and needs the data to run. When a nursery leaves, we give it an export of its data and delete the rest within 30 days, except records the law requires us to keep, such as invoices and payment records and the evidence that a consent existed, which we keep only as long as required. Backup copies expire on their own schedule: daily copies after 30 days, monthly copies after 12 months.

How we protect it

• Data is encrypted in transit (HTTPS everywhere) and at rest (encrypted disks, and encrypted storage for photos and documents).
• Sign-in has protection against password guessing; each person has their own account and role; Nestora's own administrator accounts require a second factor.
• Changes to important records are kept in an audit trail; access logs are kept for 90 days.
• A daily encrypted backup is kept for 30 days and a monthly one for 12 months, with a copy in a second region; restoring from backup is rehearsed.
• A written incident procedure exists. If a security incident affects your data, we tell the nursery without undue delay so it can inform the families concerned.
• Security researchers can report an issue to security@getnestora.app. Please test only with accounts you own or that we issued to you.

Your rights

You can ask to see the data held about you or your child, to correct it, to receive a copy, or to have it deleted, and you can withdraw a consent you gave. Ask your nursery first: it is the controller and can act in the app. You can also write to us and we will work with the nursery to answer. Deletion can be delayed for records the law requires keeping, such as invoices, and we will tell you when that applies.

Children

The apps are used by adults: nursery staff and guardians. Children do not have accounts. Information about a child is entered by the nursery and by the child's guardians.

Cookies and local storage

This website and the apps store your language choice on your device, and the apps store your sign-in session. We use no analytics, no advertising and no tracking, on the website or in the apps.

Changes to this notice

We update this notice as the service and the law change. Each version is numbered and dated at the top, and material changes are announced in the apps.

Contact

Nestora, operated by Omar Ahmed Mahmoud Sami.

Email:

hello@getnestora.app

WhatsApp or phone:

Chat on WhatsApp · +20 …