Who we are
Nala ("we", "us") is the baby monitor app that pairs two phones into a private video monitor. This policy explains what data the app handles, where it lives, and the choices you have. It applies to the Nala mobile apps and this website. Questions? Write to hello@stella.app.
Live video & audio: end-to-end encrypted, never stored
The heart of Nala is a direct, encrypted connection between your nursery phone and your parent phone. Video and audio streams are end-to-end encrypted (WebRTC with DTLS-SRTP, and device identities pinned with keys that never leave your phones' secure hardware). We cannot watch or listen to your streams, and they are never recorded, stored, or processed on our servers.
When your phones can't reach each other directly, the encrypted stream may pass through a relay server (TURN, operated by Cloudflare). The relay only forwards encrypted packets — it cannot decrypt them. On your home network, Nala can also connect entirely locally without touching the internet at all.
Cry detection happens on your device
Nala listens for crying on the nursery phone itself, using an on-device sound classifier. The audio used for detection is analyzed in real time on the phone and is never uploaded anywhere. Only the resulting event ("cry detected at 2:14") is sent, so we can deliver your alert.
What we do store
To run your account and family, we store the following on our backend (hosted by Supabase in the European Union, region eu-west-1):
- Account details — your email address, display name, and sign-in identity if you use Sign in with Apple or Google. We never see your passwords for those services.
- Family & devices — who belongs to your family, which devices are paired, device names, and device public keys used to verify connections.
- Snapshots and clips — photos you take in the app and, with Nala Plus, short video clips saved around alerts. These are stored encrypted at rest in private storage that only members of your family can access, never made public, and never used by us for any purpose. Clips are kept for 30 days, then deleted automatically.
- Events & sleep trends — timestamps of alerts (cry, noise, motion) and derived sleep statistics, so your history and trends work across devices. Free accounts keep 24 hours of event history.
- Push tokens — the device token needed to deliver notifications through Apple (APNs) and Google (Firebase Cloud Messaging).
- Invitations — the email address you invite a family member with, kept until the invite is accepted or it expires (7 days).
- Subscription status — whether your account has Nala Plus, synced from the app stores via RevenueCat. Payment is handled entirely by Apple or Google; we never see your payment details.
What we don't do
- No advertising, ad networks, or ad tracking of any kind.
- No third-party analytics or behavioral profiling SDKs in the app.
- No selling, renting, or sharing of your data with data brokers — ever.
- No human review of your video, audio, snapshots, or clips.
- No use of your data to train machine-learning models.
Service providers
We use a small number of processors, each bound by data-processing agreements, and each receiving only what is necessary:
- Supabase (EU) — database, authentication, and encrypted file storage.
- Cloudflare — TURN relay for encrypted streams when a direct connection isn't possible. Sees encrypted traffic and connection metadata only.
- Apple & Google — push-notification delivery and in-app purchases.
- RevenueCat — subscription-status management (an anonymized app user ID and purchase state; no payment details).
- Resend — sending invite emails on your behalf.
Legal basis (GDPR)
We process your data to perform our contract with you (running the monitor, your account, and your family), on the basis of our legitimate interest in keeping the service secure and reliable, and with your consent where required — for example, camera, microphone, and notification permissions, which you can revoke in your device settings at any time.
Your rights & deleting your data
You can access, correct, export, or erase your personal data. Deletion is built into the app: Settings → Delete account permanently removes your account, family memberships, devices, events, snapshots, and clips. If you are the only member of a family, everything belonging to that family is deleted with it. You can also email hello@stella.app to exercise any right, and you have the right to lodge a complaint with your local data-protection authority.
Children's privacy
Nala is made for parents and caregivers, and accounts may only be created by adults. The app inevitably captures video and audio of your child in the nursery — that footage belongs to you, stays end-to-end encrypted between your devices, and is never stored on our servers beyond the snapshots and clips you choose to keep. We never require any personal information about your child, and we do not knowingly collect data from children.
Security
Streams are end-to-end encrypted with per-device keys held in your phones' secure hardware (Secure Enclave / Android Keystore). Connections between devices are mutually verified with signed messages, all data in our backend is encrypted in transit and at rest, and access to snapshots and clips is enforced per-family at the database level. Privacy Mode cuts the camera and microphone completely with one tap on the nursery phone.
Data retention
Alert clips are deleted after 30 days. Pairing codes expire after 10 minutes and invites after 7 days. Event history on free accounts is kept for 24 hours. Everything else is kept only while your account exists and is removed when you delete it.
Changes to this policy
If we make material changes, we'll notify you in the app before they take effect and update the date at the top of this page.
Nala is not a medical device and is not a substitute for adult supervision. It does not measure or monitor breathing, heart rate, oxygen, or temperature, and should not be relied on for any medical purpose.