Last updated: September 15, 2026
DailyNest is a daily email digest service for parents. It connects to your Gmail account, identifies emails related to your children's schools, activities, and appointments, and sends you an organized daily summary.
When you sign in with Google, DailyNest requests access to:
Gmail (read only): We read your incoming emails to identify kid-related content (school newsletters, activity schedules, medical appointments, etc.). We request read-only access and cannot send, modify, or delete any emails in your Gmail account. To decide what is about your children, our AI reads the recent emails in your inbox (Gmail's Social tab is skipped); emails it judges unrelated are not saved, summarized, or shown to anyone. Your daily digest is delivered from DailyNest's own email service (digest@dailynest.io), not from your Gmail account.
Google Calendar: When you tap "Add to Calendar" in your digest, we create a calendar event on your behalf. We do not read or modify your existing calendar events.
Profile information: We access your name and email address to personalize your digest and create your account.
We store the minimum data needed to operate the service:
Account information: Your name, email address, digest preferences (time, frequency, timezone), an optional ZIP code used only to look up your local forecast for the briefing, and recipient list.
OAuth tokens: Encrypted authentication tokens that allow us to access Gmail and Calendar on your behalf. These are encrypted at rest and never shared.
Email metadata: We store the ID, subject line, and sender of processed emails to avoid duplicate processing and link Digest items to their sources.
Saved originals: We keep encrypted copies of forwarded emails used to create your saved items. When saved-original retention for connected inboxes is enabled, we also keep an encrypted snapshot of each email that backs a saved Digest item, solely so you can open its source later. We keep an encrypted copy of a calendar PDF or photo only after you confirm events from that upload, so you can open that source later. We do not archive your whole inbox. A connected-inbox snapshot contains the subject, sender, and available email text and HTML; it may be shortened and does not include the original attachment files. Saved copies are labeled when shown.
Extracted items: Events, deadlines, and action items extracted from your emails are stored temporarily to generate your digest and enable calendar integration. Digest content is retained for 30 days for your reference, then automatically deleted.
We do not sell, share, or transfer your personal data to third parties for advertising, marketing, or any other purpose unrelated to operating DailyNest.
We do not retain an archive of your inbox. The saved copies described above are limited to emails behind your saved items.
We do not use your data to train AI models. Your email content is processed by large-language-model APIs from xAI (Grok), Anthropic (Claude), and OpenAI (GPT) to decide what is about your children, pull out events, deadlines, and to-dos, and double-check the finished briefing. Under each provider's API terms, content sent through the API is not used to train their models by default. Retention depends on the provider, API feature, and our account settings. Providers may retain content for service operation, safety, security, or legal obligations, including longer retention in specified circumstances. Their policies are linked below.
We do not keep emails unrelated to your children. Deciding which emails are about your kids is itself an AI step: the emails in your recent inbox window are read by the AI to make that call, and the ones it judges unrelated (work, marketing, social notifications) are dropped rather than stored, extracted, or summarized.
DailyNest's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we only use Gmail and Calendar data to provide the user-facing features of DailyNest described in this policy. We do not use this data to develop, improve, or train generalized or non-personalized AI or machine learning models. We do not transfer this data to third parties except as necessary to provide or improve the service (processing by the AI providers disclosed below), for security purposes, or to comply with applicable law. We do not sell this data or use it for advertising.
Google APIs: We use Google Gmail API and Google Calendar API to read emails and create calendar events. Google's privacy policy applies to their services.
AI providers. What we send: the sender, subject, and text of the emails in your recent inbox window (with quoted reply chains and tracking links stripped and long bodies shortened); pictures and PDFs attached to those emails (flyers, calendars, forms) so their dates can be read; photos, notes, and emails you text or forward to DailyNest yourself; your children's first names, schools, grades, and activities as you entered them; and the finished briefing. Which provider does which job can change when one is unavailable. Retention depends on the provider, API feature, and our account settings. Providers may retain content for service operation, safety, security, or legal obligations, including longer retention in specified circumstances.
xAI (Grok): Reads the emails and attachments above to write your daily briefing and to read text out of pictures. Not used for training under their API terms; see those terms for retention.
Anthropic (Claude): The same email and attachment content, used for extraction and to double-check what gets written when Claude is the reader. Not used for training under their API terms; their retention policy describes the default period and the circumstances in which they keep content longer.
OpenAI (GPT): Your finished briefing, with excerpts of the emails behind each item, is sent to the OpenAI API for an independent second check before it's sent. For a new family's first letters, the second check also reads the emails themselves, not only excerpts. Not used for training under their API terms; see their data controls for retention.
Resend: Delivers your daily briefing email to your inbox.
Twilio: Sends and receives text messages if you turn on texting.
Stripe: Handles payments. We never see your full card number.
National Weather Service: If you add a ZIP code, we ask the US National Weather Service for that area's forecast so your briefing can say what to dress the kids in. Only the ZIP code's location is sent. No email content, no name, nothing about your children. To turn that ZIP code into a location and to name the town it's in, we use the US Census Bureau's geocoder and, as a fallback, zippopotam.us -- both keyless, both sent nothing but the ZIP code itself.
Render: Our application is hosted on Render. See Render's privacy policy for infrastructure-level data handling.
OAuth tokens and saved original-email copies are encrypted at rest using Fernet symmetric encryption. Access to a saved inbox copy requires its recorded account or authorized household relationship. All data transmission uses HTTPS/TLS. We follow standard security practices for a web application handling sensitive data.
Processed email metadata and Digest history follow their 30-day cleanup schedule. Saved original-email copies and confirmed-upload copies have a separate purpose: keeping the source available for saved items. They are retained until account deletion rather than being removed by that routine cleanup. Deleting the item's owning account or the account that supplied its saved email removes the copy, including confirmed-upload copies. You can request account deletion by contacting us, which also removes OAuth tokens, preferences, and Digest history.
You can revoke DailyNest's access to your Google account at any time through your Google Account settings (Security > Third-party apps with account access). This immediately stops all email scanning and digest delivery.
You can request a copy of your stored data or request deletion by emailing hi@dailynest.io.
DailyNest processes emails about children but does not collect information directly from children. The service is intended for use by parents and caregivers.
DailyNest uses a session cookie to keep you signed in. That cookie is functional, not used to profile you, and expires when you log out or after a period of inactivity.
We also use the Meta Pixel and the Google Ads tag to measure when someone signs up or starts a subscription after clicking an ad. Those tags tell us the ad worked. We use Microsoft Clarity to see how people move around the site (clicks and page recordings). These tools do not read your Gmail, and we do not sell or share inbox data with advertisers.
We may update this policy as the service evolves. Significant changes will be communicated via email to registered users.
For privacy questions or data requests: hi@dailynest.io