EveryNest Parental Consent Notice

1. About this document

This document explains the parental-authorisation process EveryNest uses when a Parent adds a Child or a Teen who is under 18 to their Household. It also records the notices and confirmation presented to the Parent in EveryNest at that point. EveryNest requires parental authorisation as a safeguarding and Household-access measure. It is not the GDPR lawful basis for the core processing of the minor’s personal data. Our lawful bases are explained in the Privacy Policy.

This Parental Consent Notice is effective 11 September 2026.

2. What the Parent confirms

Before a Child or Teen profile is created, the Parent selects the applicable role and age band and confirms that they are that person’s parent or legal guardian, or are authorised to act by someone who is. The Parent authorises the Child or Teen to participate in their EveryNest Household. EveryNest processes the personal data associated with that participation on the lawful bases described in the Privacy Policy

3. The notice shown to the Parent

The text below is displayed to the Parent when they add a Child or Teen as a Household member or generate a Teen invite. The Parent’s chosen name for the person is shown in place of [DISPLAY_NAME], and EveryNest displays the applicable Child or Teen version.

Child notice:

A Child profile does not require an email address, password, phone number, postal address, photo, geolocation, biometric data or contacts.

Child parental-authorisation confirmation:

Teen notice:

Teen parental-authorisation confirmation

4. Why we use this information

We use the minors’ information to provide EveryNest within your Household, including the Household features available to their role, and to operate, secure and troubleshoot the service.

For a Teen or Child who is under 18, our core lawful basis is legitimate interests under Article 6(1)(f) GDPR: our legitimate interest, and the Parent’s legitimate interest, in providing the Household service requested by the Parent. We balance those interests particularly carefully against the rights and interests of minors and apply the safeguards described in our Privacy Policy.

The parental-authorisation step on this screen is a safeguarding and Household-authorisation requirement. It is not consent relied upon under Article 6(1)(a) GDPR for the core EveryNest service.

5. What we do not do

We do not:

• display advertising;
• sell or rent the minors’ personal data;
• use their personal data for behavioural advertising or profiling;
• track them across other websites or apps;
• use their personal data to train artificial-intelligence or machine-learning models.

We also do not use re-engagement techniques designed to extend a minor’s use of EveryNest.

6. Who can see the minor’s information

Information within EveryNest is shared only according to the Household member’s role.

Parents can see Household activity relating to Child and Teen members.

Teen users can view and edit the shared Household calendar and shopping lists and use the tasks, points and rewards available to the Teen role.

Child users can view the Household calendar and shopping lists and use the tasks, points and rewards available to the Child role.

Members of other EveryNest Households and members of the public cannot see the minor or their Household activity.

We also use a limited number of service providers described in our Privacy Policy to operate EveryNest. Personal data may also be disclosed where required by law.

7. What we record when parental authorisation is given

When a Parent completes the parental-authorisation step, EveryNest keeps an internal record showing:

• which Parent gave the authorisation;
• which Child or Teen the authorisation relates to;
• the age band declared by the Parent;
• the version of the Privacy Policy made available at the time and the applicable version of this Parental Consent Notice;
• the date and time of the authorisation; and
• the IP address recorded when the authorisation was given.

Parental-authorisation records are internal compliance records and are not displayed in the EveryNest app or web interface. A Parent’s own data export includes records of parental authorisations they gave. An export relating to a Child or Teen includes the parental-authorisation records relating to that member, but does not include the identity or IP address of the adult who gave the authorisation.

Personal data contained in those records remains subject to applicable data-protection rights, including the right of access.

8. Removing a Child or Teen from the Household

A Parent may end a Child or Teen’s participation in EveryNest by removing them from the Household in Settings.

The minor’s member profile is then removed.

Information forming part of shared Household history, such as completed tasks, points records, calendar events or shopping-list activity, may remain where there is a lawful basis to retain it.

If you would like personal data relating to the Child or Teen removed from shared Household history, contact hello@everynest.app. We will deal with the request in accordance with applicable data-protection law.

Removing the Child or Teen from the Household does not delete the internal parental-authorisation record.

9. How long we keep parental-authorisation records

We retain the parental-authorisation record while the related minor profile exists and for up to six years afterwards where reasonably necessary to demonstrate the authorisation that applied and to establish, exercise or defend legal claims.

Unused or withdrawn invitation records are retained only for the period described in our Privacy Policy.

The full EveryNest retention schedule is set out in the Privacy Policy.

10. Data-protection rights

Children and Teens have data-protection rights in their own personal data.

A person with parental responsibility, or another person lawfully authorised to act for the minor, may exercise those rights on the minor’s behalf where appropriate.

A Child or Teen may also exercise their rights directly where they are capable of understanding and exercising them.

11. Contact

EveryNest is operated by:

Pivotal Finance Solutions S.à r.l.-S 32 rue Buurg 5425 Gostingen Luxembourg RCS Luxembourg B289140

Requests relating to access, correction, deletion, restriction, objection or other applicable data-protection rights can be made to: hello@everynest.app

UK users may also contact our UK representative using the details provided in the Privacy Policy.

You may complain to the data-protection authority in the country where you habitually live or work, or where you believe an infringement occurred.

Our supervisory authority is the Commission nationale pour la protection des données (CNPD) in Luxembourg. UK users may also complain to the Information Commissioner’s Office (ICO).