Privacy Policy

Your account. Your name, email address and, if you give it, your phone number and the city, state or ZIP code you are searching from. Passwords are never stored — only an Argon2id hash of them.

Your children. Whatever you enter about the children in your care: their first name, last name, date of birth, the conditions or needs you select, and any notes you add. You decide what goes in. Nothing here is required beyond a first name.

Appointments. Who you booked with, when, which child the visit is for, how you intend to pay, and any note you send the provider. Providers may add their own private visit notes, which are described below.

Providers. If you sign up as a provider: your practice details, credentials, licence number and state, NPI, the services you offer and the locations you work from. We check your NPI against the public CMS NPPES registry as part of verification.

Technical records. For each sign-in session we keep the device description your browser or app sends and the IP address it came from, so you can see where you are signed in. We write an audit record when accounts are created, signed in to, verified, suspended or deleted, and when a provider opens or exports a client record.

NiMO has no advertising, no third-party analytics and no tracking across other apps or websites.

A provider you book with sees your name, email address and phone number, the first name and age of the child the visit is for, and the note you sent. They see the history of visits with them and nothing else about your family. Providers you have not booked with see nothing.

Private visit notes written by a provider are returned only to that provider. They are never shown to families.

NiMO staff can see provider applications in order to verify licences, and account status in order to run the platform.

Nobody else. We do not sell personal information, share it with advertisers, or use health-related information for marketing.

Your data is held in our database in the United States. Email — booking confirmations, reminders, cancellations and password resets — is delivered through Amazon Simple Email Service. Those are the only places your information travels.

Everything travels over TLS. Passwords are hashed with Argon2id using OWASP parameters. Sign-in tokens are stored only as SHA-256 hashes, expire, and rotate every time they are used; reuse of an old token signs out every session on the account. On mobile, the token is kept in the iOS Keychain or Android Keystore. Access to every record is scoped to the role that owns it.

You can delete your account at any time, from Account → Delete account in the app, or from your account page on the web. It is immediate and it cannot be undone.

Deleting a family account removes your children and everything recorded about them, your appointments and visit history, your family calendar, any private notes a provider wrote about those visits, your sessions and your sign-in. Appointments still to come are cancelled, and the provider is told so the time can be offered to someone else.

Deleting a provider account removes your profile, services, published openings and bookings; the families affected are told that you have cancelled.

What survives is the audit record that an account of that kind was deleted, with no name, email or other detail that points back to you. If you would rather ask us to do it, write to privacy@nimofind.com and we will confirm once it is done.

NiMO is for parents, guardians and providers — it is not directed to children, and children do not have accounts. Information about a child is entered by the adult responsible for them, who can change or remove it at any time from Your children.

You can see and correct everything on your account from inside NiMO, sign out individual devices, turn appointment reminders on or off, and delete the whole account. To ask for a copy of your data, or about rights you may have under your state’s privacy law, write to privacy@nimofind.com.

If this policy changes in a way that affects what we do with your information, we will say so here and, when the change is significant, by email. The date at the top always reflects the current version.

NiMO — privacy@nimofind.com