Legal
Privacy Policy
Effective date: April 30, 2026
Overview
Nanday operates a community lifestyle and hospitality booking platform. We help residents of independent living communities, active adult communities, CCRCs, private clubs, and resorts book dining tables, reserve amenities, and register for events — all in one place.
This Privacy Policy describes what information we collect when you or your community uses Nanday, how we use it, and what we do not collect. Our platform is intentionally designed around preferences and lifestyle experiences — not clinical care.
Information We Collect
We collect only what is necessary to operate booking and reservation services:
- Resident and guest information — name, room or unit number, contact details provided by your community for the purpose of managing bookings.
- Booking and reservation data — dining reservations, amenity bookings (courts, swim lanes, fitness rooms), and event registrations including seat selection and attendance preferences.
- Food and service preferences — dining preferences such as gluten-free or other meal choices entered as booking notes. These are treated as hospitality preferences, not medical data.
- Payment information — for paid events or amenities, payment is processed through our payment provider. We do not store full payment card numbers.
- Demo and contact form submissions — name, organization, email, and selected features when someone requests a product demonstration via nanday.app.
How We Use Information
- To create, manage, and confirm dining, amenity, and event bookings for residents and guests.
- To surface relevant booking context to community staff so they can deliver more personal, attentive service.
- To enforce community-configured rules — priority windows, usage limits, guest policies, and capacity controls.
- To send booking confirmations and reminders by text or email where enabled.
- To respond to demo and sales inquiries submitted through our website.
What We Do Not Collect
Nanday is designed for lifestyle and hospitality experiences. We intentionally avoid collecting or processing clinical or medical information.
Outside our scope:
- —Medical diagnoses, treatments, or clinical care plans
- —Health records or electronic medical records (EHR/EMR)
- —Medication schedules or clinical assessments
- —Any data shared with or received from healthcare providers
Dining preferences such as "gluten-free" are recorded as hospitality and service preferences — they inform kitchen preparation, not clinical care. They are not treated as protected health information.
HIPAA Does Not Apply to This Platform
The Health Insurance Portability and Accountability Act (HIPAA) applies to covered entities and business associates that handle protected health information (PHI) — medical diagnoses, treatment records, and clinical data.
Nanday does not handle PHI. Our platform manages the day-to-day lifestyle experience of a community — not its clinical care. We do not integrate with electronic health record systems, and we are not designed for or marketed as a clinical care solution.
If your organization requires a platform that stores or processes clinical data, Nanday is not the appropriate tool. We power the hospitality and amenity experience — not the care side.
Third-Party Services
- Cloudflare Turnstile — used on our demo request form to prevent automated submissions. Cloudflare may process limited browser and network data to verify that a submission is human-initiated. See Cloudflare's privacy policy for details.
- Microsoft Azure — our platform infrastructure runs on Microsoft Azure. Data is processed and stored within Azure's secure cloud environment subject to Microsoft's data processing agreements.
Data Security
We implement reasonable technical and organizational safeguards to protect the information we hold. Data is transmitted over encrypted connections (HTTPS) and stored within secured cloud infrastructure. Access to resident and booking data is limited to authorized personnel and the community's own administrative staff.
Data Retention
Booking and resident data is retained for as long as your community's account is active and as needed to operate the service. When a community offboards from Nanday, we will delete or anonymize their data upon request in accordance with our data processing agreement.
Contact
Questions about this Privacy Policy or how Nanday handles data? Reach out:
This policy may be updated from time to time. The effective date at the top of this page reflects the most recent revision.