Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a BlushyBaby account, we collect:

• Email address: Used for account authentication and communication
• Password: Securely encrypted and stored for account access
• Account creation date: To track your account history

1.2 Baby Profile Information

You may choose to provide information about your baby(ies), including:

• Name: Your baby's first name
• Birth date: Used for age calculation and developmental insights
• Avatar photos: Optional profile pictures you upload

1.3 Activity Tracking Data

To provide tracking functionality, we collect data you enter about:

• Sleep sessions: Start time, end time, duration, and optional notes
• Feeding sessions: Type (breastfeeding, bottle, solid foods), amount, time, and notes
• Diaper changes: Type (wet, dirty, both), time, and notes
• Milestones: Title, description, achievement date, and optional photos

1.4 Documents and Media

You may upload:

• Photos: Baby avatars and milestone photos
• Documents: Medical records, vaccination cards, and other files (images, PDFs, text files)

1.5 Technical Information

We automatically collect certain technical data:

• Device information: Device type, operating system, and app version
• Usage data: Features used, session duration, and interaction patterns
• Error logs: Crash reports and diagnostic information to improve app stability

2. How We Use Your Information

We use the information we collect to:

2.1 Provide Core Services

• Create and manage your account
• Store and display baby profiles and tracking data
• Calculate statistics and generate insights
• Enable offline access through local caching
• Synchronize data across your devices

2.2 Improve User Experience

• Provide personalized recommendations based on your baby's data patterns
• Generate trend analysis and visualizations
• Offer contextual insights and tips

2.3 Maintain and Improve the App

• Fix bugs and technical issues
• Analyze usage patterns to improve features
• Develop new functionality based on user needs
• Ensure app security and prevent fraud

2.4 Communication

• Send password reset emails
• Provide customer support
• Send important service updates (with your consent)

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is securely stored using Supabase, a trusted backend-as-a-service platform built on PostgreSQL. Supabase provides:

• Enterprise-grade security infrastructure
• Encrypted data transmission (SSL/TLS)
• Secure data centers with physical security measures
• Regular security audits and compliance certifications

3.2 Security Measures

We implement multiple layers of security:

• Authentication: Secure email/password authentication with encrypted password storage
• Row Level Security (RLS): Database policies ensure you can only access your own data
• Private Storage: Documents and photos are stored in private buckets with access controls
• User Scoping: All data is tied to your user ID and isolated from other users
• Secure Transmission: All data transfers use HTTPS encryption
• Environment Protection: API keys and credentials are securely managed

3.3 Local Device Security

• Cached data on your device is protected by your device's security features
• We recommend using device lock screens and biometric authentication
• Local data is automatically cleared when you log out

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Your family's data is private and belongs to you.

4.2 Service Providers

We share data with trusted service providers who help us operate the app:

• Supabase: Database, authentication, and file storage services
• Expo: App development and deployment platform

These providers are contractually obligated to protect your data and use it only for providing services to BlushyBaby.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

4.4 Business Transfers

If BlushyBaby is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4.5 Family Sharing (Future Feature)

In future versions, we plan to offer family sharing features. When available, you will have explicit control over who can access your baby's data and what level of access they have (read-only, etc.).

5. Your Rights and Choices

5.1 Access and Portability

• View Your Data: Access all your data through the app interface
• Export Your Data: Request a copy of your data in a portable format (future feature: CSV export)

5.2 Correction and Updates

• Edit baby profiles, tracking data, and milestones at any time through the app
• Update your account information in the profile settings

5.3 Deletion Rights

• Delete Specific Data: Remove individual entries, photos, or documents
• Delete Baby Profiles: Remove entire baby profiles and associated data
• Delete Account: Request complete account deletion by contacting support

5.4 Opt-Out Rights

• Opt out of promotional emails (when applicable)
• Disable push notifications in your device settings
• Choose not to provide optional information

6. Children's Privacy

BlushyBaby is designed for parents and caregivers to track information about their children. The app is intended for use by adults (18 years or older).

6.1 Information About Children

• Parents voluntarily provide information about their babies/children
• This information is stored securely and only accessible to the parent's account
• We do not knowingly collect information directly from children under 13

6.2 COPPA Compliance

While the app stores information about children, it is entered by parents/guardians, not by children themselves. We comply with the Children's Online Privacy Protection Act (COPPA) by:

• Not collecting personal information directly from children
• Giving parents control over their children's information
• Allowing parents to review and delete their children's data

7. Data Retention

7.1 Active Accounts

We retain your data for as long as your account is active and you continue using BlushyBaby. This allows you to:

• Access historical tracking data and trends
• View milestone memories over time
• Maintain continuity in insights and analytics

7.2 Inactive Accounts

• Accounts inactive for 2+ years may be flagged for deletion
• We will send email notifications before deleting inactive accounts
• You can reactivate your account by logging in

7.3 Deleted Accounts

• Upon account deletion, we permanently remove your data within 30 days
• Some data may be retained in backup systems for up to 90 days
• Aggregated, anonymized data may be retained for analytics

7.4 Legal Obligations

We may retain certain data longer if required by law, for fraud prevention, or to resolve disputes.

8. International Data Transfers

BlushyBaby is available globally. Your data may be transferred to and stored in countries other than your own, including the United States where Supabase servers are located.

8.1 Data Protection Standards

• We ensure appropriate safeguards are in place for international transfers
• Supabase complies with international data protection regulations
• Your data receives the same level of protection regardless of location

8.2 GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices or services
• Legal or regulatory requirements
• User feedback and improvements

9.1 Notification of Changes

• Material changes will be communicated via email or in-app notification
• The "Last Updated" date at the top will be revised
• Continued use of the app after changes constitutes acceptance

9.2 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: