Privacy Policy

1. Data Controller

Baby Tracker IL ("the App") is independently developed and operated from Tel Aviv, Israel. For privacy-related inquiries, contact us at: tinoktracker@gmail.com.

2. About This Policy

This Privacy Policy explains how we collect, use, store, share, and protect your personal information — including special category health data — when you use Baby Tracker IL.

This policy describes how the current version of the App handles your data. It is intended to reflect applicable privacy laws, including the Israeli Protection of Privacy Law (5741-1981) and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Legal Basis for Processing

We process your data under the following legal bases:

• Account data (email, name): Performance of a contract (GDPR Art. 6(1)(b)) — necessary to provide the App's services.
• Device and technical data: Legitimate interest (Art. 6(1)(f)) — to ensure compatibility and fix bugs. Our legitimate interests are balanced against your rights and freedoms and limited to what is strictly necessary for security and stability of the App.
• Push notifications: Consent (Art. 6(1)(a)) — you choose to enable them and can disable at any time.
• Advertising (free tier): Legitimate interest (Art. 6(1)(f)) — on Android builds where ads are enabled, the free version may show non-personalized Google AdMob banner and interstitial ads in selected sections of the app. We request non-personalized ads only, and Premium subscribers do not see ads.
• AI parenting assistant: Explicit consent (Art. 6(1)(a)) — before using the "Is This Normal?" feature for the first time, you are presented with a consent dialog explaining that your child's contextual data will be sent to Google Gemini for response generation. You must accept before any data is transmitted.

Health Data (GDPR Article 9):
The App processes health-related data including pregnancy tracking, contraction records, growth measurements, vaccination schedules, feeding/sleep/diaper logs, and medical information. This is classified as special category data under Article 9.

Our legal basis is your explicit consent (Article 9(2)(a)). You provide this consent when you voluntarily enter health information into the App. When you use the AI assistant, you are asked for explicit consent via an in-app dialog before any contextual health data is sent to Google's Gemini AI to generate responses. You may withdraw consent by stopping use of the relevant features and requesting deletion of your account data.

4. Information We Collect

Information you provide:

• Account: Email address, display name, profile photo.
• Child profiles: Name, date of birth, due date, sex, birth weight/length, birth type, head circumference, shoe/clothing size, Tipat Halav clinic details.
• Pregnancy: Due date, weekly progress.
• Contractions: Start/end times, duration, frequency, intensity.
• Growth: Weight, height, head circumference.
• Medical: Vaccination dates, checkup status, test completion, appointment dates.
• Milestones: Developmental firsts, dates, photos, videos, notes.
• Feeding: Type (breast/bottle), amount, time, duration, breast side, notes.
• Sleep: Start time, duration, notes.
• Diapers: Type (wet/dirty/mixed), stool color, stool consistency, diaper rash status, time, notes.
• Teeth: Tooth positions and eruption dates.
• AI conversations: Questions you ask the "Is This Normal?" parenting assistant and the AI-generated responses.
• Caregiver sharing: Email addresses of people you invite to access a child profile, their assigned role, and invitation status.

Information collected automatically:

• Device type, OS version, and app version (for compatibility and bug fixes).
• Language preference.
• Advertising data: on Android builds where ads are enabled, Google AdMob may collect IP address, device type, and ad interaction data when non-personalized ads are shown in selected sections of the free app.

Biometric data: If you enable biometric unlock (Face ID / fingerprint), your biometric template is processed entirely on your device by the operating system. We never receive, transmit, or store biometric data. Only an encrypted session token is stored locally on your device.

Calendar access: If you choose to add medical appointments to your device calendar, the App requests calendar permission and writes events locally on your device. Calendar data is not sent to our servers.

5. How We Use Your Information

We use your data to:

• Provide pregnancy tracking and baby development features.
• Display Israeli medical timelines (Israeli Ministry of Health guidelines, Tipat Halav schedules, and WHO growth standards).
• Generate growth charts and percentile comparisons.
• Send optional feeding, sleep, vaccine, checkup, and milestone reminders (if you enable notifications).
• Power the "Is This Normal?" AI assistant using contextual child data.
• Allow you to share child profiles with caregivers you invite.
• Respond to support requests you send by email.
• Display non-personalized Google AdMob banner and interstitial ads in selected sections of the free Android app when ads are enabled.
• Process Android in-app subscriptions via RevenueCat and Google Play.
• Fix bugs and improve the App.

We do NOT use your data for: commercial profiling, automated decision-making, or sale/rental to any third party. We do not share health data with insurers, employers, or commercial entities.

6. Data Sharing & International Transfers

We do not sell, rent, or trade your personal information. The current version of the App uses the following service providers:

• Supabase (Supabase Inc.): Database, authentication, edge functions, and file storage.
• Google Sign-In (Google LLC): Optional. If you choose to sign in with Google, Google shares your name, email address, and profile photo with us to create or access your account. We never receive your Google password.
• Expo: App updates and push-notification infrastructure.
• Google Gemini API (Google LLC): Powers the "Is This Normal?" assistant. When you use this feature, contextual child data (such as age, sex, and recent feeding/sleep/diaper/growth summaries and milestones) is sent to Google's Gemini API to generate a response. Conversation history is stored in our database.
• Google AdMob (Google LLC): On Android builds where ads are enabled, may serve non-personalized banner and interstitial ads in selected sections of the free app.
• RevenueCat (RevenueCat Inc.): On Android, helps manage subscription status and purchase verification.
• Google Play Billing / Apple platform notification services: Store billing and push delivery infrastructure may process technical identifiers needed to complete those services.

Caregiver sharing: If you invite another person to access a child profile, the invitation email address is stored in our database and the App generates a shareable invitation link. Invited caregivers can view and, depending on their role, edit the child's data after accepting the invitation. You are responsible for ensuring you have appropriate consent to share a child's data with invited caregivers.

International transfers: Some of these providers may process data outside your country of residence, including in the United States.

We may also disclose data if required by Israeli law or valid legal process, or with your explicit consent.

7. Data Security

• Row-Level Security (RLS) enforced at database level — each user can only access their own data.
• Encryption in transit: TLS 1.2+ for all communications.
• Encryption at rest: AES-256 for all stored data.
• Secure authentication via JWT tokens.
• Minimum-necessary access principle for all service providers.
• Security practices are reviewed and updated as part of our development process.

8. Data Breach Notification

In the event of a personal data breach likely to risk your rights and freedoms:

• We will notify the relevant supervisory authority (Israeli Privacy Protection Authority and/or applicable EU authority) within 72 hours, as required by GDPR Article 33.
• If the breach poses a high risk to you, we will notify you directly without undue delay via email or in-app notification, as required by GDPR Article 34.
• Notifications will include: nature of the breach, data affected, likely consequences, and measures taken to address it.

9. Children's Privacy

Baby Tracker IL is a tool intended exclusively for adult users (parents and legal guardians). The App is not directed at children and is not designed to be used by anyone under the age of 16. We do not knowingly collect personal information directly from children.

All child-related data — including names, health records, milestones, and measurements — is entered and managed solely by the adult account holder, who is responsible for the accuracy of the data and for having legal authority to provide it.

If we become aware that data has been collected from a person under 16 without verified parental consent, we will promptly delete that data.

10. Your Rights

Under Israeli law and GDPR, you have the right to:

• Access (Art. 15): Request a copy of all data we hold about you.
• Rectification (Art. 16): Correct inaccurate or incomplete data.
• Erasure (Art. 17): Delete your account and associated data, subject to technical and legal limitations.
• Restriction (Art. 18): Temporarily stop processing in certain circumstances.
• Data Portability (Art. 20): Receive your data in a machine-readable format where applicable.
• Objection (Art. 21): Object to processing based on legitimate interests.
• Withdraw Consent (Art. 7(3)): Withdraw health data consent at any time.

Account Deletion: You can delete your account directly from the App by going to Settings and selecting "Delete Account". The current implementation deletes your authentication account immediately and removes application database records for child profiles that you solely own. If a child profile is shared with other caregivers, that shared profile remains available to those other caregivers. Some uploaded media files, backups, and provider-side logs may persist until later cleanup under provider retention policies. You may also request account deletion by emailing tinoktracker@gmail.com.

To exercise any other rights, email tinoktracker@gmail.com. We aim to respond within a reasonable time and, where applicable, within the time required by law.

Right to complain: You may lodge a complaint with the Israeli Privacy Protection Authority (PPA) — website: gov.il/en/departments/the_privacy_protection_authority, email: ppa@justice.gov.il, phone: *3103. EU residents may also contact their local Data Protection Authority.

11. Data Retention

• Active accounts: Data retained while your account is active.
• Deleted child profiles owned only by you: Deleted as part of the account-deletion flow.
• Deleted accounts: The authentication account is deleted immediately. Database records tied to child profiles you solely own are deleted during the deletion flow. Shared child profiles remain available to their remaining caregivers.
• AI conversation history: Retained while the relevant child profile exists in the database.
• Caregiver invitations: Expired invitations are automatically invalidated after 7 days.
• Uploaded media, backups, and infrastructure logs: May remain for a limited time according to the retention and backup policies of the relevant service providers.

12. Changes to This Policy

We may update this policy from time to time. For material changes, we will try to notify you by email or in-app notice where appropriate. If future changes affect the basis on which sensitive health data is processed, we will request renewed consent where required by law.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Israel. Disputes arising from this policy shall be subject to the jurisdiction of the competent courts in Tel Aviv-Jaffa, Israel.

For users in the European Union: Nothing in this policy limits your rights under GDPR. You retain the right to bring claims before the courts in your country of residence, and to lodge complaints with your local Data Protection Authority, regardless of the governing law clause above.