Privacy Policy

1. Introduction

Welcome to nurturewell (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the “Service”).

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Name, email address, password, and profile information
• Baby Information: Baby's name, date of birth, gender, and development milestones
• User Content: Notes, photos, videos, and other content you upload
• Communication Data: Messages, forum posts, and support communications
• Hashed Contact Data: A SHA-256 hash of your email address may be shared with our mobile attribution partner (AppsFlyer) to match advertising events to your account.

2.2 Automatically Collected Information

• Device or Other Identifiers: Google Advertising ID (Android), Apple Identifier for Vendors (iOS), an AppsFlyer-generated device identifier, a Mixpanel-generated distinct ID, and the Firebase Cloud Messaging registration token used to deliver push notifications.
• Diagnostics and Crash Data: Device model, operating system version, app version, stack traces, and other diagnostic data collected when the app crashes or encounters errors.
• Usage Data: Screens viewed, features used, milestone interactions, content viewed, and in-app purchase events.
• Network Data: IP address (collected by our analytics and attribution providers for fraud prevention and approximate geolocation), browser type, access times, and error logs.

2.3 Location Information

We may collect location information if you grant us permission, which helps us provide localized content and services.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide and maintain our Service
• Track and display your baby's development milestones
• Deliver personalized content and recommendations
• Enable community features and user interactions

3.2 Communication

• Send service-related notifications and updates
• Respond to your inquiries and provide customer support
• Send promotional materials (with your consent)

3.3 Improvement and Analytics

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Conduct research and analytics

3.4 Legal and Security

• Protect against fraud and abuse
• Comply with legal obligations
• Enforce our terms of service

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with the following third-party service providers who assist us in operating our Service:

• AppsFlyer — mobile attribution and marketing analytics. AppsFlyer receives device identifiers (including the Google Advertising ID where available), a hashed copy of your email, and in-app event data, and may forward this data to advertising networks (such as Meta, TikTok, and Google Ads) via server-to-server postbacks so we can measure the performance of our advertising campaigns.
• Mixpanel — product analytics. Mixpanel receives a per-device distinct ID and in-app event data so we can understand how the app is used and improve it.
• Google Firebase (Crashlytics and Cloud Messaging) — crash reporting and push notifications. Firebase receives the Firebase Installation ID, FCM registration token, crash diagnostics, and device model.
• Apple App Store and Google Play — in-app purchases and subscription receipts.
• Microsoft Azure — cloud hosting, storage, and database services for the application backend.

4.2 Advertising and Attribution Partners

We use third-party attribution services (currently AppsFlyer) to measure the effectiveness of our advertising campaigns. To do this, AppsFlyer collects device identifiers and shares aggregated event data with the advertising networks we work with, such as Meta, TikTok, and Google Ads. We do not directly share your account information, baby information, or any health-related content with advertising networks. You can limit ad tracking at the operating-system level:

• Android: Settings → Google → Ads → Delete advertising ID
• iOS: Settings → Privacy & Security → Apple Advertising → turn off Personalized Ads

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal processes.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 Consent

We may share your information with your explicit consent for specific purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our Service

You may request deletion of your account and associated data at any time by contacting us at [email protected].

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format

7.2 Correction and Updates

• Update or correct your personal information
• Modify your account settings and preferences

7.3 Deletion

• Request deletion of your account and data
• Remove specific content or information

7.4 Marketing Communications

• Opt-out of promotional emails and notifications
• Manage communication preferences in app settings

8. Children's Privacy

Our Service is designed for parents and caregivers to track their children's development. We do not knowingly collect personal information directly from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Parents and guardians are responsible for providing consent for the collection of their child's developmental information through our Service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes and codes of conduct

10. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the “Last Updated” date at the top of this policy
• Notify you through the app or by email for significant changes
• Provide the updated policy in the app and on our website

Your continued use of our Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Jurisdiction-Specific Rights

13.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and how it is used, the right to delete personal information, and the right to opt-out of the sale of personal information.

13.2 European Union Residents (GDPR)

EU residents have rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, data portability, and to object to processing of personal data.

13.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have specific rights under your local privacy laws, please contact us for assistance.