Privacy Policy

1. Introduction

This Privacy Policy describes how Arya (“we,” “us,” or “our”) collects, uses, stores, and discloses information when you use the Arya · Baby Tracker mobile application and our website at www.meetarya.com (collectively, the “Services”). By downloading, accessing, or using the Services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting the privacy of our users and the sensitive nature of the data entrusted to us. Given that the Services process information relating to infants and young children, we apply heightened care in our data handling practices.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration Data: email address, display name, and authentication credentials
• Child Profile Data: child’s first name, date of birth, and optional profile photograph
• Care Activity Data: feeding records (type, duration, volume, milk type), sleep records (start time, end time, duration, difficulty rating, settle time), and diaper change records (type, color, consistency, time)
• Caregiver Data: email addresses of persons you invite as caregivers, and their designated roles
• Payment Information: if you subscribe to a paid plan, your payment is processed by Apple through In-App Purchase. We do not collect, store, or have access to your credit card number, bank account details, or other financial account information. We receive only a transaction confirmation and subscription status from Apple.

2.2 Information Collected Automatically

• Crash and Performance Data: anonymous crash reports, stack traces, and device state information at the time of a crash
• Analytics Data: anonymous, aggregated usage statistics such as screen views and feature engagement
• Device Information: device model, operating system version, and app version, collected as part of crash and analytics reporting
• Website Data: when you visit www.meetarya.com, our hosting provider may automatically collect your IP address, browser type, and referring URL. We do not use cookies for tracking or advertising on our website.

2.3 Information We Do Not Collect

We do not collect location data, contact lists, browsing history, advertising identifiers for tracking purposes, health data through Apple HealthKit, or any biometric data.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual Necessity: Processing your account and care activity data is necessary to provide the core functionality of the Services.
• Legitimate Interest: Crash reporting and anonymous analytics serve our legitimate interest in maintaining and improving the Services’ reliability and user experience.
• Consent: Where required by applicable law, we obtain your consent prior to processing. You may withdraw consent at any time by discontinuing use of the Services and deleting your account.

4. How We Use Your Information

We use the information we collect for the following purposes and no others:

• To create and maintain your user account
• To store and display care activity logs for your child
• To enable sharing of care data between authorized caregivers you have designated
• To generate trends and insights based on your child’s care history
• To process and manage your subscription, if applicable
• To diagnose crashes, errors, and performance issues
• To understand aggregate usage patterns in order to improve the Services

We do not use your information for advertising, marketing to third parties, profiling, automated decision-making, or any purpose unrelated to the provision of the Services’ functionality.

5. Data Sharing and Disclosure

5.1 Caregiver Sharing

When you invite another person as a caregiver, that person will be able to view and contribute to your child’s care activity logs. You may revoke a caregiver’s access at any time through the app’s settings. It is your responsibility to invite only persons you trust with your child’s information.

5.2 Service Providers

We use third-party service providers to operate the Services. These providers process your data only as necessary to provide their respective functions:

Each service provider processes data in accordance with industry-standard data processing agreements. Apple processes payment data in accordance with the Apple Privacy Policy. Data may be stored and processed in the United States or other jurisdictions where our service providers maintain infrastructure.

5.3 We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information or your child’s information to any third party, for any purpose, under any circumstances.

5.4 Business Transfers

We may share personal information in connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets. In such event, we will notify you before your information becomes subject to a different privacy policy. Your information would remain subject to the promises made in the Privacy Policy that was in effect at the time of collection until you are notified otherwise.

5.5 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to: (a) comply with applicable law or respond to subpoenas or warrants; (b) protect the rights, property, or safety of Arya, our users, or others; or (c) investigate any violation or potential violation of the law or our Terms of Use.

6. Data Security

We implement commercially reasonable security measures to protect your data, including encryption of data in transit, secure access controls, and integrity verification of application requests. Authentication credentials are managed by our authentication provider and are never stored in plaintext.

While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

7. Data Retention

• Account and Care Data: Retained for as long as your account is active. Upon account deletion, your personal data is permanently removed as described in Section 9.
• Care Activity Logs: Logs you created are retained with the child’s profile to ensure continuity of care for other authorized caregivers. Logs are not individually attributable after account deletion beyond the display name recorded at the time of entry.
• Subscription Data: Transaction records are retained as required for accounting and legal compliance.
• Crash Reports: Retained for 90 days per our crash reporting provider’s default retention policy.
• Analytics Data: Retained in anonymous, aggregated form per our analytics provider’s default retention policy.

8. Children’s Privacy

The Services are designed for use by adult parents and caregivers. They are not directed at children and we do not knowingly collect personal information directly from any person under the age of 13 (or the applicable age of digital consent in your jurisdiction).

The child profile data (name, date of birth, photograph) is provided by and under the control of the parent or legal guardian. We process this data solely at the direction of the parent or guardian for the purpose of providing the Services’ care tracking functionality.

If you believe that a child has provided us with personal information without parental consent, please contact us immediately at the address in Section 12, and we will take steps to delete such information.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Delete your account and associated data through Settings → Delete Account within the app
• Data Portability: Request your data in a structured, commonly used format
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent
• Objection: Object to processing based on legitimate interest

To exercise any of these rights, contact us at the address in Section 12. We will respond to verified requests within 30 days, or such shorter period as required by applicable law.

Account Deletion: You may delete your account at any time from within the app. Upon deletion, your authentication data and user profile are permanently removed. This action is irreversible.

Subscription Management: You may manage or cancel your subscription at any time through your Apple ID settings. Cancellation stops future charges but does not trigger account deletion.

10. International Data Transfers

Your data is processed and stored using cloud infrastructure which may be located in the United States or other countries. If you are located outside the United States, your data will be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home jurisdiction. By using the Services, you consent to such transfer. Where required by applicable law, we rely on our providers’ data processing agreements and standard contractual clauses to provide appropriate safeguards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by posting the updated policy within the app and updating the “Effective Date” above. Your continued use of the Services following the posting of changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

support@meetarya.com