Privacy Policy

1. Introduction

My Avocado ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application My Avocado (the "App").

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Email address, username, profile information, and authentication credentials (including Sign in with Apple and Google Sign-In)
• Baby Profile Data: Baby names, nicknames, birth dates, gender, birth weight, birth length, and profile photos
• Health & Tracking Data:
  • Feeding records (breast, bottle, solids) with timestamps and amounts
  • Sleep tracking data with start/end times and duration
  • Diaper change records (wet, dirty, mixed) with timestamps
  • Baby milestones and developmental achievements
  • Growth measurements (weight, height, head circumference)
  • Health notes and observations
• AI Midwife Conversations: Questions you ask and responses from our AI assistant for pregnancy and baby care guidance
• Journal Entries: Personal notes, experiences, and observations you record
• Communication Data: Messages sent through the app's community chat features
• Notification Preferences: Settings for feeding reminders, sleep reminders, and milestone alerts

2.2 Automatically Collected Information

• Device Information: Device type, operating system version, unique device identifiers, and app version
• Usage Data: App features used, time spent in app, navigation patterns, screen views
• Performance Data: Crash reports, error logs, app performance metrics
• Location Data: We do NOT collect precise location data. Any timezone information is used solely for accurate tracking timestamps

2.3 Third-Party Data

• Analytics: We use analytics services to understand app usage patterns and improve functionality
• Authentication Services: When you use Sign in with Apple or Google Sign-In, we receive basic profile information (name, email) as permitted by those services

3. How We Use Your Information

We use the collected information to:

• Provide Core Features: Enable baby tracking, feeding schedules, sleep monitoring, diaper logs, and milestone tracking
• AI Midwife Assistant: Process your questions and provide personalized pregnancy and baby care guidance
• Data Synchronization: Sync your data securely across multiple devices using your account
• Notifications & Reminders: Send feeding reminders, sleep alerts, and milestone notifications based on your preferences
• Statistics & Insights: Generate feeding statistics, sleep patterns, and growth charts
• Community Features: Enable participation in community chat and discussions
• Data Export: Allow you to export your tracking data in various formats
• Personalization: Remember your settings (dark mode, language preferences, measurement units)
• App Improvement: Analyze usage patterns to enhance functionality and user experience
• Customer Support: Respond to your inquiries and provide technical assistance
• Legal Compliance: Comply with applicable laws and regulations

4. Information Sharing and Disclosure

4.2 We may share information in the following circumstances:

• Service Providers: With trusted third-party services that help us operate the app:
  • Supabase: For secure data storage, authentication, and real-time synchronization
  • RevenueCat: For subscription management (if applicable)
  • Analytics Services: For app usage analytics (anonymized data)
• Legal Requirements: When required by law, court order, or government request
• Safety & Protection: To protect the rights, property, or safety of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with advance notice)
• With Your Consent: When you explicitly authorize us to share your information

5. Data Storage and Security

5.1 Data Storage

• Cloud Storage: Your data is stored securely using Supabase cloud infrastructure
• Local Storage: Some data is cached locally on your device for offline access using encrypted Hive database
• Encryption: Data is encrypted in transit (HTTPS/SSL) and at rest on our servers
• Security Measures: We implement industry-standard security measures including:
  • Secure authentication with Sign in with Apple and Google Sign-In support
  • Password hashing and encryption
  • Regular security audits
  • Access controls and monitoring

5.2 Data Retention

• Active Accounts: Personal data is retained while your account is active
• Account Deletion: You can delete your account and associated data at any time through app settings or by contacting us
• Data Export: Before deletion, you can export your complete tracking history
• Legal Retention: Some data may be retained for legal compliance purposes even after account deletion (e.g., transaction records, support tickets)
• Backup Data: Deleted data may persist in backup systems for up to 90 days before permanent removal

6. Third-Party Services

Our app integrates with the following third-party services:

6.1 Supabase (Data Storage & Authentication)

• Purpose: Secure cloud database for your app data and user authentication
• Data Shared: Account information, baby profiles, health data, tracking records, AI conversations, journal entries
• Privacy Policy: https://supabase.com/privacy

6.2 Sign in with Apple

• Purpose: Secure authentication using your Apple ID
• Data Shared: Name (optional), email (or private relay email)
• Privacy Policy: https://www.apple.com/legal/privacy/

6.3 Google Sign-In

• Purpose: Secure authentication using your Google account
• Data Shared: Name, email, profile picture (optional)
• Privacy Policy: https://policies.google.com/privacy

6.4 RevenueCat (Subscription Management)

• Purpose: Manage in-app purchases and subscriptions (if applicable)
• Data Shared: User ID, purchase transactions, subscription status
• Privacy Policy: https://www.revenuecat.com/privacy

7. Your Rights and Choices

7.1 Access and Control

• Account Settings: Update your profile, email, password, and preferences at any time
• Baby Profiles: Add, edit, or remove baby profiles and their associated data
• Data Export: Request and download a complete copy of your personal data in CSV or JSON format
• Data Deletion: Delete specific tracking entries, entire categories, or your complete account
• Notification Control: Manage push notification preferences for feeding reminders, sleep alerts, and milestones
• Appearance Settings: Control dark mode, language, and display preferences (not tracked or shared)

7.2 Communication Preferences

• In-App Notifications: Configure which reminders and alerts you receive
• Push Notifications: Can be disabled entirely in device settings
• Email Communications: Opt-out of promotional emails (service emails still required)

7.3 Data Portability

• Export Your Data: Download your complete tracking history including feeding logs, sleep records, diaper changes, milestones, and journal entries
• Format Options: Export in CSV format for compatibility with other apps or spreadsheets

8. Children's Privacy

My Avocado collects and stores health and development information about children for tracking and monitoring purposes. This is a core feature of the app and includes:

• Baby names, nicknames, birth dates, and photos
• Growth measurements and health data
• Feeding, sleep, and diaper tracking records
• Developmental milestones and achievements

However, My Avocado is designed to be used by parents, guardians, and caregivers (adults) to track children's information. The app is not intended to be used directly by children under 13 years of age.

We do not knowingly collect personal information directly from children. If we learn that we have inadvertently collected personal information from a child without proper parental consent, we will delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where Supabase operates data centers. These countries may have data protection laws that are different from the laws of your country.

We ensure appropriate safeguards are in place to protect your information, including:

• Standard contractual clauses approved by the European Commission
• Compliance with GDPR for EU residents
• Encryption of data in transit and at rest
• Regular security assessments of our service providers

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app with an updated "Last updated" date
• Sending you an in-app notification or email (for significant changes)
• Displaying a prominent notice in the app upon your next login

Your continued use of the app after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Regional Privacy Rights

11.1 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the personal data we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (with certain exceptions)
• Right to Opt-Out: We do not sell personal information, but you can opt-out if we ever do
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information

To exercise these rights, please contact us at support@myavocadoapp.com. We will respond to verified requests within 45 days.

11.2 European Union Residents (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request access to your personal data and receive a copy
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to our processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Legal Basis for Processing: We process your personal data based on:

• Consent: For AI Midwife conversations and optional features
• Contract Performance: To provide the app services you've requested
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligations: To comply with applicable laws

11.3 Other Regions

Residents of other regions may have additional privacy rights under local laws. Please contact us to learn more about your specific rights and how to exercise them.