Privacy Policy – Masadir Child Health Tracker

Last Updated: September 18, 2026

This Privacy Policy describes how Masadir Media Co WLL (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your information when you use Masadir Child Health Tracker (“the App”).

1. Information We Collect

1.1 Account Information

• Email address (required for account creation)
• Password (encrypted, never stored in plain text)
• Display name (optional)

1.2 Health Data

• Baby profiles (name, birthdate, gender)
• Health entries (feeds, sleep, diapers, medications, journal entries)
• Medical profile: allergies, conditions, current medications
• Vaccination records and lab results, including any report image or PDF you add
• Photos, videos and voice recordings you attach to a record
• Free-text notes you add to any entry
• Entry metadata (timestamp, created by user)
• Growth measurements and milestones

1.3 Usage Data

• Feature-usage events (which screens and actions are used, never the content you enter)
• Device and app information (operating-system version, device type, app version)
• Automatic error and stability signals reported by our analytics provider
• This data is linked to your account identifier. You can turn it off — see section 6.5

1.4 Household Data

• Household membership information
• User roles and permissions
• Invite codes (temporary)

2. How We Use Your Information

2.1 Primary Use

• Provide child health tracking services
• Sync data across devices within your household
• Enable collaboration between household members
• Generate health reports and statistics

2.2 Service Improvement

• Analyze app usage patterns to improve features
• Fix bugs and technical issues
• Provide customer support when requested
• Develop new features based on user needs

2.3 Communication

• Send important service notifications
• Respond to support requests
• Notify you of significant changes to the App or these policies

3. Data Storage and Security

3.1 Storage

• Primary data stored in Google Cloud Firestore (Firebase), hosted in the United States
• Data encrypted in transit (TLS) between the App and our servers
• Data stored on Firebase servers is encrypted at rest by Google Cloud
• Data held locally on your device is stored in the App’s private storage area, protected by your device’s operating-system security and full-device encryption (enabled by default on modern iOS and Android devices when a passcode is set)

3.2 Security Measures

• Industry-standard encryption for all data transmission
• Secure authentication through Firebase Authentication
• Role-based access control within households
• Access controls restricting your cloud data to your authenticated account

3.3 Data Minimization

• We only collect data necessary to provide our services
• Temporary data (like invite codes) automatically expires
• Analytics data never contains a child’s name, birth date, health records or anything you type. It is, however, linked to your account identifier, so it is not anonymous. You can turn it off — see section 6.5

4. Data Sharing

4.1 Within Household

• Data is shared with all household members according to their role
• Admins have full access to all household data
• Editors can view all data and add/edit their own entries
• Viewers have read-only access

4.2 Third Parties

We do NOT sell your data. We may share data with:

• Firebase/Google Cloud: Infrastructure provider, hosted in the United States (Cloud Data Processing Addendum accepted, incorporating Standard Contractual Clauses)
• Google Analytics for Firebase: Feature-usage and device data, linked to your account identifier. Never child names, birth dates, health records or free text. Can be switched off in the App — see section 6.5
• Anthropic (Claude AI): Used only when you choose to use an AI feature. See section 4.3 below
• Law enforcement: Only if legally required by court order
• Business transfers: In case of merger or acquisition (with user notification)

4.3 AI-Assisted Features

The App offers optional AI features that send data to Anthropic’s Claude API for processing. These features are opt-in — nothing is sent unless you choose to use them:

• Lab result extraction: the lab report image or PDF you select. We ask only for the laboratory name, test date and test results; we do not request, and do not store from the image, the patient name, date of birth or physician name. Note that any such details printed on the page are still part of the image that is sent, so you may wish to cover them before scanning.
• Health summaries: a summary of the child’s recorded health information
• Growth analysis: the child’s recorded growth measurements

In each case:

• The data is processed in the United States
• Anthropic does not use the data to train its models
• Anthropic does not retain the content of the request after returning the result, except where a request is flagged by its automated safety systems, in which case it may be retained for up to two years
• If you prefer not to use these features, every part of the App remains fully usable without them

4.4 What We Never Share

• Individual health records with advertisers
• Personal information for marketing purposes
• Data with unauthorized third parties

5. Data Retention

5.1 Active Households

• Data retained as long as the household exists
• Admin controls all household data
• Regular sync ensures data consistency

5.2 Account Deletion

• Personal account can be deleted anytime through Settings
• Health records you contributed remain with the household
• Attribution can be anonymized if requested

5.3 Household Deletion

• Admin can delete the entire household
• All data permanently deleted within 30 days
• Deletion cannot be reversed
• Users notified before household deletion

5.4 Inactive Accounts

• Accounts inactive for 24 months may be flagged
• We will attempt to contact you before any deletion
• Health data importance means we err on the side of retention

6. Your Rights

6.1 Access

• View all data associated with your account
• Export household data in CSV format
• Request a copy of all your personal data

6.2 Correction

• Edit your own entries (if Editor or Admin)
• Request corrections from your household Admin
• Update your profile information anytime

6.3 Deletion

• Delete your user account
• Request removal from a household
• Health data stays with household (you contributed to child’s record)
• Request anonymization of your attribution

6.4 Portability

• Export data in standard CSV format
• Import data to new household if needed
• Data formatted for easy use in other applications

6.5 Objection

• Object to certain data processing activities
• Opt out of non-essential analytics — turn off Share usage analytics under Settings → Privacy. Your health records are unaffected; they are still stored and synced so the App can work.
• Withdraw consent where applicable — AI features can be declined, and consent withdrawn, at any time

7. Children’s Privacy

This App is intended for use by adults (18+) — parents and caregivers — who record and manage health information for the children in their care. It is not directed to children, and children are not permitted to create accounts or use the App directly.

• You must be at least 18 years old to create an account
• We do NOT knowingly collect information directly from children
• All data entry is performed by adult caregivers
• Children’s health data is controlled by their parents/guardians
• Parents have full access to view, edit, and delete their children’s data
• We do not use children’s data for advertising or marketing purposes

8. International Users

8.1 Data Location

Child Health Tracker is operated from Bahrain, and our cloud infrastructure is hosted in the United States. Your data is transferred to and processed in the United States by the service providers listed in section 4.2, regardless of where you are located.

For users in the European Economic Area, the United Kingdom, and other jurisdictions that restrict international data transfers, these transfers are made on the basis of the Standard Contractual Clauses incorporated into our agreements with Google Cloud and Anthropic.

8.2 Bahrain Compliance

• Primary jurisdiction is the Kingdom of Bahrain
• We comply with applicable Bahraini data protection regulations

8.3 GDPR (European Users)

For users in the European Economic Area:

• Legal basis: Contract performance and legitimate interests
• You have additional rights under GDPR including data portability
• You may lodge complaints with your local data protection authority
• We respond to data subject requests within 30 days

9. Governing Law and Jurisdiction

9.1 Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Bahrain.

9.2 Jurisdiction

• Privacy disputes subject to exclusive jurisdiction of Bahraini courts
• Users outside Bahrain consent to Bahraini jurisdiction
• We cooperate with relevant regulatory authorities

9.3 Company Information

Data Controller:

Masadir Media Co WLL

Unit 11, Building 76

Avenue 23, Sar 527

Kingdom of Bahrain

Contact:

• Website: https://childhealthtracker.me
• Privacy Email: hello@masadir.me
• Support Email: hello@masadir.me
• Phone: +973-33442255

10. Changes to Privacy Policy

• We may update this policy to reflect changes in our practices or legal requirements
• Material changes will be notified via email and/or in-app notification
• Continued use after changes constitutes acceptance
• Previous versions available upon request

11. Contact Us

For privacy-related questions or to exercise your rights:

Privacy Officer

Email: hello@masadir.me

General Support

Email: hello@masadir.me

Data Requests

Email: hello@masadir.me

We aim to respond to all privacy inquiries within 30 days.

12. Legal Basis for Processing (GDPR)

For users where GDPR applies, we process data under these legal bases:

By using Masadir Child Health Tracker, you acknowledge that you have read and understood this Privacy Policy.

*Masadir Media Co WLL – Registered in the Kingdom of Bahrain*