Last Updated: August 8, 2026

This Privacy Policy describes how Masadir Media Co WLL (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your information when you use Masadir Child Health Tracker (“the App”).

1. Information We Collect

1.1 Account Information

• Email address (required for account creation)
• Password (encrypted, never stored in plain text)
• Display name (optional)

1.2 Health Data

• Baby profiles (name, birthdate, gender)
• Health entries (feeds, sleep, diapers, medications, journal entries)
• Photos (if uploaded)
• Entry metadata (timestamp, created by user)
• Growth measurements and milestones

1.3 Usage Data

• App usage statistics (anonymized)
• Error reports and crash logs
• Device information (OS version, device type)
• App performance metrics

1.4 Household Data

• Household membership information
• User roles and permissions
• Invite codes (temporary)

2. How We Use Your Information

2.1 Primary Use

• Provide child health tracking services
• Sync data across devices within your household
• Enable collaboration between household members
• Generate health reports and statistics

2.2 Service Improvement

• Analyze app usage patterns to improve features
• Fix bugs and technical issues
• Provide customer support when requested
• Develop new features based on user needs

2.3 Communication

• Send important service notifications
• Respond to support requests
• Notify you of significant changes to the App or these policies

3. Data Storage and Security

3.1 Storage

• Primary data stored in Google Cloud Firestore (Firebase), hosted in the United States
• Data encrypted in transit (TLS) between the App and our servers
• Data stored on Firebase servers is encrypted at rest by Google Cloud
• Data held locally on your device is stored in the App’s private storage area, protected by your device’s operating-system security and full-device encryption (enabled by default on modern iOS and Android devices when a passcode is set)

3.2 Security Measures

• Industry-standard encryption for all data transmission
• Secure authentication through Firebase Authentication
• Role-based access control within households
• Access controls restricting your cloud data to your authenticated account

3.3 Data Minimization

• We only collect data necessary to provide our services
• Temporary data (like invite codes) automatically expires
• Analytics data is pseudonymized — it is not linked to a child’s identity, but it is not fully anonymous

4. Data Sharing

4.1 Within Household

• Data is shared with all household members according to their role
• Admins have full access to all household data
• Editors can view all data and add/edit their own entries
• Viewers have read-only access

4.2 Third Parties

We do NOT sell your data. We may share data with:

• Firebase/Google Cloud: Infrastructure provider, hosted in the United States (Cloud Data Processing Addendum accepted, incorporating Standard Contractual Clauses)
• Google Analytics for Firebase: Pseudonymized usage data only — no child names, birthdates, or health records
• Anthropic (Claude AI): Used only when you choose to use an AI feature. See section 4.3 below
• Law enforcement: Only if legally required by court order
• Business transfers: In case of merger or acquisition (with user notification)

4.3 AI-Assisted Features

The App offers optional AI features that send data to Anthropic’s Claude API for processing. These features are opt-in — nothing is sent unless you choose to use them:

• Lab result extraction: the lab report image or PDF you select
• Health summaries: a summary of the child’s recorded health information
• Growth analysis: the child’s recorded growth measurements

In each case:

• The data is processed in the United States
• Anthropic does not use the data to train its models
• Anthropic does not retain the content of the request after returning the result, except where a request is flagged by its automated safety systems, in which case it may be retained for up to two years
• If you prefer not to use these features, every part of the App remains fully usable without them

4.4 What We Never Share

• Individual health records with advertisers
• Personal information for marketing purposes
• Data with unauthorized third parties

5. Data Retention

5.1 Active Households

• Data retained as long as the household exists
• Admin controls all household data
• Regular sync ensures data consistency

5.2 Account Deletion

• Personal account can be deleted anytime through Settings
• Health records you contributed remain with the household
• Attribution can be anonymized if requested

5.3 Household Deletion

• Admin can delete the entire household
• All data permanently deleted within 30 days
• Deletion cannot be reversed
• Users notified before household deletion

5.4 Inactive Accounts

• Accounts inactive for 24 months may be flagged
• We will attempt to contact you before any deletion
• Health data importance means we err on the side of retention

6. Your Rights

6.1 Access

• View all data associated with your account
• Export household data in CSV format
• Request a copy of all your personal data

6.2 Correction

• Edit your own entries (if Editor or Admin)
• Request corrections from your household Admin
• Update your profile information anytime

6.3 Deletion

• Delete your user account
• Request removal from a household
• Health data stays with household (you contributed to child’s record)
• Request anonymization of your attribution

6.4 Portability

• Export data in standard CSV format
• Import data to new household if needed
• Data formatted for easy use in other applications

6.5 Objection

• Object to certain data processing activities
• Opt out of non-essential analytics
• Withdraw consent where applicable

7. Children’s Privacy

This App is intended for use by adults (18+) — parents and caregivers — who record and manage health information for the children in their care. It is not directed to children, and children are not permitted to create accounts or use the App directly.

• You must be at least 18 years old to create an account
• We do NOT knowingly collect information directly from children
• All data entry is performed by adult caregivers
• Children’s health data is controlled by their parents/guardians
• Parents have full access to view, edit, and delete their children’s data
• We do not use children’s data for advertising or marketing purposes

8. International Users

8.1 Data Location

Child Health Tracker is operated from Bahrain, and our cloud infrastructure is hosted in the United States. Your data is transferred to and processed in the United States by the service providers listed in section 4.2, regardless of where you are located.

For users in the European Economic Area, the United Kingdom, and other jurisdictions that restrict international data transfers, these transfers are made on the basis of the Standard Contractual Clauses incorporated into our agreements with Google Cloud and Anthropic.

8.2 Bahrain Compliance

• Primary jurisdiction is the Kingdom of Bahrain
• We comply with applicable Bahraini data protection regulations

8.3 GDPR (European Users)

For users in the European Economic Area:

• Legal basis: Contract performance and legitimate interests
• You have additional rights under GDPR including data portability
• You may lodge complaints with your local data protection authority
• We respond to data subject requests within 30 days

9. Governing Law and Jurisdiction

9.1 Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Bahrain.

9.2 Jurisdiction

• Privacy disputes subject to exclusive jurisdiction of Bahraini courts
• Users outside Bahrain consent to Bahraini jurisdiction
• We cooperate with relevant regulatory authorities

9.3 Company Information

Data Controller:
Masadir Media Co WLL
Unit 11, Building 76
Avenue 23, Sar 527
Kingdom of Bahrain

Contact:

• Website: https://childhealthtracker.me
• Privacy Email: hello@masadir.me
• Support Email: hello@masadir.me
• Phone: +973-33442255

10. Changes to Privacy Policy

• We may update this policy to reflect changes in our practices or legal requirements
• Material changes will be notified via email and/or in-app notification
• Continued use after changes constitutes acceptance
• Previous versions available upon request

11. Contact Us

For privacy-related questions or to exercise your rights:

Privacy Officer
Email: hello@masadir.me

General Support
Email: hello@masadir.me

Data Requests
Email: hello@masadir.me

We aim to respond to all privacy inquiries within 30 days.

12. Legal Basis for Processing (GDPR)

For users where GDPR applies, we process data under these legal bases:

By using Masadir Child Health Tracker, you acknowledge that you have read and understood this Privacy Policy.

Masadir Media Co WLL — Registered in the Kingdom of Bahrain