# Privacy Policy – Masadir Child Health Tracker

**Last Updated:** December 13, 2025

This Privacy Policy describes how Masadir Media Co WLL (“Company,” “we,” “us,” or “our”) collects, uses, stores, and protects your information when you use Masadir Child Health Tracker (“the App”).

## 1. Information We Collect

### 1.1 Account Information

– Email address (required for account creation)

– Password (encrypted, never stored in plain text)

– Display name (optional)

### 1.2 Health Data

– Baby profiles (name, birthdate, gender)

– Health entries (feeds, sleep, diapers, medications, journal entries)

– Photos (if uploaded)

– Entry metadata (timestamp, created by user)

– Growth measurements and milestones

### 1.3 Usage Data

– App usage statistics (anonymized)

– Error reports and crash logs

– Device information (OS version, device type)

– App performance metrics

### 1.4 Household Data

– Household membership information

– User roles and permissions

– Invite codes (temporary)

## 2. How We Use Your Information

### 2.1 Primary Use

– Provide child health tracking services

– Sync data across devices within your household

– Enable collaboration between household members

– Generate health reports and statistics

### 2.2 Service Improvement

– Analyze app usage patterns to improve features

– Fix bugs and technical issues

– Provide customer support when requested

– Develop new features based on user needs

### 2.3 Communication

– Send important service notifications

– Respond to support requests

– Notify you of significant changes to the App or these policies

## 3. Data Storage and Security

### 3.1 Storage

– Primary data stored in Google Cloud Firestore (Firebase)

– All data encrypted in transit (TLS 1.3) and at rest (AES-256)

– Regular automated backups maintained

– Data stored on servers compliant with international security standards

### 3.2 Security Measures

– Industry-standard encryption for all data transmission

– Secure authentication through Firebase Authentication

– Role-based access control within households

– Regular security audits and updates

– Two-factor authentication available

### 3.3 Data Minimization

– We only collect data necessary to provide our services

– Temporary data (like invite codes) automatically expires

– Analytics data is anonymized

## 4. Data Sharing

### 4.1 Within Household

– Data is shared with all household members according to their role

– Admins have full access to all household data

– Editors can view all data and add/edit their own entries

– Viewers have read-only access

### 4.2 Third Parties

**We do NOT sell your data.** We may share data with:

– **Firebase/Google Cloud:** Infrastructure provider (data processing agreement in place)

– **Analytics services:** Anonymized usage data only

– **Law enforcement:** Only if legally required by court order

– **Business transfers:** In case of merger or acquisition (with user notification)

### 4.3 What We Never Share

– Individual health records with advertisers

– Personal information for marketing purposes

– Data with unauthorized third parties

## 5. Data Retention

### 5.1 Active Households

– Data retained as long as the household exists

– Admin controls all household data

– Regular sync ensures data consistency

### 5.2 Account Deletion

– Personal account can be deleted anytime through Settings

– Health records you contributed remain with the household

– Attribution can be anonymized if requested

### 5.3 Household Deletion

– Admin can delete the entire household

– All data permanently deleted within 30 days

– Deletion cannot be reversed

– Users notified before household deletion

### 5.4 Inactive Accounts

– Accounts inactive for 24 months may be flagged

– We will attempt to contact you before any deletion

– Health data importance means we err on the side of retention

## 6. Your Rights

### 6.1 Access

– View all data associated with your account

– Export household data in CSV format

– Request a copy of all your personal data

### 6.2 Correction

– Edit your own entries (if Editor or Admin)

– Request corrections from your household Admin

– Update your profile information anytime

### 6.3 Deletion

– Delete your user account

– Request removal from a household

– Health data stays with household (you contributed to child’s record)

– Request anonymization of your attribution

### 6.4 Portability

– Export data in standard CSV format

– Import data to new household if needed

– Data formatted for easy use in other applications

### 6.5 Objection

– Object to certain data processing activities

– Opt out of non-essential analytics

– Withdraw consent where applicable

## 7. Children’s Privacy

This App is designed for adults (parents and caregivers) to track their children’s health.

– We do NOT knowingly collect information directly from children under 13

– All data entry is performed by adult caregivers

– Children’s health data is controlled by their parents/guardians

– Parents have full access to view, edit, and delete their children’s data

– Compliant with COPPA (Children’s Online Privacy Protection Act) principles

## 8. International Users

### 8.1 Data Location

– Data stored on Google Cloud servers (may be outside your country)

– By using the App, you consent to international data transfer

– We ensure appropriate safeguards for cross-border transfers

### 8.2 Bahrain Compliance

– Primary jurisdiction is the Kingdom of Bahrain

– We comply with applicable Bahraini data protection regulations

– International users agree to Bahraini law governing this policy

### 8.3 GDPR (European Users)

For users in the European Economic Area:

– Legal basis: Contract performance and legitimate interests

– You have additional rights under GDPR including data portability

– You may lodge complaints with your local data protection authority

– We respond to data subject requests within 30 days

## 9. Governing Law and Jurisdiction

### 9.1 Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Bahrain.

### 9.2 Jurisdiction

– Privacy disputes subject to exclusive jurisdiction of Bahraini courts

– Users outside Bahrain consent to Bahraini jurisdiction

– We cooperate with relevant regulatory authorities

### 9.3 Company Information

**Data Controller:**

Masadir Media Co WLL

Unit 11, Building 76

Avenue 23, Sar 527

Kingdom of Bahrain

**Contact:**

– Website: https://childhealthtracker.me

– Privacy Email: privacy@childhealthtracker.me

– Support Email: support@childhealthtracker.me

– Phone: +973-33442255

## 10. Changes to Privacy Policy

– We may update this policy to reflect changes in our practices or legal requirements

– Material changes will be notified via email and/or in-app notification

– Continued use after changes constitutes acceptance

– Previous versions available upon request

## 11. Contact Us

For privacy-related questions or to exercise your rights:

**Privacy Officer**

Email: privacy@childhealthtracker.me

**General Support**

Email: support@childhealthtracker.me

**Data Requests**

Email: data@childhealthtracker.me

We aim to respond to all privacy inquiries within 30 days.

—

## 12. Legal Basis for Processing (GDPR)

For users where GDPR applies, we process data under these legal bases:

| Purpose | Legal Basis |

|———|————-|

| Provide App services | Contract performance |

| Household collaboration | Contract performance |

| App improvements | Legitimate interests |

| Security measures | Legitimate interests |

| Legal compliance | Legal obligation |

| Marketing (if opted in) | Consent |

—

By using Masadir Child Health Tracker, you acknowledge that you have read and understood this Privacy Policy.

*Masadir Media Co WLL – Registered in the Kingdom of Bahrain*