Privacy Policy

Introduction

This Privacy Policy governs your use of the My Baby is Hero mobile application (the "App"). It outlines the types of data we collect, how we store it, how it may be used, with whom it may be shared, and your choices regarding these uses and disclosures. Please read this Privacy Policy carefully before using the App.

"GDPR" means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

"EEA" includes all current Member States of the European Union and the European Economic Area.

"CCPA" means the California Consumer Privacy Act of 2018.

"Process", in respect of personal data, includes to collect, store, use, and disclose to others.

Please check our Terms of Use (the "Terms") for the meaning of defined words (those with capital letters) not explicitly defined in this Privacy Policy.

1. Personal Data Controller

IvorySoft LLC, Yulii Zdanovskoi st. 36V, apt. 219, Kyiv, 03022, Ukraine will be the controller of your personal data.

2. What Categories of Personal Data Do We Collect?

We collect data you make available to us voluntarily (for example, email address, child's name and photo) and data we collect automatically when you use the App (for example, your IP address, device type, and usage events).

2.1. Data You Give Us

You provide us data about yourself when you register for and/or use the App. The data you give us includes:

• Account Information: Email address and authentication data when you create an account via email, Apple Sign-In, or Google Sign-In
• Child's Profile: Your child's name, gender, age, hero type, and story preferences that you provide to personalize stories
• Photos: Photos you optionally upload of your child to appear in AI-generated illustrations

2.2. Data We Collect Automatically

• App Install Attribution: We collect data about how you discovered and installed the App, including the marketing channel or campaign through which you found us — such as the App Store (organic or paid search), Meta (Facebook/Instagram) Ads, Apple Search Ads, TikTok Ads, or other digital marketing campaigns — as well as campaign identifiers and referral source data
• Device & Network Information: Device model, operating system version, unique device identifiers (including IDFA/IDFV), language settings, time zone, IP address, approximate location (country/region level, derived from IP address), and network type
• Usage Data: How you interact with the App — features used, screens viewed, session duration, tap events, and navigation patterns
• Analytics Data: Event data collected through Amplitude and Google Analytics (via Firebase), including user actions, conversion events, and engagement metrics
• Crash & Performance Data: Crash logs, performance diagnostics, and error reports collected through Firebase Crashlytics
• Advertising Data: Ad interaction data, campaign attribution data, conversion events, and advertising identifiers collected through Meta (Facebook) SDK and Apple Ads attribution frameworks
• Transaction Data: When you make payments through the App, all payment processing is handled exclusively by Apple Inc. via the App Store. We do not collect or store your credit card or financial account data. We may receive transaction metadata such as the date, type, and amount of the purchase

3. For What Purposes Do We Process Your Personal Data?

3.1. To provide services to you. This includes enabling you to use the App seamlessly and preventing or addressing App errors or technical issues. For example, we use your data to authenticate you, authorize access to the App, generate personalized stories and illustrations, and manage your account, subscription, and preferences.

3.2. To research and analyze your use of the App. This helps us better understand our business, maintain, improve, and develop the App and new features. We analyze usage data to evaluate the App's performance, conduct troubleshooting, and decide how to improve features based on how users interact with them.

3.3. To customize the App for you. We may use your data to determine your eligibility for promotions or special offers, and to select appropriate subscription options available to you.

3.4. To process your payments. We use Apple Inc. as our third-party payment processor for all in-app purchases and subscriptions. As a result of this processing, you are able to make payments for premium features of the App.

3.5. To enforce the Terms and to prevent, detect, investigate, and resolve disputes, fraud, or other malicious activities. We use personal data to enforce our agreements, detect and prevent fraud, and take legally required actions. As a result, we may share your information with law enforcement agencies where required.

3.6. To communicate with you regarding your use of the App. We may send you messages about your account, stories, subscription status, or App updates via email or push notifications.

3.7. To send you marketing communications. We may add your email address to our marketing list to send you information about our App, features, offers, and promotions. You can opt out at any time by contacting us at artem@ivorysoft.co or using the unsubscribe link in any marketing email.

3.8. To provide customer service and support. We process your data to respond to your support inquiries and resolve issues related to your account, subscription, or the App.

3.9. To personalize and measure our advertising. We and our partners use your personal data to measure the effectiveness of our advertising campaigns (via Meta Ads, Apple Search Ads, TikTok Ads, and other channels), attribute app installs to campaigns, create Custom Audiences and Lookalike Audiences, and deliver relevant ads to potential new users.

3.10. To comply with legal obligations. We may process, use, or share your data when the law requires it, including when requested by a law enforcement agency through lawful means.

4. Legal Basis for Data Processing (EEA Only)

This section applies only to users based in the EEA. We process your personal data under the following legal grounds:

4.1. Your consent — for advertising tracking via the App Tracking Transparency (ATT) prompt and for marketing communications.

4.2. Performance of our contract with you — under this legal basis we:

• Provide the App and its core features
• Generate personalized stories and illustrations
• Manage your account and subscription
• Process your payments
• Provide customer support
• Communicate with you regarding your use of the App

4.3. Our legitimate interests (unless overridden by your rights and freedoms) — we rely on legitimate interests:

• To analyze and improve the App — our interest in understanding how users interact with the App so we can make it better
• To send you communications about the App — our interest in keeping you informed about updates and features relevant to your use
• To enforce the Terms and prevent fraud — our interest in protecting the App, our users, and our rights
• To personalize and measure advertising — our interest in promoting the App in a measured and appropriately targeted way (where consent is not the applicable ground)

4.4. Compliance with legal obligations — where we are required by law to process or retain certain data.

5. Advertising & Tracking Technologies

We use the following advertising and tracking technologies:

App Tracking Transparency (ATT): On iOS 14.5 and later, we request your permission through Apple's App Tracking Transparency framework before tracking your activity across other companies' apps and websites for advertising purposes. If you allow tracking, we may share your IDFA (Identifier for Advertisers) with our advertising partners. If you deny tracking, we will not share your IDFA for cross-app advertising, though some contextual advertising may still occur. You can change this at any time in Settings > Privacy & Security > Tracking.

Meta (Facebook) SDK: We integrate the Meta SDK, which collects data about your app activity including installs, opens, purchases, and custom events. This data is shared with Meta Platforms, Inc. to power ad targeting, measurement, Custom Audiences, and Lookalike Audiences on Facebook and Instagram. Meta may combine this data with information from other apps and websites to build advertising profiles. Meta's data practices are governed by Meta's Privacy Policy.

Apple Search Ads Attribution: We use Apple's ad attribution framework to measure the effectiveness of campaigns run through Apple Search Ads. This may include data about your interaction with Apple Search Ads and your subsequent in-app activity.

TikTok Ads: We run advertising campaigns on TikTok to promote the App. Campaign performance (installs, conversions) is measured through Apple's SKAdNetwork attribution. We do not currently have the TikTok SDK integrated in the App.

Google Analytics for Firebase: We use Google Analytics (via the Firebase SDK) to collect and analyze usage data, user demographics, and App performance metrics. Google may use this data in accordance with Google's Privacy Policy.

Firebase Crashlytics: We use Firebase Crashlytics to collect crash reports, stack traces, and device state information to diagnose and fix App issues. Crash data may include device identifiers and App state at the time of the crash.

Amplitude: We use Amplitude to collect detailed analytics about how you interact with the App, including events, user properties, and session data. Amplitude's data practices are governed by Amplitude's Privacy Policy.

6. With Whom Do We Share Your Personal Data?

We share information with third parties that help us operate, provide, improve, and market the App. The types of third parties we share information with include:

6.1. Service providers

• Cloud infrastructure: Supabase, Inc. stores your account data, child profiles, stories, and media files on secure servers
• AI services: Google LLC (Gemini) processes your child's profile information and photos to generate stories and illustrations
• Analytics providers: Amplitude, Inc. and Google LLC (Firebase) receive usage and event data to help us understand App performance and user behavior
• Crash reporting: Google LLC (Firebase Crashlytics) receives crash logs and diagnostic data
• Advertising partners: Meta Platforms, Inc. (Facebook/Instagram) and Apple Inc. receive event data, device identifiers, and conversion data for ad targeting, measurement, and optimization
• Authentication: Google LLC and Apple Inc. process authentication data when you sign in
• Payment processing: Apple Inc. processes all subscription payments through the App Store

6.2. Law enforcement agencies and other public authorities

We may use and disclose personal data to enforce the Terms, to protect our rights, privacy, safety, or property, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public authorities, or in other cases provided for by law.

6.3. Third parties as part of a merger or acquisition

As we develop our business, we may buy or sell assets or business offerings. User data is generally one of the transferred assets in these types of transactions. We may also share data with any affiliated entity and may transfer it in the course of a corporate transaction such as a sale, merger, consolidation, or asset transfer, or in the unlikely event of bankruptcy.

7. Children's Privacy

We take children's privacy very seriously and are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar laws worldwide.

• Our App is intended for use by parents and guardians, not by children directly
• We do not knowingly collect personal information directly from children under 13 (or the applicable age in your jurisdiction)
• All child-related information (name, gender, birthday, photos) is provided and managed exclusively by parents or guardians
• Child profile data is used solely for story personalization and is NOT used for advertising targeting or shared with advertising partners for profiling purposes
• Parents have full control over their child's profile data and can modify or delete it at any time through the App
• If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly

8. Photo Usage & Storage

Photos you upload are handled with special care:

• Photos are used solely for generating personalized story illustrations through our AI service (Google Gemini)
• Photos are securely stored on encrypted cloud servers (Supabase Storage)
• Photos are NOT shared with advertising partners (Meta, Apple Ads) or analytics providers
• Photos are NOT used to build advertising profiles or for any marketing purpose
• You can delete your photos at any time through the App settings

9. AI-Generated Content

Our App uses Google Gemini artificial intelligence to generate stories and illustrations. The AI processes the information you provide (child's name, preferences, photos) to create personalized content. AI-generated content is unique to your account and is not used to train public AI models. Google's use of data sent to Gemini is governed by Google's Privacy Policy and AI terms of service.

10. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Data is stored on secure cloud servers (Supabase) with encryption in transit (TLS) and at rest
• We use secure authentication methods including Apple Sign-In and Google Sign-In with OAuth 2.0
• Access to user data is restricted to authorized personnel and services
• While we strive to protect your data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security

11. Data Retention

We will retain personal data for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

• Account and profile data: Retained for as long as your account is active
• Stories and generated content: Retained until you delete them or your account
• Analytics data: Retained according to each provider's retention policies (typically 12–26 months)
• Crash reports: Retained for up to 90 days by Firebase Crashlytics
• Advertising data: Retained by advertising partners according to their respective privacy policies

Please note that even if you delete your account, we may retain certain data to meet our legal and business obligations — including ensuring transactions can be appropriately processed, settled, refunded, or charged back, helping identify fraud, and complying with applicable laws and regulations.

You can request deletion of your account and all associated data at any time through the App settings or by contacting us at artem@ivorysoft.co.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers (Meta, Google, Amplitude, Supabase, Apple) maintain servers. These countries may have different data protection laws. By using the App, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place through standard contractual clauses and other legal mechanisms.

13. Privacy Rights

To be in control of your personal data, you have the following rights:

• Access / Review / Update / Correct: You may review, edit, or change the personal data you have previously provided to us by logging into the App or contacting us at artem@ivorysoft.co
• Erasure: You can request deletion of your personal data by contacting us at artem@ivorysoft.co. When you request deletion, we will use reasonable efforts to honor your request. In some cases we may be legally required to retain certain data; in such event we will fulfill your request after we have complied with our obligations
• Restriction: You can ask us to stop using all or some of your personal data by contacting us at artem@ivorysoft.co
• Portability: You may request your personal data in a structured, machine-readable format by contacting us at artem@ivorysoft.co
• Object: You may object to processing based on legitimate interests, including profiling for direct marketing
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Lodge a Complaint: You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work, or where the alleged infringement took place

You may submit requests through an authorized agent, in which case we will need to verify the agent's identity, your identity, and their authority to act on your behalf before we can process the request. We will respond within 30 days.

14. California Privacy Rights (CCPA/CPRA)

This section applies only to residents of California, United States.

If you are a California resident, you may request information that we have shared with third parties for electronic or online direct marketing purposes, if such sharing has occurred. Such information can be provided once a year free of charge, covering information shared during the past twelve (12) months. We will respond within forty-five (45) days, or inform you that we need additional time.

To make such a request, send a written request to artem@ivorysoft.co with "California privacy rights request" in the subject line. Include your full name, street address, city, state, and ZIP code, and attest that you are a California resident. We are only required to respond to one request per customer per year, and only to requests made through this address.

Under CCPA/CPRA you also have the right to:

• Right to Know: Request the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale/Sharing: We share certain data (such as device identifiers and usage data) with advertising partners like Meta for targeted advertising, which may constitute "selling" or "sharing" under CCPA. You may opt out by: (1) denying tracking via the ATT prompt, (2) contacting us at artem@ivorysoft.co, or (3) adjusting your device advertising settings
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

We reserve the right to request proof of identity as necessary, and to retain your request for at least two years for auditing purposes.

15. Your Advertising Choices

• App Tracking Transparency: When prompted, choose "Ask App Not to Track" to prevent IDFA sharing with advertisers
• Device Settings: Go to Settings > Privacy & Security > Tracking to manage per-app tracking permissions
• Limit Ad Tracking: Enable "Limit Ad Tracking" in Settings > Privacy & Security > Apple Advertising
• Meta Ad Preferences: Manage your preferences at facebook.com/adpreferences
• Google Ad Settings: Manage Google ad personalization at adssettings.google.com

Note: Opting out of personalized advertising does not mean you will stop seeing ads; ads may simply be less relevant to your interests.

16. Age Limitation

The App is intended for use by adults aged 18 and over. We do not knowingly process personal data from persons under 18 years of age. If you learn that anyone younger than 18 has provided us with personal data, please contact us at artem@ivorysoft.co and we will delete it promptly.

17. How Do We Handle "Do Not Track" Requests?

The App does not respond to "Do Not Track" browser signals, as it is a native iOS application and does not operate through a web browser. To control tracking, please use the App Tracking Transparency settings described in Section 15 above. To determine whether any of the third-party services we use honor "Do Not Track" requests, please read their respective privacy policies.

18. Changes to This Policy

We may modify this Privacy Policy at any time. If we decide to make material changes, you will be notified through the App or by other available means and will have an opportunity to review the revised policy. By continuing to use the App after those changes become effective, you agree to be bound by the revised Privacy Policy.

19. Contact Us

Please contact us with any questions regarding this Privacy Policy.

E-mail: artem@ivorysoft.co

Attention of: Customer Support, IvorySoft LLC.

All rights reserved.