Privacy Policy

1Who we are

The controller of the data processed by the momikid app and this website is [company legal name], registered under tax ID (CNPJ) [CNPJ], headquartered at [full address] (“momikid”, “we”).

Our Data Protection Officer (DPO) is [DPO name], contact: [privacy e-mail].

2What data we process

We process only what the app needs to work:

• Account: name, e-mail, password (stored in protected form, never in plain text) and a profile photo, if you upload one. If you sign in with Google, Apple or Facebook, we receive what the provider authorizes, usually name and e-mail.
• Family and caregivers: names, roles (administrator or member), invitations and which children each person can see.
• Children: name, date of birth, photo (optional), allergies and dietary restrictions, such as cow’s milk protein allergy, and city of birth (optional, used only to calculate sun sign and ascendant).
• Health and routine (sensitive data): feedings, sleep, diapers, medicines and doses, vaccines, symptoms and temperature, weight, height and head circumference, emergency card and the reports you generate.
• Schedule, chores and milestones: appointments, chores and stars, developmental milestones and the photos you attach.
• Technical data: device and app identifiers, language, access and error logs and, when you turn on alerts, the device notification token.
• Device calendar: only if you allow it. We use it to send the family schedule to your calendar and to import the events you choose.
• We do not access your location.

3What we use the data for

• To provide the service: log the routine, sync between caregivers, remind about doses, vaccines and appointments, and generate reports for the pediatrician.
• To keep accounts and families secure, prevent fraud and abuse, and provide support.
• To comply with legal and regulatory obligations.
• We do not use health data for advertising, commercial profiling or sale to third parties.

4Legal bases

We process children’s health data based on the specific, prominent consent of the parent or legal guardian who registers the child. You can withdraw consent at any time, which may limit or end your use of the app.

For other data we rely on performance of the contract of use (account and features), compliance with legal obligations and legitimate interests (security and fraud prevention).

[LEGAL REVIEW: confirm the legal basis for each purpose]

5Children and teenagers

momikid is made for adults: parents, legal guardians and people who share care. Only an adult may create an account and register a child, and by doing so declares to be the legal guardian or to have the guardian’s authorization.

Children’s data is processed in their best interest. The chores and stars screen may be used by a child together with an adult, but children do not create their own accounts. If we learn that a child created an account alone, or that someone registered a child without being their guardian, we may delete the data.

6Who we share it with

• Caregivers in your family: only the people you invite, according to the role and the children made available by the administrator.
• Other families: only when you choose to send an activity. The other family receives a copy of that activity.
• Professionals and third parties you choose: the PDF report and the emergency card are generated and sent by you.
• Calendars: only if you turn on sync with the device calendar.
• Providers that help us run the service (processors): hosting of the server and database ([hosting provider and country]); Cloudflare (network and domain protection); Google (alerts through Firebase Cloud Messaging and Google sign-in); Apple (Sign in with Apple and alerts on iPhone); Meta (Facebook sign-in); e-mail provider for account confirmation and password recovery ([e-mail provider]); Expo (app builds and, if adopted, alert delivery); Open-Meteo (city search: receives only the text typed and the language, never the child’s name or date of birth).
• Public authorities, when required by law.
• We do not sell personal data.

7International transfers

Some providers may process data outside Brazil. In those cases we use the mechanisms provided in Article 33 of the Brazilian data protection law (LGPD). [transfer mechanism and countries involved]

8How long we keep it

We keep the data while your account exists. If you delete a child, leave the family or delete your account, we delete the corresponding data within [period]. Backups are overwritten within [backup period]. We may keep the minimum required by law for the period it sets.

9Security

We use encrypted connections (HTTPS), separate data by family so each family can access only its own, and make daily backups. No system is completely secure. In the event of an incident that may cause relevant risk or harm, we will notify the Brazilian data protection authority (ANPD) and affected individuals, as required by Article 48 of the LGPD.

10Your rights

Under Article 18 of the LGPD, you may request:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• data portability;
• information about who we share data with;
• deletion of data processed with consent, and withdrawal of consent;
• review of decisions made solely through automated processing, if any.

To exercise your rights, use the options in the app or write to [privacy e-mail]. We will reply within the legal deadlines. You may also complain to the Brazilian data protection authority (ANPD).

11If you are outside Brazil

If you use momikid in another country, local law may give you additional rights, such as access, rectification, erasure, restriction, objection, portability and the right to complain to your country’s data protection authority. Write to [privacy e-mail] and we will respond as required by the applicable law. [LEGAL REVIEW: requirements for launch countries, such as local representative and legal bases]

12This website

This presentation website does not use advertising cookies or tracking tools. It stores only your language choice in your own browser. Fonts are served by this same website.

13Changes to this policy

We may update this policy. When a change is relevant, we will let you know in the app or by e-mail and, if needed, ask for new consent. The effective date at the top shows the current version.

14Contact

Privacy questions: [privacy e-mail]. DPO: [DPO name].