GrowUpKids Privacy Policy

GrowUpKids ("we," "our," or "us") is a child development and wellness tracking application available on the Google Play Store. Our mission is to help families track and encourage the healthy growth of their children through fitness tracking, nutrition guidance, and engaging educational content.

This Privacy Policy governs the collection and use of personal information through our mobile application GrowUpKids (Application ID: com.growupkids.app).

A. Account Information (provided by you)

B. Child / Profile Information

C. Usage & Technical Data (collected automatically)

• Authentication tokens stored locally on your device via SharedPreferences
• Device type and operating system version
• App interaction data (screens visited, features used) for improving user experience
• Error and crash logs for debugging and stability purposes

We use the information we collect solely for the following purposes:

• Providing the Service: Creating and maintaining your account, displaying personalized dashboards, child profiles, health tips, meal plans, and fitness goals.
• Authentication: Verifying your identity at login and keeping your session secure using tokens stored locally on your device.
• Personalization: Delivering age-appropriate content, activity recommendations, and growth milestones tailored to each child's profile.
• Progress Tracking: Recording and displaying workout history, daily metrics, achievements, and leaderboard data so you can monitor growth over time.
• AI-Powered Features: Using the Google Gemini AI API to generate personalized health and fitness recommendations based on the profile data you provide. Data sent to Gemini is subject to Google's Privacy Policy.
• App Improvement: Analysing anonymized usage patterns to fix bugs and improve features.
• Account Recovery: Sending password reset links to your registered email address when requested.

On-Device Storage

Authentication tokens, user IDs, and onboarding preferences are stored locally on your device using Android's SharedPreferences. This data never leaves your device except to authenticate API requests.

Server-Side Storage

Account information and child profiles are transmitted over HTTPS to our secure servers. We use industry-standard encryption (TLS 1.2+) for all data in transit. Passwords are hashed before storage and are never stored in plain text.

Security Measures

• All API communications use HTTPS with TLS encryption
• Bearer token authentication for all authenticated API requests
• Session tokens are invalidated upon logout
• Regular security reviews of our backend infrastructure

GrowUpKids is designed to be used by parents and guardians to track the development of their children. The app is not intended to be used directly by children under the age of 13 without verified parental supervision.

Parental Consent

When you create a child profile, you as the parent or legal guardian are providing information about your child. By entering a child's information into the app, you confirm that you have the legal authority to do so and consent to this Privacy Policy on behalf of your child.

Data Minimisation

We collect only the minimum data necessary to provide the child-tracking features. Child information (age, height, weight, activity data) is kept strictly within your account and is never shared with other users or third parties for advertising purposes.

GrowUpKids integrates the following third-party services. Each has their own privacy policy and data practices:

We do not use third-party advertising networks, analytics SDKs (e.g. Firebase Analytics, Crashlytics), or social login providers at this time.

We do not sell, rent, or trade your personal information or your child's information to any third party.

We may only share data in the following limited circumstances:

• With your consent: If you explicitly agree to share data for a specific purpose.
• Legal compliance: If required by law, court order, or governmental authority.
• Service providers: Trusted vendors who help operate our infrastructure (e.g. hosting), bound by confidentiality agreements, and only given access to data necessary for the task.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email or in-app notice before your data is subject to a different privacy policy.

You have the following rights regarding your personal data:

• ✓
  Access — Request a copy of all personal data we hold about you.
• ✓
  Correction — Update inaccurate or incomplete information via the Profile screen in the app.
• ✓
  Deletion — Request permanent deletion of your account and all associated data.
• ✓
  Portability — Request an export of your data in a machine-readable format.
• ✓
  Withdraw Consent — Stop using the app and request data deletion at any time.
• ✓
  Complaint — Lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact us at the email address listed in Section 11.

How Long We Keep Data

We retain your personal data for as long as your account is active, or as long as necessary to provide you with the service. We may retain certain anonymized, aggregated data for analytics purposes after account deletion.

How to Delete Your Account

You can request full deletion of your account and all associated data (including child profiles, activity logs, and achievements) by:

• Emailing us at privacy@growupkids.app with the subject line "Account Deletion Request"
• Including your registered email address or username in the request

We will process your deletion request within 30 days. You will receive a confirmation email once your data has been permanently removed from our systems.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the Effective Date at the top of this page
• Display an in-app notification the next time you open GrowUpKids
• Send a notification email to your registered email address (for significant changes)

Your continued use of the app after the updated policy becomes effective constitutes your acceptance of the changes. We encourage you to review this policy periodically.