← Ivaluna

Ivaluna Privacy Policy

Effective date: October 14, 2026 Last updated: October 14, 2026

This Privacy Policy explains how [COMPANY NAME] ("Ivaluna", "we", "us", or "our") handles information in the Ivaluna baby tracking app and related services. Ivaluna helps caregivers record sleep, feeding, diapers, growth, photos, notes, and routines. It is not a medical record service or a substitute for a health-care provider.

The person who creates an account is responsible for using Ivaluna lawfully and for making sure that every caregiver invited to a child's record is authorized to see it. Please do not create an account for a child or ask a child to submit information directly.

1. Information we collect

Account and identity information

We collect the name, email address, password-derived authentication data, and account/session identifiers you provide when you register, sign in, reset a password, or use an optional Apple or Google sign-in provider. Passwords are stored as a one-way scrypt-derived hash and salt; Ivaluna does not store your plain-text password. Optional provider sign-in is verified against the provider's identity service, and we store the provider subject needed to link the account.

Child, health, and activity information

You may choose to store a child's name, birth or due date, sex, prematurity information, developmental stage, and color. You may also store sleep and nap times, nursing sides and duration, bottle and pumping amounts, solids and allergens, diapers and potty entries, medicines, temperatures, growth measurements, tummy time, activities, milestones, reminders, surveys, caregiver preferences, and free-form notes. This can be health or health-related information about a child and is treated as sensitive data.

Photos and user content

You may upload JPEG, PNG, or WebP photos for a family journal or a milestone. The server validates images and re-encodes them as metadata-free JPEG files, including a thumbnail. Captions, notes, messages, support requests, and sleep plan conversations are user content. A photo is not automatically turned into a log: the app shows a proposed entry and requires your confirmation.

Optional assistant and voice/photo logging

Lulu has an original built-in answer mode. If the deployment enables ANTHROPIC_API_KEY, the optional assistant can send a limited context to Anthropic: the child's name and age label, day/night preferences, a seven-day summary, recent non-deleted logs, and the conversation messages needed to answer the request. Optional photo logging can send a resized JPEG and an instruction to propose bottle, diaper, solids, temperature, or note entries. The app does not ask the model to diagnose, prescribe, or infer medication doses. If Anthropic is not configured or unavailable, Ivaluna uses its built-in fallback and reports that state.

If you use the device's voice input, the operating system/browser speech recognizer turns the recording into text. Ivaluna stores the text only if you submit and confirm the resulting log; the current Ivaluna server does not store a raw voice recording. The operating system or its speech provider may apply its own terms and privacy policy.

Device, notification, and purchase information

If you enable iOS notifications, we may receive and store an APNs device token, platform, environment, and timezone so that eligible reminders, sleep-plan updates, expert replies, or trial notices can be delivered. The app also schedules local reminders on the device. Notification preferences are stored in your account.

If you buy or restore a subscription or gift product through Apple, Ivaluna receives the signed StoreKit transaction data needed to verify the product, entitlement, expiration, and ownership. Apple processes payment details; Ivaluna does not receive your payment-card number. We store the verified transaction identifier, product, environment, and transaction payload for entitlement and fraud-prevention purposes.

We do not currently use third-party advertising, cross-app tracking, an advertising identifier, analytics SDKs, or a sale of personal information.

2. How we use information

We use information to:

We do not make decisions about a child or caregiver based solely on automated processing. Ivaluna's prediction and guidance features are informational and are not clinical decisions.

3. Who receives information

Information is shared only as needed to provide Ivaluna and when you direct us to do so:

We do not sell your or a child's information and do not share it with advertisers for cross-context behavioral advertising.

4. Where information is stored

The Ivaluna server stores account, child, event, preference, message, subscription, notification, and support records in SQLite. Uploaded photo files and thumbnails are stored on the server filesystem. The exact country, cloud provider, backup policy, and transfer path depend on the deployment that hosts IVALUNA_SERVER; fill those details in here before release. Data sent to an optional provider such as Anthropic, Apple, or Google may be processed in other countries under that provider's terms.

When the server is deployed over HTTPS, transport is protected with TLS. The application does not claim that the SQLite file or server filesystem is encrypted at rest; the operator must secure the host, access, backups, and keys.

5. Retention and deletion

There is no automatic application-wide purge schedule for care logs, notes, photos, messages, support records, or transaction records. They remain while needed to provide the service or until you delete them, delete the child, delete the account, or ask us to remove them. Event deletion is a soft delete inside the database, so a deleted event may remain in the database until its child record is deleted or an authorized maintenance process removes it.

Some temporary records have shorter lifetimes:

Local reminder state is removed from the device when reminders are disabled, the child is removed, or you sign out.

You can export your visible child logs as CSV or JSON, delete photos, delete chat history for a child, delete a child when you are its parent, or use Delete my account in Settings. Account deletion requires your password and removes the account, sessions, reset records, memberships, notification devices, purchase records, and other records linked by the database. A child and its records are deleted when you are the only remaining parent. If another parent still has access, the shared child record remains for that parent and some historical rows attributed to your former account may remain; contact us to request a review of shared records. The current application does not run an automatic orphan-file cleanup when a shared child is deleted, so contact us if you need a server-side photo-storage review.

To request deletion, correction, access, or portability, email [CONTACT EMAIL] from the account address and include enough information for us to verify the request. We may retain information required by law, to resolve disputes, prevent fraud, or complete a transaction. We will not ask you to send your password by email.

6. GDPR, UK GDPR, and similar rights

If the GDPR, UK GDPR, Swiss law, or another privacy law applies, [COMPANY NAME] is the controller for the account and child data it decides how to process. Depending on the circumstances, our legal bases are performance of a contract to provide Ivaluna, consent for optional features such as AI/photo logging or notifications, legitimate interests in security and service operation, and legal obligations.

Subject to applicable limits, you may ask for access, correction, deletion, restriction, portability, or objection; withdraw consent for an optional feature; and complain to your local data-protection authority. Withdrawing consent does not affect processing that already occurred lawfully. If you are in the EEA, UK, or Switzerland, replace this sentence with the appointed local representative or data-protection contact before launch if one is required.

7. Children's privacy and COPPA

Ivaluna is designed for adults and caregivers, not for children to use on their own. The caregiver who creates an account must have authority to provide the information and invite other adults. We do not knowingly collect personal information directly from children under 13 in the United States. If you think a child submitted information directly, contact [CONTACT EMAIL] so we can verify the request and delete it where appropriate. For children in other countries, the caregiver must satisfy the age, consent, and parental-authority requirements that apply locally.

8. Medical and safety disclaimer

Ivaluna is a tracking, organization, and educational tool. Its sleep rhythms, growth displays, reminders, assistant replies, and content are not medical advice, diagnosis, treatment, or a substitute for a pediatrician, midwife, doctor, emergency service, or other qualified professional. Do not use Ivaluna to make an emergency decision or delay urgent care. Never rely on an automated reply to decide a medication dose, feeding safety, breathing concern, fever, or sleep environment. Follow professional advice and local safe-sleep guidance.

9. Security and account responsibility

We use access controls, role checks, password hashing, expiring sessions and codes, authenticated photo URLs, and private/no-store photo responses designed to reduce unauthorized access. No internet service is perfectly secure. Keep your password and caregiver share codes private, use a device passcode, and remove caregivers who should no longer have access.

10. Changes and contact

We may update this Policy when Ivaluna or the law changes. We will update the effective date and provide notice in the app when a change is material. If you have a privacy question or request, contact [CONTACT EMAIL].

Controller: [COMPANY NAME] Privacy contact: [CONTACT EMAIL] Business address: [COMPANY ADDRESS]

This draft should be reviewed and adapted by a qualified privacy lawyer before publication, especially for the hosting country, international transfers, children's consent, health-data requirements, and vendor terms.