This Privacy Notice for Kodelab d.o.o. (doing business as KidyGrow) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you: • Visit our website at https://kidygrow.com or any website of ours that links to this Privacy Notice • Download and use our mobile application (KidyGrow), or any other application of ours that links to this Privacy Notice • KidyGrow is a digital platform designed to help parents and caregivers track their baby's growth, development milestones, daily activities, and memories. Users can create accounts, add multiple children profiles, log activities (feeding, sleep, diaper changes), track growth measurements, record milestones, store photos, and receive AI-powered parenting guidance. The platform may integrate with third-party services with user consent. • Engage with us in other related ways, including any sales, marketing, or events Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at dpo@kodelab.hr.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by reading the full document below. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions. We may process sensitive personal information about your children (such as health-related growth data) when necessary with your consent or as otherwise permitted by applicable law. Do we collect any information from third parties? We do not collect any information from third parties. How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so. How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. How do you exercise your rights? The easiest way to exercise your rights is by contacting us at dpo@kodelab.hr. We will consider and act upon any request in accordance with applicable data protection laws.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT? 2. HOW DO WE PROCESS YOUR INFORMATION? 3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION? 4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? 5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES? 6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS? 7. HOW DO WE HANDLE YOUR SOCIAL LOGINS? 8. HOW LONG DO WE KEEP YOUR INFORMATION? 9. HOW DO WE KEEP YOUR INFORMATION SAFE? 10. DO WE COLLECT INFORMATION FROM MINORS? 11. WHAT ARE YOUR PRIVACY RIGHTS? 12. CONTROLS FOR DO-NOT-TRACK FEATURES 13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS? 14. COMMITMENT TO PARENTS & FAMILIES 15. DO WE MAKE UPDATES TO THIS NOTICE? 16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE? 17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us In Short: We collect personal information that you provide to us. We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include: • Names (parent/caregiver and children) • Email addresses • Usernames and passwords • Profile photos • Children's information (name, date of birth, gender) • Growth measurements (height, weight, head circumference) • Activity logs (feeding, sleep, diaper changes) • Milestone records • Photos and memories • Notes and journal entries • AI chat conversations • Contact preferences Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: • Children's health and development data • Growth measurements Application Data. If you use our application(s), we also may collect device information (mobile device ID, model, manufacturer, operating system, version, configuration, browser, and IP address) and request access to camera, photo library, and notifications. Location Data. We collect precise location data only when you choose to use location-based features. Location is not shared with our AI providers.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. • To facilitate account creation and authentication and otherwise manage user accounts. • To deliver and facilitate delivery of services (baby tracking, growth charts, milestones, AI-powered guidance). • To provide location-based features (only when you use them, not shared with AI providers). • To respond to user inquiries / offer support. • To send administrative information (terms, policies, similar info). • To fulfill and manage orders, payments, returns. • To provide AI-powered features (chat conversations). • To send marketing communications (with your consent — opt out anytime). • To protect our Services (fraud monitoring and prevention). • To identify usage trends and improve the product. • To save or protect a person's vital interests where necessary.
3. WHAT LEGAL BASES DO WE RELY ON?
In Short: We only process your personal information when we have a valid legal basis under applicable law (consent, contract, legitimate interests, legal obligations, vital interests). If you are located in the EU or UK, the GDPR / UK GDPR require us to explain the legal bases. We may rely on Consent, Performance of a Contract, Legitimate Interests, Legal Obligations, and Vital Interests. If you are located in Canada, we may process your information with your express or implied consent. You can withdraw consent at any time.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
We may share information with the following categories of third parties: • Cloud Computing Services (Supabase) • Data Storage Service Providers • Data Analytics Services (e.g., PostHog for product analytics) • Payment Processors (Stripe) • OpenAI, L.L.C. (US) — AI processing for question classification & suggestions • Anthropic, PBC (US) — AI processing for chat & assistant responses • User Account Registration & Authentication Services We also may share information in connection with a business transfer (merger, sale of assets, financing).
5. COOKIES AND TRACKING TECHNOLOGIES
We may use cookies and similar tracking technologies (web beacons, pixels) to gather information when you interact with our Services. Some tracking maintains security, prevents crashes, fixes bugs, saves your preferences, and assists with basic site functions. We also permit third parties and service providers to use online tracking technologies for analytics. Specific information about how we use such technologies and how you can refuse certain cookies is in our Cookie Notice.
6. ARTIFICIAL INTELLIGENCE-BASED PRODUCTS
We offer products powered by artificial intelligence (chat, activity suggestions, story generation, AI assistant) through OpenAI, L.L.C. (United States) and Anthropic, PBC (United States). What we share with AI providers: only what's needed for the feature you use — your child's name (or nickname), age, logged activity data, development notes, and your chat or prompt messages. We never share this data until you give explicit consent via the in-app AI consent screen. How to opt out: disable AI data sharing at any time in Settings > Privacy & Data > AI Data Sharing, or contact us at dpo@kodelab.hr.
7. HOW DO WE HANDLE SOCIAL LOGINS?
If you register or log in via a social media account (e.g. Google), we receive profile information (name, email, photo, and public profile). We only use it for the purposes described in this Privacy Notice. We don't control how your social media provider uses your information — review their privacy notice for details.
8. HOW LONG DO WE KEEP YOUR INFORMATION?
We keep your personal information only as long as necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law. When we no longer need it, we delete or anonymize it (or securely isolate it until deletion is possible).
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
We use Supabase for data storage with enterprise-grade encryption at rest and in transit, plus organizational and technical security measures designed to protect your personal information. No electronic transmission can be guaranteed 100% secure, so we cannot promise absolute security.
10. DO WE COLLECT INFORMATION FROM MINORS?
KidyGrow is designed for parents and caregivers to track their children's development. We do not knowingly collect data from or market to children under 18. The app is intended for adults (parents or legal guardians) who enter information about their children. By using the Services, you represent that you are at least 18 (or the equivalent age in your jurisdiction) and that you are the parent or legal guardian of any children whose information you enter. If we learn personal information from users under 18 has been collected without parental consent, we will deactivate the account and delete the data. Contact us at dpo@kodelab.hr.
11. WHAT ARE YOUR PRIVACY RIGHTS?
Depending on your location (EEA, UK, Switzerland, Canada, US), you may have rights including: • Request access to and a copy of your personal information • Request rectification or erasure • Restrict processing • Data portability (where applicable) • Not be subject to automated decision-making Withdrawing consent: where we rely on consent, you can withdraw it at any time. Account: log in to settings to review/update your account, use the data export feature, or use the account deletion feature.
12. DO-NOT-TRACK FEATURES
Most web browsers include a "Do-Not-Track" (DNT) feature. As no uniform standard for DNT signals has been finalized, we do not currently respond to DNT signals. If a standard is adopted, we will update this Privacy Notice accordingly.
13. UNITED STATES RESIDENTS
If you are a US resident, you may have the right to request access, correct inaccuracies, get a copy of, or delete your personal information; and to withdraw your consent. To exercise these rights, email us at dpo@kodelab.hr.
14. COMMITMENT TO PARENTS & FAMILIES
Any data you record in KidyGrow about your child belongs to you. We only process it to provide our services, improve features, or when legally required. You can export or delete your data at any time using the features available in the app settings.
15. UPDATES TO THIS NOTICE
We may update this Privacy Notice to stay compliant with relevant laws. The updated version will be indicated by an updated "Revised" date. If we make material changes, we may notify you directly.
16. CONTACT US ABOUT THIS NOTICE
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO): Email: dpo@kodelab.hr Post: Kodelab d.o.o. Data Protection Officer Cebini ul. 28, 10010 Buzin Grad Zagreb, Croatia
17. REVIEW, UPDATE, OR DELETE YOUR DATA
To review, update, or delete your personal information, you can: • Use the Settings section in the app to view and edit your profile • Use the Data Export feature to download all your data • Use the Delete Account feature to permanently delete your account and data • Contact us at dpo@kodelab.hr