Privacy Policy

Introduction

Cradli ("we," "our," or "us") is a family wellness tracking application operated by Helivio Health. We are committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

We understand that the data you entrust to us—including information about your children—is sensitive. We treat this responsibility seriously and have designed Cradli with privacy at its core.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (securely hashed—we never store plain text passwords)
• Authentication method (email, Google Sign-In, or Apple Sign-In)
• Parent/caregiver role (e.g., mother, father, caregiver)

Child Profile Information

For each child profile you create, we collect:

• Child's name
• Date of birth or estimated due date (for pregnancy profiles)
• Gender
• Profile photos (optional)
• Avatar customization preferences

Health & Wellness Tracking Data

Based on your use of the app, we collect data you choose to log, including:

• Sleep data: Sleep times, durations, quality notes, and bedtime routines
• Feeding data: Feeding times, amounts, types (breast/bottle/solid), and duration
• Diaper data: Change times, types, and notes
• Growth data: Height, weight, head circumference measurements
• Health data: Symptoms, temperature, medications, appointments, and vaccination records
• Milestone data: Developmental milestones with dates and photos
• Activity data: Activities, moods, and general observations
• Pregnancy data: Kick counts, contraction timing, water intake
• Emergency information: Emergency contacts, allergies, and medical conditions

Device & Technical Information

We automatically collect:

• Device type, operating system, and version
• App version
• Device push notification tokens (for sending notifications you've enabled)
• General location (country/region) derived from device settings
• Timezone settings

Voice & Media

If you use our voice logging feature:

• Audio recordings are processed by our AI service to transcribe your voice into text logs
• We do not permanently store raw audio files after transcription
• Photos you upload for milestones and logs are stored securely

How We Use Your Information

We use your information to:

• Provide core functionality: Store and sync your tracking logs, display insights and patterns, and enable family sharing
• Improve the app: Analyze aggregate, anonymized usage patterns to improve features
• Send notifications: Deliver push notifications you've enabled (reminders, feeding alerts, etc.)
• Communicate with you: Send service-related emails (password resets, verification, important updates)
• Provide AI features: Power sleep predictions, voice transcription, and the chat assistant
• Generate reports: Create PDF health reports you can share with healthcare providers
• Ensure security: Protect against fraud and unauthorized access

How We Share Your Information

Family Sharing

When you invite caregivers to your family, they can view and log data for shared child profiles. You control who has access and can remove caregivers at any time.

Service Providers

We work with carefully selected third-party services to operate Cradli:

• Analytics (Mixpanel): We use Mixpanel to understand how the app is used. User IDs are hashed before being sent—we never share identifiable information. Analytics helps us improve features but does not include health data.
• Error Tracking (Sentry): Crash reports help us fix bugs quickly. No personally identifiable information or health data is included in error reports.
• Cloud Storage (Cloudinary): Photos you upload are stored securely via Cloudinary. Images are private and not publicly accessible.
• Email (SendGrid): We use SendGrid to send transactional emails. This includes your email address only.
• Subscriptions (RevenueCat): If you subscribe to a paid plan, RevenueCat manages subscription billing through App Store or Google Play. We do not directly process payment card details.
• AI Services (OpenAI): Voice transcription and the AI chat assistant use OpenAI's API. Data sent to OpenAI is used only for processing your request and is not used to train their models.

What We Never Do

• We never sell your personal data or your children's data to third parties
• We never share health data with advertisers
• We never use your data for targeted advertising

Data Security

We implement industry-standard security measures:

• Encryption in transit: All data transmitted between your device and our servers uses TLS encryption
• Secure authentication: Passwords are hashed using industry-standard algorithms
• Access controls: Employee access to user data is strictly limited and logged
• Regular audits: We conduct security reviews and keep our systems updated
• Token security: Authentication tokens are versioned, allowing you to log out of all devices

Data Retention & Deletion

Retention: We retain your data for as long as your account is active. Deleted logs are soft-deleted initially and permanently removed within 30 days.

Account Deletion: You can request complete account deletion at any time through the app settings or by emailing privacy@cradli.com. Upon deletion:

• All personal data is permanently removed from our systems
• All child profiles and associated logs are deleted
• Photos are removed from cloud storage
• Analytics data is anonymized

Data Export: You can export your data at any time through the app settings. Exports are provided in a portable format.

Children's Privacy

Cradli is designed for parents and caregivers to track their children's wellness. We do not knowingly collect personal information directly from children under 13.

As a parent or guardian, you control all information entered about your children. You can modify or delete this information at any time through the app.

If you believe we have inadvertently collected information from a child under 13 without parental consent, please contact us immediately at privacy@cradli.com.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data
• Portability: Export your data in a portable format
• Objection: Object to certain processing of your data
• Restriction: Request restricted processing in certain circumstances

To exercise these rights, use the in-app settings or contact us at privacy@cradli.com. We will respond within 30 days.

International Data Transfers

Cradli is operated from the United Kingdom. If you access our services from outside the UK, your data may be transferred to and processed in the UK or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date. For significant changes, we will provide additional notice via email.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Privacy inquiries: privacy@cradli.com
• General support: support@cradli.com
• Company: Helivio Health