Privacy Policy for Nubu Baby

Effective Date: January 15, 2025
Last Updated: October 25, 2025

Humando AB ("Humando", "we", "our", or "us") operates the Nubu Baby: Feed · Sleep · Track mobile application, related websites, and support channels (the "Services"). This notice explains how we handle personal information. Nubu Baby is a caregiver journaling tool only; it does not provide medical advice. By using the Services you agree to this Privacy Policy.

1. Who We Are & How To Reach Us

• Controller: Humando AB, Sweden
• Website: https://nullified.cc
• Privacy Email: nubu_baby_privacy@nullified.cc
• Support Email: nubu_baby_support@nullified.cc
• Postal Requests: Contact us by email to arrange secure delivery of physical mail.

2. Information We Collect

We collect only what we need to run the Services:

• Account & Subscription Data: Email, password hash, StoreKit purchase confirmations, Apple ID region.
• Baby Journals: Baby names or nicknames, birth dates, logged events (feeding, diaper, sleep, growth, notes), caregiver invites, optional attachment metadata.
• Device & Diagnostics: Device model, OS version, app configuration, crash reports, limited analytics (disabled by default, can be toggled in Settings).
• Support Messages: Information you send to our support, legal, or privacy teams.

We do not collect precise geolocation, advertising identifiers, or payment card data.

3. Why We Use This Information

We use personal information to:

1. Provide, secure, and troubleshoot the Services, including sync, backups, and caregiver sharing (contract performance).
2. Process subscriptions via Apple and enforce free-tier limits (contract performance & legitimate interest).
3. Respond to support or safety requests and comply with legal obligations.
4. Improve stability and plan features through aggregated diagnostics (legitimate interest, only when analytics are enabled with your consent).

We never sell data or use it for targeted advertising.

4. Sharing & Transfers

We share data only with:

• Service Providers: Firebase Authentication, Firestore, and Storage (Google Cloud, primarily U.S. regions) for sync/backups; email delivery partners for exports/support; secure logging and monitoring vendors. These providers act under contract and may process data outside the EU/UK using Standard Contractual Clauses.
• Caregivers You Authorize: People you invite can view the shared baby data until access is revoked.
• Legal Authorities: When required by law or to protect safety. We review each request for validity.

We do not permit third-party tracking scripts or advertising SDKs.

5. Retention & Security

• Free Tier: Event history older than 3 rolling days is deleted automatically from our systems.
• Premium/Trial: Data is retained while your account is active; after cancellation we keep it up to 30 days before deletion or irreversible anonymization.
• Backups/Exports: Expire within 30 days unless you delete them sooner.
• Support Records & Audit Logs: Retained up to 24 months for compliance and security.

We protect data with TLS encryption in transit, encrypted storage, role-based access controls, and monitored audit logging. No security program is perfect—use device passcodes and contact us if you suspect unauthorized access.

6. Your Rights & Choices

• Manage analytics, caregivers, exports, and deletions directly in-app.
• Request access, correction, deletion, restriction, or portability by emailing nubu_baby_privacy@nullified.cc from your account email. We verify identity before fulfilling requests.
• EEA/UK residents may object to processing based on legitimate interests, withdraw consent, or lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local regulator.
• California and other U.S. state residents may request disclosure, correction, or deletion of personal information. We do not sell or share personal information for cross-context advertising.
• Parents or guardians can manage or delete child-related data at any time; users under 13 may not create accounts.

7. Updates & Contact

We will post any Privacy Policy updates here and update the "Last Updated" date. Material changes will be communicated in-app or by email. Questions about this notice can be sent to nubu_baby_privacy@nullified.cc. If you disagree with changes, please discontinue use of the Services.

Disclaimer: This policy is provided for general information and does not constitute legal advice. Consult qualified counsel for obligations in your jurisdiction.

Version: 1.2