Privacy Policy

The short version

We collect what the app needs to work: your email, your baby's details, and what you log. It is stored in India. We do not sell it, we do not share it with advertisers, and we do not use it to train AI models. You can export everything and you can delete your account.

Who we are

Araia is a baby tracking application operated from India. For any question about this policy, or to exercise any right described in it, write to privacy@araia.me.

What we collect

Account information

Your email address, used to sign in and to send you a one-time code
A display name, if you provide one
Your approximate location, if you choose to share it, used to find nearby doctors and to apply the right vaccination schedule

Information about your baby

Name, date of birth and sex
Everything you log: feeds, nappies, sleep, medicines, symptoms, temperature and other health metrics
Growth measurements — weight, length, head circumference
Vaccination records and the dates doses were given
Appointments, doctors you add, and notes or prescriptions you scan
Photos, videos and documents you upload, including reports and vaccination cards
Audio recordings of crying, if you use the cry analysis feature

Technical information

Device type and operating system version
Error and crash reports
Basic usage information about which features are used, so we know what to improve

We do not collect your contacts, your photo library beyond the specific items you choose to upload, your precise background location, or your browsing activity in other apps.

Why we collect it

Every category above exists to make a feature work:

To run the app — showing you your logs, charts, schedules and reminders
To sync between caregivers — so a co-parent you invite sees the same record
To answer your questions — the AI assistant reads your baby's recent history so its answers are about your baby rather than generic
To send you things you asked for — sign-in codes, vaccination reminders, invitations
To fix problems — crash reports and errors

Who else sees it

We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.

Provider	What for	What they receive
Google Cloud Platform	Hosting, database, file storage and content delivery	All app data, stored in the India (Mumbai) region
Google Gemini	The AI assistant, cry analysis, note and report reading	Only the specific content needed for that request
Amazon SES	Sending email	Your email address and the message
Google Places	Finding nearby paediatricians and clinics	An approximate location and search terms — not your baby's data
Apple / Google	App distribution and push notifications	A device token; not the content of your logs

We do not sell your data. We do not share it with advertisers, data brokers, insurers or employers. We do not run advertising in the app.

Content sent to Google Gemini is processed to answer that specific request. We do not permit it to be used to train models.

The only other people who see your baby's data are the caregivers you personally invite. You can remove their access at any time.

Where it is stored, and for how long

Data is stored on Google Cloud infrastructure in the asia-south1 (Mumbai) region. Email delivery may be processed in another region.

We keep your data for as long as your account is active. If you delete your account, we delete your data and your uploaded files within 30 days, except where we are legally required to retain something longer. Backups are cycled out within 90 days.

Your rights

Under India's Digital Personal Data Protection Act, and under the GDPR if you are in the EU or UK, you can:

Access a copy of everything we hold about you
Export your data — the app has built-in Excel and PDF export for metrics, vaccinations and the full journal timeline
Correct anything inaccurate, directly in the app
Delete your account and all associated data
Withdraw consent for optional features such as cry analysis or location
Complain to your data protection authority if you think we've handled this badly

Write to privacy@araia.me for any of these. We respond within 30 days.

Children's data

Araia is used by adults to record information about their own children. The account holder must be 18 or over. We do not knowingly allow a child to create an account. Data about your baby is treated as sensitive personal data and handled accordingly.

Security

Data is encrypted in transit (TLS) and at rest. Uploaded files are served through signed, time-limited URLs rather than public links. Access to production systems is restricted. Sign-in uses one-time email codes rather than passwords you might reuse elsewhere.

No system is perfectly secure. If we ever suffer a breach affecting your data, we will tell you and the relevant authority as required by law.

Changes to this policy

If we change this policy in a way that materially affects you, we will notify you in the app or by email before it takes effect. The date at the top of this page always reflects the current version.

Note for the operator

This policy describes Araia's actual data practices, but it has not been reviewed by a lawyer. Have it checked against the DPDP Act and the Apple and Google store requirements before launch, and add your registered legal entity name and address above.