Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• Company: ТОО «Loonari World corp»
• BIN: 251040022519
• Address: Kazakhstan, Almaty, Nauryzbay district, Alatau gardening partnership, house 80, postal code 050000
• Contact email: info@nanomama.ru

2. Data We Collect

We collect the following categories of data:

2.1 Account and Registration Data

• Email address used for registration
• Display name (optional)
• Password (stored in encrypted form using bcrypt; we never store plain-text passwords)

2.2 Profile and Health Data

• Pregnancy information: due date, gestational age, current week
• Child profile data: birth date, weight, height, developmental milestones
• Health diary entries: symptoms, mood, temperature, vital signs entered by the user
• Sleep tracking data entered by the user
• Menstrual cycle data entered by the user
• Medical documents and notes uploaded voluntarily by the user

2.3 AI Interaction Data

• Questions and messages submitted to the AI assistant
• AI response history within the session

2.4 Technical and Device Data

• Device type and model
• Operating system version
• App version
• IP address (for security and fraud prevention)
• Crash reports and error logs
• App usage analytics (aggregated, non-identifiable where possible)

2.5 Payment Data

All in-app purchases and subscriptions on iOS are processed exclusively through Apple In-App Purchase. We do not collect, store, or process any payment card details. Apple provides us only with a subscription status confirmation (active/inactive) and the subscription tier.

3. How We Use Your Data

We use the collected data to:

• Create and manage your user account
• Provide personalised AI assistant responses based on your profile and health data
• Deliver weekly pregnancy and child development content tailored to your stage
• Process and manage your subscription through Apple In-App Purchase
• Send push notifications and reminders (only if you grant permission)
• Improve the App's features, content accuracy, and AI model quality
• Ensure security, prevent fraud, and troubleshoot technical issues
• Comply with legal obligations under applicable law

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: processing necessary to provide the App services you have requested (account management, personalised content, subscription).
• Legitimate interests: security, fraud prevention, improving our services, and app analytics.
• Consent: for push notifications and any optional features where we explicitly request your consent. You may withdraw consent at any time.
• Legal obligation: where we are required to process data under applicable law.

5. Third-Party Services and Data Sharing

We do not sell your personal data to third parties. We may share data with:

• Apple Inc. — for In-App Purchase subscription management and App Store distribution. Apple's privacy policy applies to data processed by Apple.
• AI infrastructure providers — anonymised or pseudonymised prompts may be processed by third-party AI API providers to generate responses. Providers are contractually bound to confidentiality and data minimisation obligations.
• Cloud hosting and infrastructure — our servers and databases are hosted with reputable cloud providers under data processing agreements.
• Analytics services — aggregated, non-identifiable usage data may be shared with analytics providers to improve the App.
• Legal authorities — where required by applicable law, court order, or regulatory requirement.

5.1 International Transfers

Your data may be processed in countries outside Kazakhstan, including countries where servers operated by our cloud infrastructure providers are located. We ensure adequate protection through standard contractual clauses or other approved transfer mechanisms.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the App services. Specifically:

• Account data: retained until you delete your account or request deletion.
• Health diary and profile data: retained as long as your account exists; deleted upon account deletion.
• AI interaction history: retained for up to 12 months for service quality purposes, then anonymised or deleted.
• Technical logs: retained for up to 90 days for security and debugging purposes.
• Financial/subscription records: retained as required by applicable accounting and tax law (typically up to 5 years).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Restriction: request that we limit the processing of your data.
• Data portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdrawal of consent: where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@nanomama.ru. We will respond within 30 days.

7.1 Account and Data Deletion

You may request full deletion of your account and all associated personal data by emailing info@nanomama.ru with the subject line "Account Deletion Request". We will process the request within 30 days.

8. Children's Privacy

The NanoMama App is intended for adults (parents, expectant mothers). We do not knowingly collect personal data from children under 13 years of age. The App may collect data about a user's child (such as developmental milestones and health records) — this data is entered by the parent/guardian and is associated with the parent's account.

If you believe we have inadvertently collected data from a child without parental consent, please contact us at info@nanomama.ru and we will promptly delete it.

9. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data in transit is encrypted using TLS/HTTPS.
• Passwords are stored using bcrypt hashing with a secure salt.
• Access to production databases is restricted to authorised personnel only.
• Regular security reviews and vulnerability assessments are performed.

No method of transmission over the internet or electronic storage is 100% secure. If you suspect any security incident, please notify us immediately at info@nanomama.ru.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by email (if provided) at least 7 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of the App after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

• Company: ТОО «Loonari World corp»
• BIN: 251040022519
• Address: Kazakhstan, Almaty, Nauryzbay district, Alatau gardening partnership, house 80, postal code 050000
• Email: info@nanomama.ru

We aim to respond to all inquiries within 30 days.