Privacy Policy

Who We Are

Growbaby is operated by Snaiper Teknoloji Anonim Sirketi, a company registered in Turkey. Growbaby is a parenting companion for families with children aged 0 to 3. We are the data controller for the personal data described in this policy.

For any questions about this policy, contact us at info@snaiper.co.

What This Policy Covers

This policy covers two things: the Growbaby mobile application, and the growbaby.ai website, including its waitlist. Most of what follows is about the application, because that is where personal data about you and your child is actually processed. The website section is separate and much smaller.

The App: What We Collect

Information you give us

• Your account. Your email address and name, which come from Apple or Google when you sign in with them.
• Your child's profile. Name, date of birth, and gender. Optionally, and only if you choose to enter it: allergies, chronic or suspected conditions, vaccination status, feeding type, weight, and whether your child was born prematurely.
• What you create in the app. Your messages to Growy, notes, sleep reports, feeding logs, growth and milestone records, and growth journal entries.
• Photos of your child's skin, if you use the Skin Analysis feature.
• Family information. Invitations you send and the caregivers who join your family.

Information collected automatically

• Usage and device data. Which features you use and when, app version, device model and operating system, and a device identifier.
• Diagnostics. Crash reports and performance data, so we can find and fix problems.
• Approximate location. Derived from your IP address by our install attribution provider. We do not collect precise or GPS location.
• Push notification token, so we can deliver the notifications you have turned on.

The microphone

The Soothing feature listens through the microphone while it is running, so the sound can respond to your baby. That audio is processed on your device only. It is not recorded, not saved to storage, and never sent to us or to anyone else.

If you leave the research setting on, the app sends us measurements derived from that audio, such as pitch and loudness characteristics, to help us improve how the feature responds. These measurements contain no audio and are not linked to your account or to your child. You can turn this off in the app's settings at any time.

Why We Use It

• To create and run your account and your family.
• To answer your questions with Growy, using your child's profile so the answers fit their age and situation.
• To store and show you what you have saved, and to share it with your family.
• To send the notifications and reminders you have enabled.
• To operate subscriptions and process purchases.
• To understand how the app is used, to fix crashes, and to improve it.
• To protect the service against abuse.

Artificial Intelligence and Third Party Processing

Growy answers your questions using artificial intelligence provided by OpenAI, a company based in the United States. This is important, so we want to be exact about it.

Each time you send Growy a message, we send OpenAI:

• the text of your message, and
• the profile details you have saved about your child, which can include their name, date of birth, gender, allergies, chronic or suspected conditions, feeding type, vaccination status, weight, whether they were born prematurely, and a short summary of what you have told Growy before.

If you use Skin Analysis, the photo of your child's skin is also sent to OpenAI so the image can be analysed.

We do this only to produce the answer you asked for. We do not use your content, your child's information, or your photos to train artificial intelligence models, and we do not sell any of it.

Who Else We Share With

We use the following service providers. Each one receives only what it needs to do its job.

• OpenAI (United States) as described above: your messages, your child's profile context, and skin photos.
• Supabase (European Union, Frankfurt) is where your account and everything you save in the app is stored.
• Sentry (European Union) receives crash reports and performance diagnostics.
• Mixpanel (European Union) receives product analytics, identified by a one-way hashed identifier rather than your account id. We do not send it your name, your email, your messages, or your child's health information.
• Airbridge receives install and session signals and a device identifier, so we can tell which marketing channel an install came from. It does not receive your email, your content, or your child's information.
• RevenueCat receives your subscription and purchase state so the app knows what you have access to.
• Expo push service, and through it Apple and Google push services, deliver notifications to your device.
• Resend sends transactional email such as confirmations.
• Apple and Google handle the purchase itself when you subscribe. We never see your payment card.

We may also disclose information where we are legally required to, or to protect someone's safety. We do not sell your personal data, and we do not share it with advertisers.

Information About Your Child's Health

Some of what you can save in Growbaby, such as allergies, conditions, and skin photos, is health information about your child. Under the EU General Data Protection Regulation this is a special category of personal data (Article 9), and under Turkish law (KVKK, Law No. 6698) it is special quality personal data (Article 6). Both give it extra protection.

We process it only on the basis of your explicit consent, which you give by choosing to enter it and by accepting the disclosure the app shows you about how it is used and where it is sent. Entering this information is optional; Growbaby works without it, with less personalised answers. You can withdraw your consent by deleting the information, or by deleting your account.

International Transfers

Your account data is stored in the European Union. Some of the providers listed above process data outside Turkey and the European Union, most importantly OpenAI in the United States, which receives your messages and your child's profile context on every conversation.

Where we transfer personal data outside the EEA or Turkey, we rely on your explicit consent for that transfer and on appropriate contractual safeguards with the provider. If you do not want your child's health information transferred, do not enter it, and do not use Growy or Skin Analysis.

How Long We Keep It

• App data, including your account, your child's profile, your messages, notes, logs, and everything Growy remembers, is kept for as long as your account exists, and is deleted when you delete your account.
• Skin photos are sent for analysis and are not kept as part of your profile.
• Purchase records may be kept longer where accounting or tax law requires it.
• Diagnostics and analytics are kept according to each provider's retention settings and are not tied to your name or email.
• Research measurements derived from Soothing audio are not linked to you or your child, so they cannot be traced back or individually deleted. They are kept in aggregate to improve the feature.
• Website waitlist data is kept until Growbaby launches and for up to 12 months after, or until you ask us to delete it.

Your Choices in the App

• Analytics. You can turn off product analytics in the app's settings.
• Soothing research. You can turn off the derived-measurement contribution in the app's settings.
• Notifications. You choose which notifications you receive, in the app and in your device settings.
• Your child's details. You can edit or remove anything you have entered.
• Delete your account. You can delete your account and its data from inside the app, or from growbaby.ai/delete-account without installing it. Deletion is permanent.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access, correct, or delete your personal data.
• The right to object to or restrict processing of your data.
• The right to data portability.
• The right to withdraw consent at any time.

Under Turkish law (KVKK, Law No. 6698), you have the right to learn whether your data is being processed, request details about that processing, and request correction or deletion.

Under the EU General Data Protection Regulation (GDPR), EU residents have additional rights including data portability and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at info@snaiper.co.

Children's Privacy

Growbaby is built for parents, caregivers, and guardians. It is not designed for direct use by children, and we do not knowingly collect personal information directly from a child. Accounts are for adults only.

Growbaby does, however, hold information about your child, because that is what the product is for: their name, date of birth, and whatever else you choose to record. You provide that information as the child's parent or guardian, and you decide how much of it to enter. You can view, change, or delete it at any time, and deleting your account removes it.

If you believe a child has created an account or given us personal data directly, contact us and we will delete it promptly.

Security

We take reasonable measures to protect your data, including encryption in transit, access controls that keep one family's data separate from another's, IP hashing on the website, rate limiting, and spam protection. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Website and Waitlist

Separately from the app, when you visit growbaby.ai or join our waitlist we collect:

• Email address (required) to notify you about our launch and product updates.
• Phone number (optional) for waitlist-related communications.
• Hashed IP address for rate limiting and abuse prevention. We do not store your raw IP address.
• Website analytics such as page views, browser type, operating system, and interaction events, through PostHog, hosted in the European Union (eu.i.posthog.com). PostHog may set cookies to distinguish unique visitors. These cookies are used solely for analytics.

The website is hosted by Vercel, waitlist entries are stored in Supabase, and confirmation emails are sent by Resend. We do not use advertising cookies on the website.

Changes to This Policy

We may update this policy. Each published version carries a version identifier and a date at the top of this page. If we make significant changes, we will notify you in the app or by email.

Contact

Snaiper Teknoloji Anonim Sirketi
Email: info@snaiper.co
Web: www.snaiper.co