🛡️ BabyShield Privacy Policy

1. Introduction

Welcome to BabyShield ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency in how we handle data. BabyShield is a consumer safety information service that provides access to product recall and safety data from government agencies worldwide.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

2. Service Purpose

BabyShield provides:

• Access to product recall information from government safety agencies
• Safety alerts and notifications about consumer products
• Search functionality for recall and safety data
• Visual product identification features

All information is sourced from official government databases and is provided for informational purposes only.

3. Information We Collect

3.1 Information You Provide

• Email Address: Only collected if you:
  • Contact our support team
  • Submit a data subject access request (DSAR)
  • Request data export or deletion
• Support Inquiries: Any information you voluntarily provide when contacting us

3.2 Information Collected Automatically

• Device Information: Basic technical data (if diagnostics enabled):
  • Device type and model
  • Operating system version
  • App version
  • Crash logs (optional, with consent)
• API Usage: Non-identifying technical logs:
  • API endpoints accessed
  • Response times
  • Error codes

3.3 Information We Do NOT Collect

• ❌ Personal health information
• ❌ Location data
• ❌ Contact lists
• ❌ Photos (images processed locally, not stored)
• ❌ Third-party tracking or advertising identifiers
• ❌ Social media information
• ❌ Financial information

4. How We Use Information

We use collected information solely for:

• Service Provision: Delivering recall and safety information
• Support: Responding to your inquiries
• Legal Compliance: Processing DSAR requests (export/deletion)
• Service Improvement: Anonymous crash reporting and performance monitoring
• Security: Protecting against abuse and unauthorized access

5. Data Sharing & Third Parties

We may share data only in these limited circumstances:

• Legal Requirements: When required by law, court order, or government request
• Safety: To protect the safety of users or the public
• Service Providers: With trusted providers who help operate our service (under strict confidentiality agreements)

6. Data Storage & Security

• Encryption: All data transmitted using HTTPS/TLS encryption
• Storage: Secure cloud infrastructure with encryption at rest
• Access Control: Limited to authorized personnel only
• Retention:
  • DSAR records: 3 years (for legal compliance)
  • Support emails: 1 year
  • Crash logs: 90 days

7. Your Rights & Choices

7.1 Data Subject Rights

Depending on your jurisdiction, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing
• Restriction: Limit how we use your data

7.2 How to Exercise Your Rights

8. Jurisdiction & Compliance

We comply with privacy regulations worldwide, including:

• GDPR (European Union)
• UK GDPR (United Kingdom)
• CCPA/CPRA (California, USA)
• PIPEDA (Canada)
• Privacy Act (Australia)

Your rights may vary based on your location. We honor all applicable data protection laws in your jurisdiction.

9. Children's Privacy

BabyShield is a general audience service. While our content relates to child safety products, we do not knowingly collect personal information from children under 13 (or applicable age in your jurisdiction). If we become aware of such collection, we will promptly delete the information.

10. International Data Transfers

Our servers are located in the United States. If you access BabyShield from outside the US, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or our website. The "Last Updated" date at the top reflects the most recent revisions.

12. Contact Information

13. California Privacy Rights

California residents have additional rights under the CCPA/CPRA, including the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information (with exceptions)
• Opt-out of sale (we do not sell personal information)
• Non-discrimination for exercising privacy rights

Shine the Light: California residents may request information about disclosure of personal information to third parties for marketing (not applicable as we don't share for marketing).

14. European Privacy Rights

If you are in the European Economic Area (EEA) or UK, you have additional rights under GDPR:

• Legal Basis: We process data based on legitimate interests, consent, or legal obligations
• Supervisory Authority: You may lodge complaints with your local data protection authority
• Data Protection Representative: Contact via support@babyshield.app