Privacy Policy

Effective date: November 5, 2026

This policy explains what Nanu collects, why, and what you can do about it. Nanu ("the app") is published by CloudArbitration LTDA ("we", "us"), the same company behind Kaha Trainer and DietCoach. You can reach us at info@kahatrainer.com.

1. The short version

2. Using the app without an account

Nanu works fully in guest mode. Without an account, your baby's profile and every log you record are stored only on your device; nothing about your baby is sent to our servers. The trade-off is that the data does not sync to other devices, cannot be shared, and is lost if you delete the app. Usage statistics, crash reports and ads (sections 3.4 to 3.6) still apply in guest mode.

3. Data we collect

3.1 Account information — shared with Gravidez Tracker

An account is optional. You can create one with an email and password, with Sign in with Apple or with Sign in with Google. We collect your email address and your name. With Sign in with Apple, we receive whatever Apple sends us — which may be a private relay address instead of your real email. Passwords are handled by our authentication provider and are never visible to us.

Nanu and our pregnancy app, Gravidez Tracker, share the same backend and the same account. If you used Gravidez Tracker, signing in here brings in the baby you registered there.

3.2 Your baby's data

When you are signed in, we store what you record, which is the reason the app exists:

• The baby's profile: name, date of birth and sex, plus gestational age at birth and feeding type if you enter them. If you add a photo, it stays on your device and is not uploaded.
• Logs: feeds, sleep, diapers, pumping, health notes, temperature, medicine, growth measurements (weight, length, head circumference), vaccines, milestones and appointments.
• Your preferences, such as units and the vaccine schedule you chose.

This information is provided by you, the parent or caregiver, and is used only to show it back to you and to the people you choose to share it with.

3.3 Caregivers

You can invite another adult — a partner, a grandparent, a nanny — with an invite code. Everyone who joins a baby, as owner or caregiver, can see and edit that baby's profile and logs, and we record who is a member of each baby and in which role. Invite only people you trust. The owner can remove a caregiver at any time, and a caregiver can leave on their own.

3.4 Usage analytics and crash reports

To understand which screens are useful and to fix what is broken, the app records product events in our own analytics table: a random identifier generated on your device at install, the screens viewed, the app version, the language and country, ad decisions (whether an ad was shown or skipped, and why) and purchases. That identifier is not linked to your account, your email or your baby's data, and it is recreated if you delete and reinstall the app.

We also use Google Firebase Analytics, for aggregate usage statistics, and Firebase Crashlytics, which sends a crash report (device model, iOS version, app version and the technical state of the app when it crashed) if the app closes unexpectedly. Your baby's logs are not included in either.

3.5 Advertising

The free version shows banner ads served by Google AdMob, only on the Progress and Guide screens — never while you are logging. Depending on your choices and region, AdMob may process your device's advertising identifier (IDFA), general device and network information, and ad interaction data.

Ads are personalized only with your permission: on iOS, through Apple's App Tracking Transparency prompt; in the European Economic Area, the United Kingdom and Switzerland, also through Google's consent form. If you decline, the app works exactly the same and ads are simply less relevant. The "No ads" plans remove ads altogether. Google's handling of this data follows its own policies; see How Google uses information from sites or apps that use our services.

3.6 Purchases

Purchases are processed by Apple through the App Store. We receive the status of the transaction (which plan, whether it is active, renewal and expiry) to unlock what you paid for. We never see your card or payment details.

3.7 Notifications

Reminders for timers, appointments and vaccines are scheduled locally on your device. For notifications sent by us, we use Firebase Cloud Messaging: we store your device's push token, time zone, language and which kinds of notification you opted into, so we can send them at a reasonable hour and in your language.

3.8 What we do not collect

• We do not collect your location.
• We do not access your contacts or microphone.
• We do not upload your baby's photo.
• We do not collect payment card details.

4. Why we process it

Purpose	Data	Legal basis (LGPD / GDPR)
Provide the service: store, sync and share your baby's logs	Account, baby profile and logs, caregiver memberships	Performance of a contract; for the baby's data, the consent of the parent or guardian who enters it
Unlock paid plans	Purchase status	Performance of a contract
Send the notifications you opted into	Push token, time zone, language, opt-ins	Consent
Understand product usage and fix crashes	Anonymous usage events, crash reports	Legitimate interest
Support the free version with advertising	Advertising identifier, ad interactions	Consent, where required

Information about a baby's health deserves extra care. We use it only to provide the app's features to you and the caregivers you invite — never for advertising.

5. Who we share it with

We do not sell personal data. We share it only with the providers that make the app work:

• Supabase — hosts our database and authentication, in the United States (us-east-1). Processes your data on our instructions.
• Google — Sign in with Google, Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging and AdMob, as described above.
• Apple — provides Sign in with Apple, in-app purchases and push notification delivery.
• The caregivers you invite — they see and edit the babies they were invited to.

6. International transfers

Our database is hosted in the United States, and our other providers may operate infrastructure outside your country. Where required, transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism offered by the provider.

7. How long we keep it

Account and baby data are kept while your account exists. Data kept in guest mode lives on your device until you delete the app. Anonymous usage events are retained in aggregate; because they are not linked to your identity, they cannot be isolated and removed per person. Crash reports are kept by Firebase for a limited period.

8. Your rights and deleting your data

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing, and to withdraw consent at any time. To exercise any of these, write to info@kahatrainer.com from the address associated with your account. We answer within 30 days.

Deleting your account. In the app, go to Profile → Delete account. This removes your account and the babies you own, with all their logs, immediately and permanently. For babies owned by someone else, your caregiver access is removed and their data stays with the owner. Because the account is shared, this also deletes your data in Gravidez Tracker.

Guest mode. To erase data kept without an account, delete the app from your phone.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

Practical controls — tracking, ad consent, notifications — are listed on Your Privacy Choices.

9. Security

Data in transit is encrypted with TLS. Access to the database is restricted by row-level security rules, so an account can only read the babies it owns or was invited to.

10. Children

Nanu is made for parents and caregivers, who are adults. It stores information about a baby that the parent or caregiver chooses to enter; it is not directed at children and is not meant to be used by them. We do not sell this information or use it for advertising. If you believe a child has created an account, write to us and we will delete it.

11. Health disclaimer

Nanu is a log and organizer with general information. It is not medical advice and does not replace your pediatrician. In an emergency, call your local emergency services. See the Terms of Use.

12. Changes to this policy

If we change this policy, we will update the date at the top and, for changes that matter, tell you in the app before they take effect.

13. Contact

CloudArbitration LTDA
info@kahatrainer.com