隱私權政策 / Privacy Policy

Nukumi 隱私權政策（繁體中文）

版本日期：2026 年 10 月 27 日

1. 關於這份政策

Nukumi 是一款給爸媽和照顧者使用的寶寶紀錄 App（目前先推出 iPhone 版）。這份政策說明 Nukumi 1.0 版收集哪些資料、為什麼收集、存放在哪裡、保存多久，以及你可以怎麼查看、帶走或刪除這些資料。

Nukumi 由 JC Wu 個人經營（臺北市）。這份政策裡的「我們」指的就是 Nukumi 的經營者。

Nukumi 幫你記住發生了什麼，不提供醫療建議，也不做任何健康判斷。

2. 重點整理

不用註冊就能開始，也能和家人同步。免註冊帳號，不需要 email 或電話。
寶寶的紀錄只用來提供 Nukumi 的功能給你們家使用。我們不賣寶寶的資料，寶寶的紀錄也不會拿來做廣告。
不跳追蹤權限詢問（App Tracking Transparency），我們不讀取 IDFA。免費版只顯示非個人化廣告，而且只出現在統計頁；21:00–07:00 不顯示。
你可以在 App 裡刪除帳號，也可以隨時免費在手機上產生一份你的資料副本。
刪除 App 或換手機時，紀錄不會自己跟過去。你需要擁有者的復原碼，或由家人重新邀請你（見第 10 節）。
帳號或家庭長時間沒有使用時，資料會被清除（見第 9 節）。

3. 我們收集哪些資料

3.1 寶寶的紀錄

你或家人記下的紀錄：餵奶（親餵、瓶餵、擠奶）、睡眠、尿布，以及計時器的開始和結束時間。
每筆紀錄的時間、時區、備註，以及是誰記的（記錄者的暱稱），還有記錄時使用的平台和 App 版本。
寶寶的暱稱（可以跳過，空白時會存成「寶寶」）和照顧時使用的時區。
沒有網路時，紀錄會先存在你的手機上，連上網路後再同步。
Nukumi 1.0 沒有照片功能。如果之後加入，我們會先更新這份政策。

寶寶的紀錄可能屬於健康相關資料。我們只用它來提供 Nukumi 的功能，不會把它傳給任何廣告或分析工具。

3.2 家庭與帳號資料

免註冊帳號：第一次打開 App 時，我們會透過 Firebase Authentication 建立一個免註冊帳號（一組隨機的使用者 ID），不需要 email 或電話。
家庭資料：家庭名稱、成員的暱稱、角色（擁有者、可以記錄、只能看）、加入時間、你屬於哪些家庭，以及你最後一次使用的時間（用來判斷第 9 節的長時間未使用）。
分享碼與復原碼：邀請家人用的分享碼（也可以顯示成只能用 App 內掃描的 QR Code）和擁有者的復原碼，我們只保存經過雜湊處理的版本，不保存原本的代碼。
App Store 地區：我們透過 RevenueCat 的工具讀取你的 App Store 店面國家，用來決定顯示哪一版同意畫面、是否顯示廣告，以及預設的資料存放區域。我們不使用 GPS 定位。

3.3 App 運作所需的技術資料

Firebase Remote Config：App 啟動時會取得設定，例如哪些地區顯示廣告。Google 會收到國家代碼、語言、時區、iOS 版本和 App 的識別資訊。
Firebase App Check：透過 Apple 的 App Attest 確認連線來自真正的 Nukumi App，例如兌換分享碼時，用來防止濫用。
Apple 提供的當機報告：如果你在 iPhone 的設定裡選擇和 App 開發者分享分析資料，Apple 會把 Nukumi 的當機紀錄提供給我們。這由 Apple 處理，是 iPhone 的系統設定，不是 Nukumi 裡的開關。Nukumi 1.0 沒有另外安裝使用分析或當機報告工具。
系統日誌：我們的伺服器程式（Cloud Functions）會留下系統日誌，日誌不記錄你的使用者 ID，也不記錄任何紀錄內容。
網站：nukumi.app 由 Firebase Hosting 提供，會留下一般的網站存取紀錄。網站不載入外部的 script 或字型。

我們會用彙總後的統計數字了解服務使用情況，不含個人或寶寶的明細。

3.4 廣告相關資料

見第 5 節。

3.5 購買資料

Plus 訂閱由 Apple 處理，我們看不到你的信用卡或付款資料。我們透過 RevenueCat 確認購買狀態；RevenueCat 收到的是一組我們隨機產生的編號（不是你的 Nukumi 帳號 ID）、購買紀錄和店面國家。

3.6 你寄給我們的內容

「聯絡我們」：會開啟你的郵件 App，你寫的內容和你的寄件信箱會寄到我們這裡。
「回報這則廣告」：會開啟你的郵件 App，預先帶入時間、店面地區、廣告位置和 Google 提供的廣告編號，由你自己決定是否寄出。

請不要在信裡寫寶寶的健康細節。

3.7 同意紀錄

我們會記錄你同意了哪一版條款、時間、語系、地區和 App 版本，用來證明我們有取得你的同意。

4. 我們怎麼使用這些資料

提供 Nukumi 的功能：儲存紀錄、在家人之間同步、顯示統計。
管理家庭和權限：邀請、移除成員、轉移擁有者、用復原碼找回帳號。
在免費版的統計頁顯示非個人化廣告；確認 Plus 購買，讓付費家庭不看到廣告。
修正當機和錯誤。
回覆你寄來的信。
保護 Nukumi 不被濫用，例如限制猜代碼的次數、使用 Firebase App Check。
遵守法律義務。

我們不會：賣你的資料；把寶寶的紀錄用在廣告或行銷；把寶寶的紀錄傳給任何廣告或分析工具。

5. 廣告

Nukumi 免費版只在統計頁顯示 Google AdMob 的橫幅廣告。今天頁（首頁）、記錄畫面和計時器不顯示廣告。
只顯示非個人化廣告。我們不讀取 IDFA，也不跳追蹤權限詢問（App Tracking Transparency）。
依你手機的當地時間，21:00–07:00 不載入廣告。第一次使用的 24 小時內也不顯示廣告。
只要家裡有一位成員購買 Plus，全家都不會看到廣告。
廣告只在台灣、香港、加拿大、澳洲、紐西蘭的 App Store 地區顯示。
我們使用 Google 的同意工具（User Messaging Platform）。如果你人在歐盟、英國或瑞士，可能會先看到 Google 的同意訊息；只有在可以顯示廣告時，App 才會開始載入廣告。
App 的設定裡列有廣告網路的 SKAdNetwork 識別碼。這是 Apple 的機制，讓廣告主以彙總的方式知道廣告帶來多少安裝；我們不會因此收集額外的資料。
寶寶的紀錄和名字不會傳給 Google 或任何廣告商。

雖然廣告是非個人化的，Google 的 AdMob SDK 仍可能依照 Google 自己的政策收集一些資料，例如 IP 位址（用來推估大概位置）、裝置識別碼、手機和 App 的技術資訊、當機與效能資料，以及廣告的顯示和點擊情形，用於顯示廣告、限制重複顯示的次數、評估成效和防範詐欺。詳細說明請看：

Google 隱私權政策：https://policies.google.com/privacy
Google 如何使用合作夥伴網站或應用程式的資料：https://policies.google.com/technologies/partner-sites
AdMob 的資料揭露說明：https://developers.google.com/admob/ios/privacy/data-disclosure

6. 家人之間看得到什麼

一個家庭最多 10 位成員，每個家庭只有一位擁有者。
任何成員都可以邀請家人：產生 8 碼、只能用一次、24 小時內有效的分享碼，或在 App 內顯示 QR Code 讓家人用 App 掃描。一個家庭同時最多 3 組有效的分享碼；產生的人或擁有者可以撤銷。
只有擁有者可以移除成員、刪除家庭、轉移擁有者。
同一個家庭的成員都看得到這個家庭的所有紀錄、每筆是誰記的，以及成員的暱稱和角色。請只邀請你信任的人。
成員被移除或離開後，就看不到之後的新紀錄；他之前記的紀錄會留在家庭裡。

7. 我們和誰分享資料

我們不賣你的資料。我們只和協助我們提供服務的業者分享必要的資料，他們依照合約或各自的條款處理：

Google（Firebase、Google Cloud）：登入、資料庫、Cloud Functions、Remote Config、App Check、網站。
Google（AdMob、User Messaging Platform）：免費版統計頁的廣告和同意訊息（見第 5 節）。
RevenueCat：確認 Plus 購買狀態、讀取 App Store 店面國家。
Apple：App Store 付款、App Attest、當機報告（依你 iPhone 的設定）、SKAdNetwork。
你寄信給我們時，我們收信使用的郵件服務。

我們也可能在法律要求時提供資料，或在公司合併、收購時轉移資料；遇到這種情況，這份政策的保護仍然適用。

8. 資料存放在哪裡

Nukumi 使用 Google Cloud 上的 Firebase，家庭資料存放在三個地區之一：

歐洲（多區域）
美國（多區域）
台灣

建立家庭時，我們會依你的國家或地區預設一個存放區域，你可以在確認前更改。這個家庭的寶寶資料、紀錄和成員資料都存放在該區域，之後不會移動。家人從其他國家加入時，會直接連到這個家庭所在的區域。

另外，有些資料不在家庭所在的區域：

登入資料（隨機的使用者 ID）由 Google 的 Firebase Authentication 在美國處理。
使用者目錄（你屬於哪些家庭等帳號資料，不含寶寶的名字或紀錄），以及分享碼和復原碼的雜湊值，存放在歐洲區域。
RevenueCat、Apple 和 Google AdMob 依各自的政策處理和存放資料。

因此，你的資料可能會傳到你所在國家或地區以外的地方。

9. 保存多久

紀錄和家庭資料：在你使用 Nukumi 的期間保存，直到你刪除，或依下面的規則清除。
長時間沒有使用：
- 帳號 13 個月沒有任何活動時，帳號會被清除；他記的紀錄會留在家庭裡。如果這個人是擁有者，清除前擁有者身分會先轉給最早加入、可以記錄的家人；如果家裡只剩只能看的家人，會轉給其中最早加入的那一位，並讓他可以記錄。
- 整個家庭的所有成員 24 個月都沒有任何活動時，整個家庭會連同所有紀錄一起刪除。
- 只要打開 App（並連上網路）就算有活動。
- 閒置期滿後清除，不會另外個別通知。Nukumi 1.0 沒有推播通知，也沒有你的 email，所以沒有辦法在清除前通知你。
分享碼：24 小時後失效。
復原碼：保存到重新產生、轉移擁有者或刪除帳號為止。
同意紀錄：跟著你的帳號保存。
購買紀錄：Apple 會保存你的購買紀錄，我們無法刪除；RevenueCat 依它自己的政策保存資料。
資料副本：在你的手機上產生，我們的伺服器不會留下副本檔。

10. 換手機、刪除 App 與找回資料

你的紀錄會在連上網路後同步到雲端，但新手機或重新安裝的 App 需要一把「鑰匙」才能找到它們：

復原碼：16 碼，只有家庭的擁有者有，在你存好第一筆紀錄之後才會顯示。請存在安全的地方，例如截圖或密碼管理器。成為擁有者或重新產生時，舊的復原碼會失效。
家人重新邀請：如果家庭裡還有其他家人，可以請任何一位家人給你新的分享碼，重新加入後就看得到家庭共享的紀錄。

Nukumi 1.0 是免註冊帳號，不需要 email 或電話。如果你沒有存復原碼，家庭裡也沒有其他家人，刪除 App 或遺失手機後，我們無法確認哪些資料是你的，這些資料就無法找回。為了保護你的資料，我們也不能只靠寶寶的名字等資料幫你找回帳號。

請不要假設資料會自動跟著換手機。iPhone 有時會保留登入狀態，但這不一定每次都有效。

11. 刪除帳號與資料

你可以在 App 的「設定」裡直接刪除帳號，不需要聯絡我們。

一般成員刪除帳號：你的帳號和個人資料會被刪除。你記過的紀錄預設會留在家庭裡，記錄者改成「前成員」；你也可以選擇一併刪除你記的紀錄。
擁有者刪除帳號：你可以先把擁有者轉給一位可以記錄的家人。如果沒有指定，系統會自動轉給最早加入、可以記錄的家人；如果家裡只剩只能看的家人，最早加入的那一位會改成可以記錄並成為擁有者。
刪除家庭：只有擁有者可以刪除整個家庭。刪除後，這個家庭的所有寶寶資料和紀錄都會刪除，所有成員都看不到。你是家庭裡唯一的成員時，刪除帳號也會刪除整個家庭。
訂閱：刪除帳號不會停止 Apple 的訂閱扣款。請到 iPhone 的「設定」裡取消訂閱。
刪除帳號時，你的復原碼和分享碼也會一起失效，我們這邊對應 RevenueCat 的隨機編號也會刪除。

12. 你的權利與資料副本

依你所在地區的法律，你可能有權查看、更正、刪除、帶走你的資料，或限制、反對我們處理你的資料，也可以隨時撤回同意（撤回不影響之前的處理）。

索取我的資料副本：在「設定 › 隱私與資料 ›『索取我的資料副本』」申請，永遠免費。副本會在你的手機上產生，是完整、機器可讀的 JSON 格式，內容包含你的個人資料，以及你在 App 裡看得到的家庭資料。你可以用分享面板把它存起來。
你可以直接在 App 裡刪除帳號（見第 11 節）。
寶寶的權利由爸媽或法定監護人代為行使。
如果你對我們的處理方式有疑慮，可以向你所在地的個人資料保護主管機關申訴。

13. 同意與地區差異

歐盟、英國、瑞士以外：開始使用時，畫面上會有一行「繼續即表示同意條款，並確認我已成年」。按「開始記錄」或「加入家人的紀錄」就表示你同意。
歐盟、英國、瑞士，以及判斷不出地區時：開始之前會有一頁同意頁，按「同意」之後才能開始使用。
我們用 App Store 的店面地區判斷你在哪一區。
每位成員都會在自己的手機上各自同意。

14. 只給成年人使用

Nukumi 是給成年的爸媽和照顧者使用的 App，紀錄的是寶寶的資料，但使用者不是兒童。Nukumi 不以兒童為對象。開始使用時，你需要確認自己已經成年。如果你發現有未成年人自己使用 Nukumi，請透過「聯絡我們」告訴我們，我們會刪除相關資料。

15. 安全

資料在傳輸時經過加密；Google Cloud 也會加密存放的資料。
資料庫的存取規則限制只有家庭成員能讀取自己家庭的資料。
分享碼、復原碼只保存雜湊值；猜錯太多次會暫時鎖住（15 分鐘內錯 5 次，鎖 1 小時）。
我們有資料外洩的通報流程，必要時會依法通知你和主管機關。

沒有任何系統能保證百分之百安全，但我們會持續檢查和改善。

16. 政策變更

這份政策更新時，我們會修改上方的「版本日期」；有重大變更時，會在 App 裡告訴你，必要時請你再次同意。

17. 聯絡我們

有任何隱私相關的疑問，請在 App 的「設定」裡點「聯絡我們」，或直接寫信到 privacy@nukumi.app。

經營者：JC Wu
地址：臺北市
聯絡信箱：privacy@nukumi.app

隱私權政策網址：https://nukumi.app/privacy

Nukumi Privacy Policy (English)

Version date: October 27, 2026

1. About this policy

Nukumi is a baby-tracking app for parents and caregivers (iPhone first). This policy explains what data Nukumi 1.0 collects, why, where it is stored, how long we keep it, and how you can see, take with you, or delete it.

Nukumi is run by JC Wu, an individual based in Taipei City, Taiwan. "We" in this policy means the operator of Nukumi.

Nukumi helps you remember what happened. It doesn't give medical advice or make any health judgments.

2. The short version

You can start, and sync with family, without signing up. No-sign-up account: no email or phone number needed.
Your baby's logs are used only to run Nukumi for your family. We never sell your baby's data, and your baby's logs are never used for ads.
We don't show the App Tracking Transparency prompt, and we don't read the IDFA. The free version shows non-personalized ads only, only on the Stats screen, and never from 21:00 to 07:00.
You can delete your account in the app, and make a free copy of your data on your phone anytime.
Your logs don't move on their own when you delete the app or change phones. You'll need the owner's recovery code or a new invite from family (see section 10).
Accounts and families that go unused for a long time are cleared (see section 9).

3. What we collect

3.1 Your baby's logs

Logs you or your family add: feeds (nursing, bottle, pumping), sleep, diapers, and timer start and end times.
The time, time zone and note of each log, who added it (their nickname), and the platform and app version used to add it.
Your baby's nickname (optional; saved as "Baby" if left blank) and the time zone you use for care.
When you're offline, logs are saved on your phone first and sync once you're back online.
Nukumi 1.0 has no photo feature. If we add one, we'll update this policy first.

Your baby's logs may count as health-related data. We use them only to run Nukumi, and never pass them to any ad or analytics tool.

3.2 Family and account data

No-sign-up account: when you first open the app, we create a no-sign-up account (a random user ID) through Firebase Authentication, with no email or phone number needed.
Family data: family name, members' nicknames, roles (owner, can log, view only), join dates, which families you belong to, and when you last used the app (to apply the inactivity rules in section 9).
Share codes and recovery codes: we store only a hashed version of the share codes used to invite family (which can also be shown as a QR code that only the Nukumi app can scan) and of the owner's recovery code, not the codes themselves.
App Store region: we read your App Store storefront country through RevenueCat's tools to decide which consent screen to show, whether ads can appear, and your default storage region. We don't use GPS location.

3.3 Technical data the app needs to work

Firebase Remote Config: when the app starts, it fetches settings, such as which regions show ads. Google receives your country code, language, time zone, iOS version and the app's identifiers.
Firebase App Check: uses Apple's App Attest to confirm that a connection comes from the real Nukumi app, for example when a share code is redeemed, to prevent abuse.
Crash reports from Apple: if you've chosen in your iPhone's settings to share analytics with app developers, Apple provides Nukumi's crash logs to us. Apple handles this; it's an iPhone system setting, not a switch inside Nukumi. Nukumi 1.0 doesn't include any separate usage analytics or crash reporting tool.
System logs: our server code (Cloud Functions) keeps system logs. They never contain your user ID or any log content.
Website: nukumi.app is served by Firebase Hosting, which keeps standard access logs. The website doesn't load any outside scripts or fonts.

We use aggregated statistics to understand how the service is used, without any personal or baby details.

3.4 Ad-related data

See section 5.

3.5 Purchase data

Plus subscriptions are handled by Apple. We never see your card or payment details. We use RevenueCat to check purchase status; RevenueCat receives a random ID we generate (not your Nukumi account ID), your purchase records and your storefront country.

3.6 What you send us

"Contact us": opens your mail app; what you write and your email address come to us.
"Report this ad": opens your mail app with the time, storefront region, ad placement and Google's ad ID filled in. You decide whether to send it.

Please leave your baby's health details out of your emails.

3.7 Consent records

We record which version of the terms you agreed to, when, and your language, region and app version, so we can show that we have your consent.

4. How we use your data

To run Nukumi: save logs, sync with family, and show stats.
To manage families and roles: invites, removing members, handing over ownership, and account recovery with a recovery code.
To show non-personalized ads on the Stats screen in the free version, and to check Plus purchases so paying families see no ads.
To fix crashes and bugs.
To reply to emails you send us.
To protect Nukumi from abuse, such as limiting code guesses and using Firebase App Check.
To meet legal obligations.

We don't: sell your data; use your baby's logs for ads or marketing; or pass your baby's logs to any ad or analytics tool.

5. Ads

The free version of Nukumi shows Google AdMob banner ads only on the Stats screen. The Today screen (home), logging screens and timers never show ads.
Ads are non-personalized only. We don't read the IDFA and we don't show the App Tracking Transparency prompt.
No ads are loaded from 21:00 to 07:00, your phone's local time. No ads appear during your first 24 hours with the app, either.
When anyone in your family buys Plus, no one in the family sees ads.
Ads appear only in the Taiwan, Hong Kong, Canada, Australia and New Zealand App Store regions.
We use Google's consent tool (User Messaging Platform). If you're in the EU, UK or Switzerland, you may see Google's consent message first; the app starts loading ads only once ads are allowed.
The app's settings list ad networks' SKAdNetwork identifiers. This is Apple's system for telling advertisers, in aggregate, how many installs an ad led to; we don't collect any extra data because of it.
Your baby's logs and name are never sent to Google or any advertiser.

Even with non-personalized ads, Google's AdMob SDK may collect some data under Google's own policies, such as your IP address (used to estimate rough location), device identifiers, technical details about your phone and the app, crash and performance data, and how ads are shown and tapped. Google uses this to serve ads, limit how often the same ad appears, measure results and prevent fraud. For details, see:

Google Privacy Policy: https://policies.google.com/privacy
How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
AdMob data disclosure: https://developers.google.com/admob/ios/privacy/data-disclosure

6. What your family can see

A family can have up to 10 members, with one owner.
Any member can invite family with an 8-character share code that works once and expires after 24 hours, or by showing a QR code in the app for family to scan with the app. A family can have up to 3 active share codes at a time; the person who made a code, or the owner, can turn it off.
Only the owner can remove members, delete the family or hand over ownership.
Everyone in a family can see all of that family's logs, who added each one, and members' nicknames and roles. Please invite only people you trust.
After someone is removed or leaves, they can't see new logs. Logs they added stay in the family.

7. Who we share data with

We don't sell your data. We share only what's needed with service providers who help us run Nukumi, under contracts or their own terms:

Google (Firebase, Google Cloud): sign-in, database, Cloud Functions, Remote Config, App Check, website.
Google (AdMob, User Messaging Platform): ads and the consent message on the Stats screen in the free version (see section 5).
RevenueCat: checking Plus purchase status and reading your App Store storefront country.
Apple: App Store payments, App Attest, crash reports (based on your iPhone's settings), SKAdNetwork.
The email service we use to receive your emails.

We may also share data when the law requires it, or transfer it as part of a merger or acquisition; this policy's protections would still apply.

8. Where your data is stored

Nukumi uses Firebase on Google Cloud, with family data stored in one of three regions:

Europe (multi-region)
United States (multi-region)
Taiwan

When you create a family, we suggest a storage region based on your country or region, and you can change it before confirming. That family's baby data, logs and member details are stored in that region and stay there. Family members joining from other countries connect directly to the family's region.

Some data is stored outside the family's region:

Sign-in data (your random user ID) is processed by Google's Firebase Authentication in the United States.
The user directory (account data such as which families you belong to; never your baby's name or logs) and hashed share and recovery codes are stored in the Europe region.
RevenueCat, Apple and Google AdMob handle and store data under their own policies.

This means your data may be transferred outside your country or region.

9. How long we keep data

Logs and family data: kept while you use Nukumi, until you delete them or the rules below apply.
Long periods without use:
- An account with no activity for 13 months is cleared; logs it added stay in the family. If that person is the owner, ownership first passes to the earliest-joined family member who can log. If everyone else can only view, it passes to the earliest-joined of them, who also becomes able to log.
- A family whose members have all had no activity for 24 months is deleted with all its logs.
- Simply opening the app (while online) counts as activity.
- Data is cleared once the inactivity period ends, with no separate individual notice. Nukumi 1.0 has no push notifications and doesn't have your email, so we can't let you know before clearing.
Share codes: stop working after 24 hours.
Recovery codes: kept until a new one is made, ownership changes or the account is deleted.
Consent records: kept with your account.
Purchase records: Apple keeps its own purchase records, which we can't delete. RevenueCat keeps data under its own policy.
Data copies: created on your phone; our servers never keep a copy of the file.

10. Changing phones, deleting the app and getting your data back

Your logs sync to the cloud whenever you're online, but a new phone or a fresh install needs a "key" to find them:

A recovery code: 16 characters, held only by the family owner, and shown after you save your first log. Keep it somewhere safe, like a screenshot or a password manager. It changes when you become the owner or make a new one, and the old one stops working.
A new invite from family: if there are other people in your family, ask any of them for a new share code. After you rejoin, you'll see the family's shared logs again.

Nukumi 1.0 uses no-sign-up accounts, with no email or phone number needed. If you haven't saved a recovery code and there's no one else in your family, we can't tell which data is yours after you delete the app or lose your phone, so it can't be recovered. To protect your data, we also can't restore an account based only on details like your baby's name.

Please don't assume your data will follow you to a new phone by itself. Your iPhone sometimes keeps you signed in, but this doesn't always work.

11. Deleting your account and data

You can delete your account yourself in the app's Settings, without contacting us.

If you're a member: your account and personal data are deleted. By default, logs you added stay in the family, shown as from a "former member"; you can choose to delete your logs too.
If you're the owner: you can first hand ownership to a family member who can log. If you don't choose, ownership goes to the earliest-joined member who can log. If everyone else can only view, the earliest-joined of them becomes able to log and becomes the owner.
Deleting the family: only the owner can delete the whole family. All of its baby data and logs are deleted, for every member. If you're the only member, deleting your account also deletes the family.
Subscriptions: deleting your account doesn't stop Apple subscription charges. Please cancel your subscription in your iPhone's Settings.
When you delete your account, your recovery code and share codes stop working, and the random ID that links you to RevenueCat is deleted on our side.

12. Your rights and a copy of your data

Depending on where you live, you may have the right to access, correct, delete or take your data with you, to restrict or object to how we use it, and to withdraw consent at any time (this doesn't affect what we did before).

Request a copy of my data: go to Settings › Privacy & data › "Request a copy of my data". It's free, always. The copy is made on your phone in a complete, machine-readable JSON format, covering your personal data and the family data you can see in the app. You can save it with the share sheet.
You can delete your account right in the app (see section 11).
Parents or legal guardians act on behalf of their baby.
If you have concerns about how we handle your data, you can contact your local data protection authority.

13. Consent and regional differences

Outside the EU, UK and Switzerland: the first screen has one line: "By continuing, you agree to the Terms and confirm you're an adult." Tapping "Start logging" or "Join my family's logs" means you agree.
In the EU, UK and Switzerland, and when we can't tell your region: a consent page comes first, and you start after tapping "Agree".
We use your App Store storefront to tell which region applies.
Every member gives their own consent on their own phone.

14. For adults only

Nukumi is for adult parents and caregivers. It holds information about your baby, but its users are not children, and it is not directed at children. When you start, you confirm that you're an adult. If you learn that a minor is using Nukumi on their own, please let us know through "Contact us" and we'll delete the related data.

15. Security

Data is encrypted in transit, and Google Cloud encrypts stored data.
Database access rules let only family members read their own family's data.
Share and recovery codes are stored only as hashes; too many wrong guesses lock entry for a while (5 wrong tries in 15 minutes locks it for 1 hour).
We have a process for handling data breaches and will notify you and the authorities where required.

No system is 100% secure, but we keep checking and improving ours.

16. Changes to this policy

When we update this policy, we change the "Version date" above. For significant changes, we'll tell you in the app and ask for your consent again where needed.

17. Contact us

For anything about privacy, tap "Contact us" in the app's Settings, or email privacy@nukumi.app.

Operator: JC Wu
Address: Taipei City, Taiwan
Email: privacy@nukumi.app