Consumer Health Data Privacy Policy

This policy explains how APPROVEX LLC, the company behind the Baby Soma app and website ("we", "us"), collects, uses and shares consumer health data under the Washington My Health My Data Act, Nevada law (SB 370) and similar laws of other U.S. states. It adds to our Privacy Policy. Baby Soma is used by parents and guardians, who exercise these rights for themselves and for their child.

1. Consumer health data we collect

• Health diary entries you choose to add for your child: temperature readings and how they were measured, medicine names with doses and notes, vaccinations with reactions and the next vaccination date, illness periods and their reason, and health reminders.
• Vaccinations you choose to add from a photo of a vaccination record. We use the photo only to recognize the entries and keep neither the photo nor the recognized text; only the entries you save are stored.
• Sick mode and teething periods you mark, and the sleep, feeding and growth records (such as height and weight) you log, to the extent they reveal your child's health.
• Health information you choose to include in messages to the AI assistant, in the family chat or to our support.

2. Why we collect it and how we use it

• To provide the features you use: the health diary, sleep tracking and schedules, growth and feeding logs, reminders, charts and the PDF reports you create.
• To answer your questions in the AI assistant. The assistant receives a summary of sleep data, including Sick mode and teething periods. It receives a summary of the health diary only if you allow it in the Health section menu ("Soma uses the diary").
• To recognize vaccination entries when you add them from a photo.
• To answer your support requests.
• To keep the service secure and working.

We do not use consumer health data for advertising and we do not sell it.

3. Where it comes from

• From you: what you enter in the app, the photos you choose to scan and the messages you send.
• From family members you invite to your child's profile: they can add and edit the same entries.

We do not buy health data and do not receive it from other companies or health apps.

4. What we share and with whom

We share consumer health data only as needed to provide the service you asked for: health diary entries and summaries, sleep, feeding and growth records, the vaccination photos you scan, and health information in your messages. Recipients:

• Family members you invite: everyone with access to your child's profile sees the same diary, sleep, feeding and growth records.
• Cloud hosting and database providers (Google Cloud / Firebase), which store the app's data on our behalf.
• AI service providers that generate the assistant's replies and recognize vaccination photos on our behalf. They receive your question with the summaries described above, and the photo when you scan a vaccination record.
• Support tools: the email service and the private Telegram group our support team uses, when you include health information in a message to support.
• Authorities, only when the law requires it, for example in response to a valid legal request.

We do not share consumer health data with advertisers or advertising networks, including Meta and Google AdMob, and no affiliate of ours receives it. Advertising partners such as Meta and Google may receive app usage events, such as an install, a started trial or a purchase, as described in our Privacy Policy; they do not receive the health data described in this policy.

5. Your rights

• Confirm and access: ask whether we collect, share or sell your consumer health data, get a copy of it, and get a list of all third parties and affiliates with whom we have shared it, with an email address or online form to contact each of them.
• Correct: edit or delete any entry in the app at any time.
• Delete: ask us to delete your consumer health data. We delete it from our systems and tell the service providers and third parties with whom we shared it. If copies remain in backups, they are deleted when those backups expire, no later than 6 months after your request. You can also delete entries, a child profile or your whole account in the app (Settings -> Delete Account).
• Withdraw consent: turn off "Soma uses the diary" in the Health section menu at any time, or ask us.
• Stop collection or sharing (Nevada residents, and residents of other states where the law allows it): ask us to stop collecting or sharing your consumer health data. Some features, such as the health diary, cannot work without it.

We will not treat you differently for using these rights.

6. How to make a request or appeal

• Email support@babysoma.app with the subject "Consumer health data request", from the email of your Baby Soma account or telling us the email or phone number you sign in with. We may ask you to confirm that the account is yours.
• We respond within 45 days. If we need more time, we will tell you why, and the extension will not exceed another 45 days. Requests are free up to twice a year.
• If we decline your request, you can appeal by replying to our answer with the subject "Appeal". We will respond within 45 days and explain our decision. If we deny the appeal, you can submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint or contact the attorney general of your state.

7. Changes

We will post changes on this page and update the effective date. We will tell you about significant changes in the app or by email.

8. Contact

APPROVEX LLC
5830 East 2nd Street
Ste 7000 #18761
Casper, Wyoming 82609
Email: support@babysoma.app