NiniPrivacy Policy
This policy explains how Nini collects, uses, shares and protects personal data, in line with Brazil's General Data Protection Law (LGPD, Law 13,709/2018) and equivalent principles in other jurisdictions. We wrote it in plain language because you are trusting us with information about your baby.
1. Who we are
The data controller is Claudio H Soler, an individual based in Brazil, responsible for the Nini app and the website nini.onportglobal.com.
Contact for any privacy matter (including our data protection contact): nini@onportglobal.com.
2. Data we collect
We collect only what is needed for the app to work:
- Account data: name, email and password (stored securely) or, where available, sign-in through a third-party provider.
- Baby data you enter: name, photo (optional), date and time of birth, and sex/gender if you choose to provide it.
- Care records: feedings, diapers and bowel movements, sleep, gas and colic, temperature, medications you log, vaccines, appointments, weight, length, head circumference, symptoms, developmental milestones and notes you write.
- Family and caregiver data: name, email, role (guardian or caregiver), permissions and who made each entry.
- Technical data: device identifier for push notifications, operating system, app version, language, and error and performance logs.
- Messages you send us through the support email.
We do not collect your precise location, your contacts or payment data inside the app. If the app asks for camera or photo access, it is only so you can choose the baby's photo.
3. Why we use data and on what legal basis
- Providing the service (creating an account, saving and syncing entries, inviting caregivers, generating reports): performance of a contract and consent.
- Sending notifications and reminders you configure: consent.
- Security and prevention of abuse and fraud: legitimate interest and compliance with legal obligations.
- Improving the app with error and performance statistics that do not identify the baby: legitimate interest.
- Answering support requests and data subject rights requests: compliance with legal obligations and legitimate interest.
Health information (such as temperature, symptoms and medications) is sensitive personal data. It is only recorded because you choose to enter it, and it is processed based on your consent for the purpose of tracking your baby's care. You can withdraw consent at any time by deleting the entries or the account.
Summary and analysis features are informational. They do not diagnose and do not replace your pediatrician.
4. Children's data
Nini is intended for parents, guardians and adult caregivers. It is not an app for use by children. The baby's data is entered by the guardian, who declares having the authority to do so.
We process children's data always in the best interest of the child, with specific and prominent consent from at least one parent or legal guardian.
We do not use children's data for advertising, behavioral profiling or sale to third parties. The app shows no ads.
5. Who we share data with
We do not sell personal data. We share it only:
- With caregivers you invite, within the permissions you set.
- With service providers (processors) that host and operate the app, such as database and authentication (Supabase), push notification delivery (Apple, Google and Expo services) and error monitoring. They may only use data to provide services to us, under contract.
- With authorities, when required by law or court order.
- With a healthcare professional, only if you generate and share a report yourself.
6. International transfers
Our providers may store data on servers outside Brazil. In those cases we rely on appropriate safeguards, such as contractual clauses and providers with adequate security standards.
7. How long we keep data
We keep data while your account is active. When you delete it, data is erased within 30 days, and backups are removed on a rolling basis within up to 30 more days. We may keep the minimum required by law.
8. Security
- Encryption of data in transit (HTTPS/TLS) and protection of stored data.
- Isolation by family: a caregiver can only see the babies they were invited to.
- Minimum permissions and the ability to revoke any caregiver's access immediately.
- Monitoring for errors and improper access.
No system is completely immune to failures. If an incident that may create a relevant risk occurs, we will notify you and the competent authority as required by law.
9. Your rights
You may at any time: confirm whether we process your data; access it; correct it; anonymize, block or delete unnecessary data; request portability; know who we share it with; withdraw consent; and object to processing. You may also complain to your data protection authority.
To exercise your rights, write to nini@onportglobal.com. We reply within 15 days. Deletion and export are also available inside the app.
10. Website and cookies
The website nini.onportglobal.com is informational. It does not use advertising or tracking cookies. We may log basic technical access data (such as IP address and browser) for security and our hosting provider's statistics.
11. Changes to this policy
We may update this policy. For relevant changes we will notify you in the app or by email. The date of the last update is shown at the top of this page.
12. Contact
Privacy questions: nini@onportglobal.com.