Privacy Policy

Last updated: February 2, 2026

Giggles Club ("we", "our", or "us"), operated by Eldunari Labs, provides the Giggles Club mobile application and website (the "Service"). This Privacy Policy describes how we collect, use, store, share, and delete your data, including data obtained through Google Sign-In.

1. Data Accessed

We access the following types of data:

• Google Account Data: When you sign in with Google, we access your email address and display name from your Google account. We do not access your Google contacts, calendar, Drive, or any other Google services.
• Account Information: Email address, display name, and authentication credentials when you create an account with email/password.
• Child Health Data: Growth measurements, vaccination records, milestone tracking, daily care logs (feeding, sleep, medicine, allergies, symptoms, temperature, stool, urine), dental records, and medical history that you voluntarily enter.
• Device Information: Device type, operating system, and push notification tokens on mobile devices.
• Uploaded Images: Photos of vaccination cards or medical documents you voluntarily upload for AI-assisted data extraction.

2. Data Usage

We use the data we collect as follows:

• Google email and name are used solely for account authentication and to display your name within the app. We do not use Google data for advertising or profiling.
• Child health data is used to provide the app's health tracking, growth charts, vaccination schedules, milestone tracking, and daily care features.
• Push notification tokens are used to send vaccine reminder notifications on mobile devices.
• Uploaded images are sent to Google Gemini AI for one-time processing to extract health data. Images are not stored after processing.
• Email address is used to send optional email summaries and health report PDFs that you request.

3. Data Sharing

We do not sell, trade, or rent your personal data or Google user data to any third parties. Data is shared only with the following service providers, strictly for app functionality:

• Firebase (Google) — authentication and database storage. Governed by Google's Privacy Policy.
• Google Gemini AI — processes vaccination card and medical document images you upload. Image data is sent for one-time extraction and is not retained by the AI service.
• Resend — sends email summaries and health report PDFs to your own email address when you request them.
• Expo Push Notification Service — delivers vaccine reminder notifications to your mobile device.
• Care Team Members: When you explicitly invite a caregiver or doctor via an invite code, they gain access to the invited child's health records. You can revoke access at any time.

We may also disclose data if required by law or to protect our legal rights.

4. Data Storage & Protection

All user data is stored in Google Cloud Firestore with encryption at rest and in transit (TLS). Authentication is handled through Firebase Authentication. We do not store Google account passwords. Access to data is restricted to the authenticated user and any care team members they explicitly invite. Push notification tokens are stored per-device and deleted when the account is deleted.

5. Data Retention & Deletion

Your data is retained for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Delete Account within the app. Account deletion removes:

• All child profiles and associated health records (growth, vaccinations, milestones, daily care logs, medical history, dental records)
• Push notification tokens
• Invite codes and care team relationships
• Email preferences and report export history
• Your user profile document
• Your Firebase Authentication account

Deletion is immediate and irreversible. You may also request data deletion by emailing [email protected].

6. Children's Privacy

The Service is designed for parents, caregivers, and healthcare providers to track children's health. We do not knowingly collect data directly from children. All child health data is entered and managed by authenticated adult users.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

[email protected]