Effective date: 1 December 2025
Last updated: 28 September 2026
This Notice supplements the Caring Mother Privacy Policy for consumer health data covered by the Washington My Health My Data Act and similar laws in Nevada, Connecticut, and other U.S. states. If this Notice conflicts with the general Privacy Policy regarding covered consumer health data, this Notice controls.
The regulated entity is Buslovskyi Pavlo, trading as OBRIY soft, Brovary, Ukraine. Contact: pavlo.buslowski@gmail.com.
Consumer health data is personal information linked or reasonably linkable to a person that identifies or can be used to infer physical or mental health status. Caring Mother may collect the following information entered by an adult caregiver about a child:
feeding method, food or milk type, amounts, breastfeeding and pumping sides and durations, and feeding-related tags;
sleep and falling-asleep times and durations;
diaper and bowel-movement information, including consistency and color;
physical activity and care routines;
weight, height, head circumference, temperature, and related measurements;
medicine name, amount, unit, and administration time;
vaccination names and dates;
age, date of birth, and sex where linked to the above information;
free-text notes and saved medicine, vaccination, or food suggestions; and
inferences and summaries generated directly from those entries, including charts, totals, and patterns.
The app also processes account identifiers and technical information needed to associate these records with the correct account. We do not collect precise location, biometric identifiers, genetic data, medical-provider records, insurance records, or HealthKit/Health Connect data.
We collect consumer health data directly from the adult user who types, selects, edits, or times an event in the app. We do not buy it from data brokers or obtain it from clinicians, insurers, pharmacies, connected medical devices, or public records.
We collect and use consumer health data only to provide the Service requested by the user, including saving and synchronizing records, showing histories and charts, operating timers, producing exports, preserving user-selected suggestions, supporting the account, maintaining security, and complying with law.
We do not use consumer health data for targeted advertising, data-broker activity, determining eligibility for employment, housing, insurance, credit, or healthcare, or training unrelated general-purpose AI models. We do not geofence healthcare facilities.
We will not collect a new category or use covered data for a materially new purpose without updating this Notice and obtaining affirmative consent when required.
We disclose the categories above only as necessary to provide a user-requested feature or with a separate legally valid authorization:
Google/Firebase as processor: account identifiers, child profiles, care records, notes, suggestions, and subscription association records are stored or processed through Firebase Authentication, Cloud Firestore, Cloud Functions, and supporting infrastructure.
A recipient selected by the user: an export may contain the selected child’s name and filtered care records when the user shares a CSV or PDF through the operating system.
Legal, security, and professional recipients: limited information may be disclosed to advisers, authorities, emergency responders, or security providers where legally permitted and necessary.
Firebase Analytics receives product-interaction events but is not intentionally sent the child profile or event-record fields listed above as custom analytics parameters. Apple and Google store services receive subscription and app-account information, not the care log, as part of purchase processing.
We do not sell consumer health data. We do not share it with affiliates.
Subject to applicable law, you may:
confirm whether we collect, share, or sell consumer health data;
access that data and receive a portable copy;
obtain a list of third parties and affiliates with whom covered data was shared or sold, including available contact information;
correct inaccurate data;
withdraw consent for future collection or sharing;
request deletion, including notification to processors and other recipients where required;
opt out of a sale (we do not sell covered data);
receive equal service without unlawful discrimination for exercising rights; and
appeal our refusal to act.
Request account deletion in the app under Settings → Delete account, or send any request by email to pavlo.buslowski@gmail.com. We will authenticate requests using information reasonably related to the account and sensitivity of the data. We will not require creation of a new account. We normally respond within 45 days and may extend once where permitted after giving notice.
To appeal, email pavlo.buslowski@gmail.com with the subject Consumer health privacy appeal within 30 days of our decision. We will respond within 45 days. If an appeal is denied, Washington residents may contact the Washington Attorney General; residents of other states may contact their applicable state regulator.
Deleting an account is intended to delete covered cloud records and notify relevant processors as required. Provider backups may take time to cycle out; where the Washington law applies, deletion from archived or backup systems will not be delayed beyond the legally permitted period. Local files, exported copies, and copies held by a recipient selected by you may require separate deletion.
Withdrawing consent stops future collection or sharing covered by that consent but may require us to disable synchronization or other core features. It does not affect processing already performed lawfully.
We will not collect, use, or share additional categories of consumer health data or use them for additional purposes not disclosed here without prior disclosure and affirmative consent where required. General acceptance of our Terms of Use is not treated as consent where the law requires a separate, specific choice.
Contact: pavlo.buslowski@gmail.com
Postal address: Buslovskyi Pavlo (OBRIY soft), Brovary, Ukraine